packet

Documentation

Overview

* * @Author: kiosk * @Mail: weijiaxiang007@foxmail.com * @Date: 2020/12/27 *

* * @Author: kiosk * @Mail: weijiaxiang007@foxmail.com * @Date: 2020/12/27 *

* * @Author: kiosk * @Mail: weijiaxiang007@foxmail.com * @Date: 2020/12/27 *

* * @Author: kiosk * @Mail: weijiaxiang007@foxmail.com * @Date: 2020/12/27 *

* * @Author: kiosk * @Mail: weijiaxiang007@foxmail.com * @Date: 2021/1/1 *

* * @Author: kiosk * @Mail: weijiaxiang007@foxmail.com * @Date: 2020/12/27 *

Index

• Variables
• type Context
  • func (c *Context) GetCaptureInfo() gopacket.CaptureInfo
• type HttpReader
  • func NewHTTPReader(parent *TcpStream, netFlow, transport gopacket.Flow, isClient, hexdump bool) HttpReader
  • func (h *HttpReader) Read(p []byte) (int, error)
• type PcapPacket
  • func NewPcapHandler(Arg []string, CommandLine utils.Command) *PcapPacket
  • func (p *PcapPacket) SetBPF()
  • func (p *PcapPacket) SetDecoder()
  • func (p *PcapPacket) SetPcapMode()
• type StreamFactory
  • func NewStreamFactory(packet *PcapPacket) *StreamFactory
  • func (s *StreamFactory) Run()
  • func (s *StreamFactory) Show()
• type TLSReader
  • func NewTLSReader(parent *TcpStream, netFlow, transport gopacket.Flow, isClient, hexdump bool, ...) TLSReader
  • func (t *TLSReader) Read(p []byte) (int, error)
• type TcpStream
  • func (t *TcpStream) Accept(tcp *layers.TCP, ci gopacket.CaptureInfo, dir reassembly.TCPFlowDirection, ...) bool
  • func (t *TcpStream) ReassembledSG(sg reassembly.ScatterGather, ac reassembly.AssemblerContext)
  • func (t *TcpStream) ReassemblyComplete(ac reassembly.AssemblerContext) bool
• type TcpStreamFactory
  • func (factory TcpStreamFactory) New(netFlow, transport gopacket.Flow, tcp *layers.TCP, ...) reassembly.Stream
  • func (factory *TcpStreamFactory) WaitGoRoutines()
• type UdpStreamFactory

Variables

var Stats struct {
	// contains filtered or unexported fields
}

Types

type Context

type Context struct {
	CaptureInfo gopacket.CaptureInfo
}

* The assembler context

func (*Context) GetCaptureInfo

func (c *Context) GetCaptureInfo() gopacket.CaptureInfo

type HttpReader

type HttpReader struct {
	// contains filtered or unexported fields
}

func NewHTTPReader

func NewHTTPReader(parent *TcpStream, netFlow, transport gopacket.Flow, isClient, hexdump bool) HttpReader

func (*HttpReader) Read

func (h *HttpReader) Read(p []byte) (int, error)

type PcapPacket

type PcapPacket struct {
	Handle      *pcap.Handle
	Arg         []string
	CommandLine utils.Command
	Decoder     gopacket.Decoder
	Source      *gopacket.PacketSource
}

func NewPcapHandler

func NewPcapHandler(Arg []string, CommandLine utils.Command) *PcapPacket

func (*PcapPacket) SetBPF

func (p *PcapPacket) SetBPF()

func (*PcapPacket) SetDecoder

func (p *PcapPacket) SetDecoder()

func (*PcapPacket) SetPcapMode

func (p *PcapPacket) SetPcapMode()

type StreamFactory

type StreamFactory struct {
	TcpStreamFactory *TcpStreamFactory
	UdpStreamFactory *UdpStreamFactory
	StreamPool       *reassembly.StreamPool
	Assembler        *reassembly.Assembler
	Packet           *PcapPacket
	IPv4Fragment     *ip4defrag.IPv4Defragmenter

	Start time.Time
	Count int
	Bytes int64
	// contains filtered or unexported fields
}

func NewStreamFactory

func NewStreamFactory(packet *PcapPacket) *StreamFactory

func (*StreamFactory) Run

func (s *StreamFactory) Run()

func (*StreamFactory) Show

func (s *StreamFactory) Show()

type TLSReader

type TLSReader struct {
	// contains filtered or unexported fields
}

func NewTLSReader

func NewTLSReader(parent *TcpStream, netFlow, transport gopacket.Flow, isClient, hexdump bool, tls *tls.TLSStream) TLSReader

func (*TLSReader) Read

func (t *TLSReader) Read(p []byte) (int, error)

type TcpStream

type TcpStream struct {
	sync.Mutex
	// contains filtered or unexported fields
}

It's a connection (bidirectional)

func (*TcpStream) Accept

func (t *TcpStream) Accept(tcp *layers.TCP, ci gopacket.CaptureInfo, dir reassembly.TCPFlowDirection, nextSeq reassembly.Sequence, start *bool, ac reassembly.AssemblerContext) bool

func (*TcpStream) ReassembledSG

func (t *TcpStream) ReassembledSG(sg reassembly.ScatterGather, ac reassembly.AssemblerContext)

func (*TcpStream) ReassemblyComplete

func (t *TcpStream) ReassemblyComplete(ac reassembly.AssemblerContext) bool

type TcpStreamFactory

type TcpStreamFactory struct {
	WG sync.WaitGroup
	// contains filtered or unexported fields
}

* The TCP factory: returns a new Stream

func (TcpStreamFactory) New

func (factory TcpStreamFactory) New(netFlow, transport gopacket.Flow, tcp *layers.TCP, ac reassembly.AssemblerContext) reassembly.Stream

func (*TcpStreamFactory) WaitGoRoutines

func (factory *TcpStreamFactory) WaitGoRoutines()

type UdpStreamFactory

type UdpStreamFactory struct {
	WG sync.WaitGroup
}

* The UDP factory: returns a new Stream