volatilityfoundation / volatility

An advanced memory forensics framework
http://volatilityfoundation.org/
GNU General Public License v2.0
7.21k stars 1.27k forks source link

windows.netscan type error #843

Open djmcmanus3 opened 1 year ago

djmcmanus3 commented 1 year ago

Getting "TypeError: unsupported operand type(s) for +: 'NoneType' and 'str' on netstat command. Haven't noticed it on any plugins.

Traceback (most recent call last):
  File "/usr/local/bin/vol", line 33, in <module>
    sys.exit(load_entry_point('volatility3==2.4.1', 'console_scripts', 'vol')())
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/site-packages/volatility3-2.4.1-py3.11.egg/volatility3/cli/__init__.py", line 797, in main
    CommandLine().run()
  File "/usr/local/lib/python3.11/site-packages/volatility3-2.4.1-py3.11.egg/volatility3/cli/__init__.py", line 445, in run
    renderers[args.renderer]().render(constructed.run())
  File "/usr/local/lib/python3.11/site-packages/volatility3-2.4.1-py3.11.egg/volatility3/cli/text_renderer.py", line 193, in render
    grid.populate(visitor, outfd)
  File "/usr/local/lib/python3.11/site-packages/volatility3-2.4.1-py3.11.egg/volatility3/framework/renderers/__init__.py", line 241, in populate
    for level, item in self._generator:
  File "/usr/local/lib/python3.11/site-packages/volatility3-2.4.1-py3.11.egg/volatility3/framework/plugins/windows/netstat.py", line 585, in _generator
    for netw_obj in self.list_sockets(
  File "/usr/local/lib/python3.11/site-packages/volatility3-2.4.1-py3.11.egg/volatility3/framework/plugins/windows/netstat.py", line 493, in list_sockets
    for endpoint in cls.parse_partitions(
  File "/usr/local/lib/python3.11/site-packages/volatility3-2.4.1-py3.11.egg/volatility3/framework/plugins/windows/netstat.py", line 289, in parse_partitions
    tcpip_symbol_table + constants.BANG + "PartitionTable"
    ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~
TypeError: unsupported operand type(s) for +: 'NoneType' and 'str'