Package rekall :: Package plugins :: Module core :: Class VtoPMixin
[frames] | no frames]

Class VtoPMixin

source code


Prints information about the virtual to physical translation.

Instance Methods
 
__init__(self, virtual_address=(), **kwargs)
Prints information about the virtual to physical translation.
source code
 
render(self, renderer) source code
 
render_address(self, renderer, vaddr) source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Methods
 
args(cls, parser) source code
Class Variables
  name = 'vtop'
  PAGE_SIZE = 4096
Properties

Inherited from object: __class__

Method Details

__init__(self, virtual_address=(), **kwargs)
(Constructor)

source code 
Prints information about the virtual to physical translation.

This is similar to windbg's !vtop extension.

Args:
  virtual_address: The virtual address to describe.
  address_space: The address space to use (default the
    kernel_address_space).

Overrides: object.__init__