libyal / dtformats Goto Github PK
View Code? Open in Web Editor NEWCollection of data formats
License: Apache License 2.0
Collection of data formats
License: Apache License 2.0
The name libyal was initially a pun on the naming theme of the various library projects. Now it serves the purpose of providing an overview of the available projects in a single location and as a home for scripts to help maintain the projects. For more information see: * Project documentation: https://github.com/libyal/libyal/wiki/Home * Overiew of available projects: https://github.com/libyal/libyal/wiki/Overview
Hello Joachim,
I think you should round at the early stage of calculating te timebase.
Had some differences comparing to the old output.
Best regards,
Ruud
@@ -4164,7 +4170,7 @@ class TraceV3File(data_format.BinaryDataFile):
if self._timesync_boot_record:
self._timesync_timebase = (
- self._timesync_boot_record.timebase_numerator //
+ self._timesync_boot_record.timebase_numerator /
self._timesync_boot_record.timebase_denominator)
--- a/dtformats/unified_logging.py
+++ b/dtformats/unified_logging.py
@@ -2834,12 +2834,12 @@ class TraceV3File(data_format.BinaryDataFile):
timesync_record = self._GetTimesyncRecord(continuous_time)
if timesync_record:
continuous_time -= timesync_record.kernel_time
- timestamp = timesync_record.timestamp + (
- continuous_time * self._timesync_timebase)
+ timestamp = int(timesync_record.timestamp + (
+ continuous_time * self._timesync_timebase))
elif self._timesync_boot_record:
- timestamp = self._timesync_boot_record.timestamp + (
- continuous_time * self._timesync_timebase)
+ timestamp = int(self._timesync_boot_record.timestamp + (
+ continuous_time * self._timesync_timebase))
Section 2.3, the fields beginning with Sub chunk tag 0x6102 are off by 12 bytes. The Hardware model string field begins at offset 104 and is 32 bytes wide. The next field should begin at offset 136 (104+32) but the documentation says the offset is 124. I verified with a tracev3 file and it should be 136. Perhaps you were thinking in hex? 32 == x20, 104 + x20 == 124? ;-)
I wish to complete the dsc parser under unified_logging.py as well as expand the documentation to account for version 2 of the file (as of iOS15).
look at different lastlog formats
Look into Chrome leveldb / IndexedDB format
I wish to create a parser under unified_logging.py for timesync files.
Replace skipUnlessHasTestFile decorator with unittest.SkipTest
I wish to add functions to parse the Oversize (0x6002) and Statedump (0x6003) chunks found within the compressed blocks of Chunkset chunks.
I wish to expand the tracev3 parser under unified_logging.py
Move debug information to dtFormats debug files
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.