lib.cuckoo.common.netlog.BsonParser

Package lib :: Package cuckoo :: Package common :: Module netlog :: Class BsonParser |
[hide private]
[frames] | no frames]

# Class BsonParser

source code

                   object --+
                            |
    abstracts.ProtocolHandler --+
                                |
                               BsonParser

Receives and interprets .bson logs from the monitor.

The monitor provides us with "info" messages that explain how the function arguments will come through later on. This class remembers these info mappings and then transforms the api call messages accordingly.

Other message types typically get passed through after renaming the keys slightly.

Instance Methods | [hide private]
init(self) | source code
resolve_flags(self, apiname, argdict, flags) | source code
determine_unserializers(self, arginfo) Determines which unserializers (or converters) have to be used in order to parse the various arguments for this function call. | source code
__iter__(self) | source code
Inherited from `abstracts.ProtocolHandler`: `__init__`, `close` Inherited from `object`: `__delattr__`, `__format__`, `__getattribute__`, `__hash__`, `__new__`, `__reduce__`, `__reduce_ex__`, `__repr__`, `__setattr__`, `__sizeof__`, `__str__`, `__subclasshook__`

Class Variables | [hide private]
| converters_32bit = `{None: default_converter_32bit, "p": pointe`...``
| converters_64bit = `{None: default_converter_64bit, "p": pointe`...``

Properties | [hide private]
Inherited from `object`: `__class__`

Method Details | [hide private]

### init(self) | source code
Overrides: abstracts.ProtocolHandler.init

### determine_unserializers(self, arginfo) | source code
Determines which unserializers (or converters) have to be used in order to parse the various arguments for this function call. Keeps in mind whether the current bson is 32-bit or 64-bit.

Class Variable Details | [hide private]

  ### converters_32bit Value:
      {None: default_converter_32bit, "p": pointer_converter_32bit, "x": poi
      nter_converter_32bit,}

  ### converters_64bit Value:
      {None: default_converter_64bit, "p": pointer_converter_64bit, "x": poi
      nter_converter_32bit,}