| Trees | Indices | Help |
|
|---|
|
|
Walks the global list of interfaces. The head of the list of network interfaces is a kernel global [1]. The struct we use [2] is just the public part of the data [3]. Addresses are related to an interface in a N:1 relationship [4]. AF-specific data is a normal sockaddr struct. References: 1: https://github.com/opensource-apple/xnu/blob/10.9/bsd/net/dlil.c#L254 2: https://github.com/opensource-apple/xnu/blob/10.9/bsd/net/if_var.h#L528 3: https://github.com/opensource-apple/xnu/blob/10.9/bsd/net/dlil.c#L188 4: https://github.com/opensource-apple/xnu/blob/10.9/bsd/net/if_var.h#L816
| Nested Classes | |
|
__metaclass__ Automatic Plugin Registration through metaclasses. (Inherited from rekall.kb.ParameterHook) |
|
|
top_level_class A mechanism for automatically calculating a parameter. (Inherited from rekall.kb.ParameterHook) |
|
| Instance Methods | |||
|
|||
|
|||
|
Inherited from |
|||
| Class Methods | |||
|
|||
|
|||
|
|||
| Class Variables | |
name = hash(x) |
|
IFNET_HEAD_NAME =
|
|
classes =
(Inherited from rekall.kb.ParameterHook)
|
|
classes_by_name =
(Inherited from rekall.kb.ParameterHook)
|
|
expiry = Nonehash(x) (Inherited from rekall.kb.ParameterHook) |
|
mode = hash(x) (Inherited from rekall.plugins.darwin.common.DarwinOnlyMixin) |
|
plugin_feature =
(Inherited from rekall.kb.ParameterHook)
|
|
volatile = True
(Inherited from rekall.kb.ParameterHook)
|
|
| Properties | |
|
Inherited from |
| Method Details |
Derive the value of the parameter.
|
|
|
| Trees | Indices | Help |
|
|---|
| Generated by Epydoc 3.0.1 on Mon Oct 9 03:28:09 2017 | http://epydoc.sourceforge.net |