ninja2017

Results 5 comments of ninja2017

Yes, thank you. I create the appropriate symbol file for the version of Centos 8. But there are new problems. [root@localhost volatility3]# python3 vol.py -vvvvvv -f CentOS8.vmem linux.pslist.PsList Volatility 3...

I think "symbol file" is still incorrect. But I don't know what went wrong. ![system-map](https://user-images.githubusercontent.com/29820300/138622968-d07e6439-ddb5-4f88-84f0-86d2ce6044ff.PNG) ![vmlinux](https://user-images.githubusercontent.com/29820300/138622972-0d186359-1578-4e2b-a953-e2340d8bb6a5.PNG) ![kernel-info](https://user-images.githubusercontent.com/29820300/138623572-348585d1-0b85-4a3c-a6db-27b9d9e22b07.PNG)

![banner](https://user-images.githubusercontent.com/29820300/138623970-39d6a7ce-abc9-4314-b7e8-224bf734a9b1.PNG) ![isinfo](https://user-images.githubusercontent.com/29820300/138623973-80bbdde4-7e80-4186-962d-bf38200208ca.PNG)

I used the same method for centos7 and found the following error Level 8 volatility3.framework.automagic.symbol_cache: Caching file jar:file:/root/dwarf2json/volatility3/volatility3/symbols/linux.zip!linux/centos7.3.10.json.xz failed due to JSON error Level 8 volatility3.framework.automagic.symbol_cache: Caching file jar:file:/root/dwarf2json/volatility3/volatility3/symbols/linux.zip!linux/centos7-3.10.json.xz failed...

I found that I didn't have enough memory, so I didn't complete "Symbols". But there are still problems with centos7. (base) [root@localhost volatility3]# python vol.py -vvvvvv -f CentOS7-1160.vmem linux.pslist.PsList Volatility...