FS_SysInfo_Network
The directory sys/net exists as a sub-directory to the file system root.
The directory contains networking related information.
The files in the sys/net directory are listed in the table below:
| File | Description |
|---|---|
| net/netstat.txt | Netstat list of TCP connections. |
| net/netstat-v.txt | Netstat verbose version - also list time, kernel object address and process image path. |
| net/dns/readme.txt | DNS readme. |
| net/dns/dns.txt | DNS information cached by the operating system. |
Files in the sys/net directory are read-only.
The file net/netstat.txt contains a listing of active TCP connections similar to netstat -ano.
TCPv4 10.8.0.101:53176 10.8.0.5:445 ESTABLISHED 4 System
TCPv4 127.0.0.1:58326 127.0.0.1:58325 ESTABLISHED 2936 firefox.exe
TCPv4 10.8.0.101:57372 40.67.251.132:443 ESTABLISHED 3796 svchost.exe
TCPv4 10.8.0.101:58523 169.254.164.112:7680 SYN_SENT 4192 svchost.exe
TCPv6 [::1]:58228 [::1]:28473 ESTABLISHED 10416 MemProcFS.exe
TCPv6 [::1]:58231 [::1]:28473 ESTABLISHED 10416 MemProcFS.exe
TCPv4 10.8.0.101:57644 13.93.117.220:443 ESTABLISHED 11824 vsls-agent.exe
TCPv4 127.0.0.1:57949 127.0.0.1:57950 ESTABLISHED 13192 firefox.exe
TCPv6 [::1]:28473 [::1]:58231 ESTABLISHED 17180 leechagent.exe
TCPv6 [::1]:28473 [::1]:58228 ESTABLISHED 17180 leechagent.exe
...
The file net/dns/dns.txt.txt contains DNS information cached by the operating system (if possible to recover). Note that DNS information retrieved directly by applications such as browsers using DNS over HTTPS (DoH) is not cached by the operating system and is not retrieved by the MemProcFS DNS module.
# Address Type TTL Name Data
----------------------------------------------------------------------------
0000 0222f3d1aa50 CNAME 1318 17d98a59.akstat.io wildcard.akstat.io.edgekey.net
0001 0222f2ef8d50 PTR 604800 33.241.17.172.in-addr.arpa. SANS-SIFT.mshome.net
0002 0222f2efedd0 ALL 2306 83.162.174.173.b.barracudacentral.org
0003 0222f2efee50 ALL 2306 83.162.174.173.cbl.abuseat.org
0004 0222f2efec10 ALL 2306 83.162.174.173.dnsbl-1.uceprotect.net
0005 0222f2e6b110 ALL 2306 83.162.174.173.spam.dnsbl.sorbs.net
0006 0222f2efe9d0 ALL 2306 83.162.174.173.zen.spamhaus.org
0007 0222f3d03500 CNAME 105 Edge-Prod-DALr3.ctrl.t-0001.t-msedge.net standard.t-0001.t-msedge.net
0008 0222f2e58a00 A 604800 SANS-SIFT.mshome.net 172.17.241.33
0009 0222f2efe810 AAAA 604800 SANS-SIFT.mshome.net
000a 0222f3d187d0 CNAME 1318 a-0001.a-afdentry.net.trafficmanager.net dual-a-0001.a-msedge.net
000b 0222f3d183c0 A 1318 a-0003.a-msedge.net 204.79.197.203
000c 0222f3d1a140 A 1318 a-0003.a-msedge.net 204.79.197.203
...
The example shows the sys/net directory and the ordinary non-verbose networking information.
The sys/net sub-directory is implemented as a built-in native C-code plugin. The plugin source is located in the file modules/m_sys_net.c in the vmm project.
The sys/net/dns sub-directory is implemented as a built-in native C-code plugin. The plugin source is located in the file modules/m_sys_netdns.c in the vmm project.