{"action":"created","issue":{"url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/162","labels_url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/162/labels{/name}","comments_url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/162/comments","events_url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/162/events","html_url":"https://github.com/volatilityfoundation/volatility/issues/162","id":54340191,"number":162,"title":"linux_pslist => Requested symbol wall_to_monotonic / total_sleep_time not found in module kernel","user":{"login":"masdif","id":8524385,"avatar_url":"https://avatars.githubusercontent.com/u/8524385?v=3","gravatar_id":"","url":"https://api.github.com/users/masdif","html_url":"https://github.com/masdif","followers_url":"https://api.github.com/users/masdif/followers","following_url":"https://api.github.com/users/masdif/following{/other_user}","gists_url":"https://api.github.com/users/masdif/gists{/gist_id}","starred_url":"https://api.github.com/users/masdif/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/masdif/subscriptions","organizations_url":"https://api.github.com/users/masdif/orgs","repos_url":"https://api.github.com/users/masdif/repos","events_url":"https://api.github.com/users/masdif/events{/privacy}","received_events_url":"https://api.github.com/users/masdif/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"atcuno","id":414569,"avatar_url":"https://avatars.githubusercontent.com/u/414569?v=3","gravatar_id":"","url":"https://api.github.com/users/atcuno","html_url":"https://github.com/atcuno","followers_url":"https://api.github.com/users/atcuno/followers","following_url":"https://api.github.com/users/atcuno/following{/other_user}","gists_url":"https://api.github.com/users/atcuno/gists{/gist_id}","starred_url":"https://api.github.com/users/atcuno/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/atcuno/subscriptions","organizations_url":"https://api.github.com/users/atcuno/orgs","repos_url":"https://api.github.com/users/atcuno/repos","events_url":"https://api.github.com/users/atcuno/events{/privacy}","received_events_url":"https://api.github.com/users/atcuno/received_events","type":"User","site_admin":false},"milestone":null,"comments":3,"created_at":"2015-01-14T16:10:08Z","updated_at":"2015-01-21T13:36:38Z","closed_at":null,"body":"Using `linux_pslist` with\r\n* Manjaro Linux Xfce 0.8.11 (64 bit), kernel 3.16.7.3-1-MANJARO\r\n* openSUSE 13.2 (64 bit), kernel 3.16.7-7-desktop\r\n* Ubuntu Desktop 14.04.1 LTS (64 bit), kernel 3.13.0-32-generic\r\nhas no time in output.\r\n\r\nManjaro standard kernels don't come with a System.map file. Therefore I took it from vmlinux:\r\n```bash\r\n$ nm /usr/lib/modules/3.16.7.3-1-MANJARO/build/vmlinux > System.map-`uname -r`\r\n```\r\n\r\nAll three memory dumps and Volatility profiles can be provided on request via download link.\r\n\r\nFollowing the Manjaro output; openSUSE and Ubuntu are similar:\r\n```bat\r\nD:\\vol>volatility-2.4.standalone.exe --plugins=. -f manjaro.lime --profile LinuxManjaro_Xfce_0_8_11_3_16_7_3-1-MANJAROx64 linux_pslist\r\nVolatility Foundation Volatility Framework 2.4\r\nOffset             Name                 Pid             Uid             Gid    DTB                Start Time\r\n------------------ -------------------- --------------- --------------- ------ ------------------ ----------\r\n0xffff88003d9f8000 systemd              1               0               0      0x000000003c553000\r\n0xffff88003d9f8a30 kthreadd             2               0               0      ------------------\r\n0xffff88003d9f9460 ksoftirqd/0          3               0               0      ------------------\r\n0xffff88003d9f9e90 kworker/0:0          4               0               0      ------------------\r\n0xffff88003d9fa8c0 kworker/0:0H         5               0               0      ------------------\r\n<snip>\r\n0xffff88003bd61e90 gnome-pty-helpe      14432           1000            100    0x000000003a7bb000\r\n0xffff88003a7765e0 bash                 14438           1000            100    0x000000001c001000\r\n0xffff880037579460 VBoxService          17186           0               0      0x000000003a725000\r\n0xffff8800374b1e90 sudo                 837             0               100    0x000000003b354000\r\n0xffff8800374b65e0 insmod               838             0               0      0x000000003a614000\r\n```\r\n\r\nThe debug option discloses that symbols `wall_to_monotonic` and `total_sleep_time` are not available:\r\n```bat\r\nD:\\vol>volatility-2.4.standalone.exe --plugins=. -f manjaro.lime --profile LinuxManjaro_Xfce_0_8_11_3_16_7_3-1-MANJAROx64 -d linux_pslist\r\nVolatility Foundation Volatility Framework 2.4\r\nDEBUG   : volatility.debug    : Manjaro_Xfce_0.8.11_3.16.7.3-1-MANJARO: Found dwarf file System.map-3.16.7.3-1-MANJARO with 675 symbols\r\nDEBUG   : volatility.debug    : Manjaro_Xfce_0.8.11_3.16.7.3-1-MANJARO: Found system file System.map-3.16.7.3-1-MANJARO with 1 symbols\r\nDEBUG   : volatility.debug    : Applying modification from BashHashTypes\r\nDEBUG   : volatility.debug    : Applying modification from BashTypes\r\nDEBUG   : volatility.debug    : Applying modification from BasicObjectClasses\r\nDEBUG   : volatility.debug    : Applying modification from ELF32Modification\r\nDEBUG   : volatility.debug    : Applying modification from ELF64Modification\r\nDEBUG   : volatility.debug    : Applying modification from ELFModification\r\nDEBUG   : volatility.debug    : Applying modification from HPAKVTypes\r\nDEBUG   : volatility.debug    : Applying modification from LimeTypes\r\nDEBUG   : volatility.debug    : Applying modification from LinuxTruecryptModification\r\nDEBUG   : volatility.debug    : Applying modification from MachoModification\r\nDEBUG   : volatility.debug    : Applying modification from MachoTypes\r\nDEBUG   : volatility.debug    : Applying modification from MbrObjectTypes\r\nDEBUG   : volatility.debug    : Applying modification from VMwareVTypesModification\r\nDEBUG   : volatility.debug    : Applying modification from VirtualBoxModification\r\nDEBUG   : volatility.debug    : Applying modification from LinuxIntelOverlay\r\nDEBUG   : volatility.debug    : Applying modification from LinuxKmemCacheOverlay\r\nDEBUG   : volatility.debug    : Requested symbol cache_chain not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Applying modification from LinuxMountOverlay\r\nDEBUG   : volatility.debug    : Applying modification from LinuxObjectClasses\r\nDEBUG   : volatility.debug    : Applying modification from LinuxOverlay\r\nDEBUG   : volatility.debug    : Manjaro_Xfce_0.8.11_3.16.7.3-1-MANJARO: Found dwarf file System.map-3.16.7.3-1-MANJARO with 675 symbols\r\nDEBUG   : volatility.debug    : Manjaro_Xfce_0.8.11_3.16.7.3-1-MANJARO: Found system file System.map-3.16.7.3-1-MANJARO with 1 symbols\r\nDEBUG   : volatility.debug    : Applying modification from BashHashTypes\r\n<snip because repeating>\r\nDEBUG   : volatility.debug    : Applying modification from LinuxOverlay\r\nOffset             Name                 Pid             Uid             Gid    DTB                Start Time\r\n------------------ -------------------- --------------- --------------- ------ ------------------ ----------\r\nDEBUG   : volatility.debug    : Voting round\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.macho.MachOAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.lime.LimeAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hibernate.WindowsHiberFileSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crashbmp.WindowsCrashDumpSpace64BitMap'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hpak.HPAKAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.VirtualBoxCoreDumpElf64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmem.VMWareMetaAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmware.VMWareAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.QemuCoreDumpElf'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.amd64.AMD64PagedMemory'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.intel.IA32PagedMemoryPae'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.intel.IA32PagedMemory'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.osxpmemelf.OSXPmemELF'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.standard.FileAddressSpace'>\r\nDEBUG   : volatility.debug    : Succeeded instantiating <volatility.plugins.addrspaces.standard.FileAddressSpace object at 0x06575670>\r\nDEBUG   : volatility.debug    : Voting round\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.macho.MachOAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.lime.LimeAddressSpace'>\r\nDEBUG   : volatility.debug    : Succeeded instantiating <volatility.plugins.addrspaces.lime.LimeAddressSpace object at 0x065759D0>\r\nDEBUG   : volatility.debug    : Voting round\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.macho.MachOAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.lime.LimeAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hibernate.WindowsHiberFileSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crashbmp.WindowsCrashDumpSpace64BitMap'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hpak.HPAKAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.VirtualBoxCoreDumpElf64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmem.VMWareMetaAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmware.VMWareAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.QemuCoreDumpElf'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.amd64.AMD64PagedMemory'>\r\nDEBUG   : volatility.debug    : Succeeded instantiating <volatility.plugins.addrspaces.amd64.AMD64PagedMemory object at 0x06575610>\r\nDEBUG   : volatility.debug    : Voting round\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.macho.MachOAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.lime.LimeAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hibernate.WindowsHiberFileSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crashbmp.WindowsCrashDumpSpace64BitMap'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hpak.HPAKAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.VirtualBoxCoreDumpElf64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmem.VMWareMetaAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmware.VMWareAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.QemuCoreDumpElf'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.amd64.AMD64PagedMemory'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.intel.IA32PagedMemoryPae'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.intel.IA32PagedMemory'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.osxpmemelf.OSXPmemELF'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.standard.FileAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.arm.ArmAddressSpace'>\r\nDEBUG   : volatility.debug    : Voting round\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.macho.MachOAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.lime.LimeAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hibernate.WindowsHiberFileSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crashbmp.WindowsCrashDumpSpace64BitMap'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hpak.HPAKAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.VirtualBoxCoreDumpElf64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmem.VMWareMetaAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmware.VMWareAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.QemuCoreDumpElf'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.amd64.AMD64PagedMemory'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.intel.IA32PagedMemoryPae'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.intel.IA32PagedMemory'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.osxpmemelf.OSXPmemELF'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.standard.FileAddressSpace'>\r\nDEBUG   : volatility.debug    : Succeeded instantiating <volatility.plugins.addrspaces.standard.FileAddressSpace object at 0x06575F10>\r\nDEBUG   : volatility.debug    : Voting round\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.macho.MachOAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.lime.LimeAddressSpace'>\r\nDEBUG   : volatility.debug    : Succeeded instantiating <volatility.plugins.addrspaces.lime.LimeAddressSpace object at 0x06575150>\r\nDEBUG   : volatility.debug    : Voting round\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.macho.MachOAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.lime.LimeAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hibernate.WindowsHiberFileSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crashbmp.WindowsCrashDumpSpace64BitMap'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hpak.HPAKAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.VirtualBoxCoreDumpElf64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmem.VMWareMetaAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmware.VMWareAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.QemuCoreDumpElf'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.amd64.AMD64PagedMemory'>\r\nDEBUG   : volatility.debug    : Succeeded instantiating <volatility.plugins.addrspaces.amd64.AMD64PagedMemory object at 0x06575110>\r\nDEBUG   : volatility.debug    : Voting round\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.macho.MachOAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.lime.LimeAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hibernate.WindowsHiberFileSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crashbmp.WindowsCrashDumpSpace64BitMap'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.hpak.HPAKAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.VirtualBoxCoreDumpElf64'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmem.VMWareMetaAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.vmware.VMWareAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.elfcoredump.QemuCoreDumpElf'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.crash.WindowsCrashDumpSpace32'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.amd64.AMD64PagedMemory'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.intel.IA32PagedMemoryPae'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.intel.IA32PagedMemory'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.osxpmemelf.OSXPmemELF'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.standard.FileAddressSpace'>\r\nDEBUG   : volatility.debug    : Trying <class 'volatility.plugins.addrspaces.arm.ArmAddressSpace'>\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9f8000 systemd              1               0               0      0x000000003c553000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9f8a30 kthreadd             2               0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9f9460 ksoftirqd/0          3               0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9f9e90 kworker/0:0          4               0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9fa8c0 kworker/0:0H         5               0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9fb2f0 kworker/u2:0         6               0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9fbd20 rcu_preempt          7               0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9fc750 rcu_sched            8               0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9fd180 rcu_bh               9               0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9fdbb0 migration/0          10              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9ff010 khelper              12              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db00000 kdevtmpfs            13              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db00a30 netns                14              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db01460 khungtaskd           15              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db01e90 writeback            16              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db028c0 ksmd                 17              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db032f0 khugepaged           18              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db03d20 crypto               19              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db04750 kintegrityd          20              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db05180 bioset               21              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db05bb0 kblockd              22              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db065e0 kworker/0:1          23              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003db07010 kswapd0              24              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c448000 fsnotify_mark        25              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c44a8c0 kthrotld             29              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c44b2f0 ipv6_addrconf        30              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c44bd20 deferwq              31              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c44c750 kworker/u2:1         32              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c669e90 ata_sff              55              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c66a8c0 khubd                56              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c66b2f0 scsi_eh_0            57              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c66bd20 scsi_tmf_0           58              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c66c750 scsi_eh_1            59              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c66d180 scsi_tmf_1           60              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c66dbb0 kworker/u2:2         61              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c66e5e0 scsi_eh_2            62              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c66f010 kworker/u2:3         63              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c52bd20 scsi_tmf_2           64              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c52b2f0 kworker/u2:4         65              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c44f010 kworker/0:2          70              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c44e5e0 kworker/0:1H         72              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c528000 jbd2/sda1-8          93              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c528a30 ext4-rsv-conver      94              0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c679e90 systemd-journal      128             0               0      0x000000003c6e3000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c67c750 iprt                 134             0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c67d180 systemd-udevd        146             0               0      0x000000003d50c000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c679460 rpciod               148             0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c67bd20 nfsiod               149             0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c52dbb0 kpsmoused            209             0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003762e5e0 crond                298             0               0      0x000000003a4da000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003762bd20 cupsd                299             0               0      0x000000003a4d1000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003762a8c0 ModemManager         300             0               0      0x000000003a4e3000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff880037629460 NetworkManager       301             0               0      0x000000003a4d3000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003762f010 systemd-logind       302             0               0      0x000000003a4d7000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff880037628000 dbus-daemon          303             81              81     0x000000003a4dd000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c449e90 rpcbind              305             32              32     0x000000003c39c000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003cdb65e0 lightdm              313             0               0      0x000000003b743000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003cdb32f0 polkitd              321             102             102    0x000000003b740000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003cdb1e90 cfg80211             335             0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003cdb5180 Xorg.bin             337             0               0      0x000000003cca8000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d9fe5e0 accounts-daemon      339             0               0      0x000000003d621000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d784750 systemd              549             620             620    0x000000003a48b000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d785180 (sd-pam)             555             620             620    0x000000003d790000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d787010 ntpd                 602             87              87     0x000000003c5f9000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c67b2f0 dhclient             629             0               0      0x000000003ce84000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003cc49460 dbus-launch          1083            620             620    0x000000003ceb8000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003cc4e5e0 dbus-daemon          1099            620             620    0x000000003cecf000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d780000 at-spi-bus-laun      1105            620             620    0x000000003cb3f000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003d785bb0 dbus-daemon          1118            620             620    0x000000003cb26000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c678a30 at-spi2-registr      1129            620             620    0x00000000377a6000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800377c0a30 lightdm              1712            0               0      0x0000000000017000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bfe0000 systemd              4307            1000            100    0x000000003ce9e000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bfe28c0 (sd-pam)             4308            1000            100    0x000000003d526000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bfe32f0 sh                   4338            1000            100    0x000000003d6e1000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bfe3d20 VBoxClient           4517            1000            100    0x000000003cd24000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c678000 VBoxClient           4527            1000            100    0x000000003bf87000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800377c7010 VBoxClient           4532            1000            100    0x000000003b7eb000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800377c28c0 VBoxClient           4540            1000            100    0x000000003ce8b000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800377c1460 dbus-launch          4550            1000            100    0x000000003b7c6000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c67f010 dbus-daemon          4551            1000            100    0x000000003be62000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800377c1e90 xfce4-session        4596            1000            100    0x000000003d54f000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bfe1e90 xfconfd              4795            1000            100    0x000000003c89e000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003cc49e90 gpg-agent            4829            1000            100    0x000000003c8e3000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003cc4a8c0 xfwm4                4842            1000            100    0x000000003c8c5000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800377c5bb0 xfce4-panel          4847            1000            100    0x000000003b3ed000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800377c3d20 Thunar               4849            1000            100    0x000000003c8b0000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c67a8c0 xfdesktop            4851            1000            100    0x000000003c881000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800377c4750 xfsettingsd          4853            1000            100    0x000000003cfa9000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bfe0a30 xfce4-clipman        4870            1000            100    0x000000003ca4c000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bfe7010 gvfsd                4910            1000            100    0x000000003ca9d000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bfe65e0 blueman-applet       4911            1000            100    0x000000003b63c000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c529460 applet.py            4945            1000            100    0x000000003b614000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bfe4750 pamac-tray           4969            1000            100    0x000000003b28a000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c668000 light-locker         4987            1000            100    0x000000003c2a7000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003a55f010 xfce4-power-man      5031            1000            100    0x000000003a54b000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003a55dbb0 lxpolkit             5032            1000            100    0x000000003b405000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003a55e5e0 nm-applet            5036            1000            100    0x000000003b491000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003a55b2f0 pa-applet            5038            1000            100    0x000000003b563000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003a559460 xfce4-notifyd        5053            1000            100    0x000000003b01f000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003b4165e0 tumblerd             5109            1000            100    0x000000003c242000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003b410000 pulseaudio           5118            1000            100    0x000000003b01e000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003b4128c0 rtkit-daemon         5131            133             133    0x000000003b019000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003b415180 upowerd              5132            0               0      0x000000003b146000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bc4e5e0 gvfsd-fuse           5175            1000            100    0x000000003bc2c000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bd65bb0 gconf-helper         5270            1000            100    0x0000000037a7b000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bd64750 bluetoothd           5271            0               0      0x000000003bdf6000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bd632f0 gconfd-2             5274            1000            100    0x0000000037aa3000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003b410a30 panel-8-whisker      5306            1000            100    0x000000003b57f000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bc4bd20 panel-6-systray      5369            1000            100    0x0000000037be6000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bc4c750 panel-9-power-m      5370            1000            100    0x000000003c04c000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bc48000 panel-2-actions      5380            1000            100    0x000000003c0f6000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c1aa8c0 gvfs-udisks2-vo      6414            1000            100    0x000000003c1d6000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c1abd20 udisksd              6431            0               0      0x0000000037415000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800374b0000 gvfs-gphoto2-vo      6505            1000            100    0x0000000037465000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003a55c750 gvfs-mtp-volume      6638            1000            100    0x0000000037496000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800374b32f0 gvfs-afc-volume      6650            1000            100    0x000000003750b000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003757c750 gvfsd-trash          6696            1000            100    0x0000000037442000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003c1af010 obex-data-serve      7827            1000            100    0x000000003a679000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003a771460 krfcommd             7940            0               0      ------------------\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003a770a30 xfce4-terminal       14211           1000            100    0x000000003cace000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003bd61e90 gnome-pty-helpe      14432           1000            100    0x000000003a7bb000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff88003a7765e0 bash                 14438           1000            100    0x000000001c001000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff880037579460 VBoxService          17186           0               0      0x000000003a725000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800374b1e90 sudo                 837             0               100    0x000000003b354000\r\nDEBUG   : volatility.debug    : Requested symbol wall_to_monotonic not found in module kernel\r\n\r\nDEBUG   : volatility.debug    : Requested symbol total_sleep_time not found in module kernel\r\n\r\n0xffff8800374b65e0 insmod               838             0               0      0x000000003a614000\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/comments/70837311","html_url":"https://github.com/volatilityfoundation/volatility/issues/162#issuecomment-70837311","issue_url":"https://api.github.com/repos/volatilityfoundation/volatility/issues/162","id":70837311,"user":{"login":"masdif","id":8524385,"avatar_url":"https://avatars.githubusercontent.com/u/8524385?v=3","gravatar_id":"","url":"https://api.github.com/users/masdif","html_url":"https://github.com/masdif","followers_url":"https://api.github.com/users/masdif/followers","following_url":"https://api.github.com/users/masdif/following{/other_user}","gists_url":"https://api.github.com/users/masdif/gists{/gist_id}","starred_url":"https://api.github.com/users/masdif/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/masdif/subscriptions","organizations_url":"https://api.github.com/users/masdif/orgs","repos_url":"https://api.github.com/users/masdif/repos","events_url":"https://api.github.com/users/masdif/events{/privacy}","received_events_url":"https://api.github.com/users/masdif/received_events","type":"User","site_admin":false},"created_at":"2015-01-21T13:36:38Z","updated_at":"2015-01-21T13:36:38Z","body":"Thanks! Pull request submitted."}}