volatility3.framework.renderers.conversion module

convert_ipv4(ip_as_integer)[source]
convert_ipv6(packed_ip)[source]
convert_network_four_tuple(family, four_tuple)[source]

Converts the connection four_tuple: (source ip, source port, dest ip, dest port)

into their string equivalents. IP addresses are expected as a tuple of unsigned shorts Ports are converted to proper endianess as well

convert_port(port_as_integer)[source]
round(addr, align, up=False)[source]

Round an address up or down based on an alignment.

Parameters
  • addr (int) – the address

  • align (int) – the alignment value

  • up (bool) – Whether to round up or not

Return type

int

Returns

The aligned address

unixtime_to_datetime(unixtime)[source]
Return type

Union[BaseAbsentValue, datetime]

wintime_to_datetime(wintime)[source]
Return type

Union[BaseAbsentValue, datetime]