volatility3 icon indicating copy to clipboard operation
volatility3 copied to clipboard

netstat plugin shows "ValueError: too many values to unpack (expected 2)"

Open siftuser opened this issue 2 years ago • 2 comments

Describe the bug netstat plugin shows "ValueError: too many values to unpack (expected 2)"

Context Volatility Version: Volatility 3 Framework 2.3.0 Operating System: Ubuntu Python Version: 3.10 Suspected Operating System: Win 10 Build: 19042. Command: vol -f mem.raw windows.netstat

siftuser avatar Aug 02 '22 14:08 siftuser

Hello, @siftuser I think we need a little more logs to investigate the error. Could you please provide the results using -vvvv?

> python3 vol.py -f mem.raw -vvvv windows.netstat

digitalisx avatar Aug 08 '22 05:08 digitalisx

Hello there! I am having the same issue.

Context Volatility Version: Volatility 3 Framework 2.3.0 Operating System: Mac OS 12.3.1 Python Version: 3.9.9 Suspected Operating System: Win 7 SP1 x64 Command: python3 vol.py -f mem.raw -vvvv windows.netstat

It works using Volatility 2.6 Mac standalone, but not using Volatility3. Executing above command renders the output in the attached log file. log.txt

test12345uu avatar Aug 12 '22 21:08 test12345uu

Thank you to everyone for reporting and interesting in this issue. This would have been resolved by this commit (https://github.com/volatilityfoundation/volatility3/commit/1f1355711d08e5e62b27156e5d186e3ed59366b2). The issue will be closed by the maintainer, and if you have any additional problems, please open the issue again at any time.

digitalisx avatar Aug 30 '22 10:08 digitalisx