Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Netstat.yaml - fixed Bug #3417

Merged
merged 1 commit into from
Apr 15, 2024
Merged

Conversation

hendrkss
Copy link
Contributor

OSPath[2] is the wrong path. The PID is mentioned in OSPath[1]. Anyhow, this Artifact should not be used any longer as it is not using connections(). Use NetstatEnriched instead. Maybe this artifact should be deleted.

OSPath[2] is the wrong path. The PID is mentioned in OSPath[1]. Anyhow, this Artifact should not be used any longer as it is not using connections(). Use NetstatEnriched instead. Maybe this artifact should be deleted.
@scudette
Copy link
Contributor

Thanks for this fix- actually the connections() plugin should be deprecated on Linux because it ends up calling the function from go-psutils. We have been trying to deprecate go-psutils because that library sometimes hides very expensive operations behind common APIs - so on some operating systems innocent looking calls end up being really expensive.

As it is on Linux the connections() plugin ends up doing exactly the same thing as thing artfact anyway (i.e. looking through proc) but it is less flexible so this artifact is actually better.

@scudette scudette merged commit dd6a9b4 into Velocidex:master Apr 15, 2024
3 checks passed
scudette pushed a commit that referenced this pull request Apr 25, 2024
OSPath[2] is the wrong path. The PID is mentioned in OSPath[1]. Anyhow,
this Artifact should not be used any longer as it is not using
connections(). Use NetstatEnriched instead. Maybe this artifact should
be deleted.
scudette pushed a commit that referenced this pull request Apr 25, 2024
OSPath[2] is the wrong path. The PID is mentioned in OSPath[1]. Anyhow,
this Artifact should not be used any longer as it is not using
connections(). Use NetstatEnriched instead. Maybe this artifact should
be deleted.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants