Beispiel #1
0
        public static void PacketReceived(PacketInfo packetInfo, ref byte[] data /*, ref ServerCommand serverResponse*/)
        {
            Packet.Directions direction;
            int ID;

            TotalSize += packetInfo.Size;

            switch (packetInfo.FunctionID)
            {
            case Functions.CODE_RECV:
            case Functions.CODE_RECVFROM:
            case Functions.CODE_WS2RECV:
            case Functions.CODE_WS2RECVFROM:
            case Functions.CODE_WSARECV:
            case Functions.CODE_WSARECVFROM:
            case Functions.CODE_PR_RECV:
            case Functions.CODE_PR_READ:
            case Functions.CODE_SSLDECRYPTPACKET:
            case Functions.CODE_DECRYPTMESSAGE:
            case Functions.CODE_SSL_READ:
                direction          = Packet.Directions.In;
                TotalSizeReceived += packetInfo.Size;
                break;

            case Functions.CODE_SEND:
            case Functions.CODE_SENDTO:
            case Functions.CODE_WS2SEND:
            case Functions.CODE_WS2SENDTO:
            case Functions.CODE_WSASEND:
            case Functions.CODE_WSASENDTO:
            case Functions.CODE_PR_SEND:
            case Functions.CODE_PR_WRITE:
            case Functions.CODE_SSLENCRYPTPACKET:
            case Functions.CODE_ENCRYPTMESSAGE:
            case Functions.CODE_SSL_WRITE:
                direction      = Packet.Directions.Out;
                TotalSizeSent += packetInfo.Size;
                break;

            default:
                throw new IndexOutOfRangeException();
            }

            var functionFlag = FilterManager.GetFilterActionFlagForFunction(packetInfo.FunctionID);

            // If a matching breakpoint type filter is active, we open a new window to edit the data
            if (IsFilteringActived && FilterManager.CheckPacketBreak(data, packetInfo.Size, functionFlag))
            {
                var pckt           = new Packet(packetInfo.FunctionID, packetInfo.SocketId, packetInfo.LocalIp, packetInfo.LocalPort, packetInfo.RemoteIp, packetInfo.RemotePort, data, direction);
                var showPacketForm = new ShowPacketForm(0, pckt, true);
                showPacketForm.ShowDialog();
                if (showPacketForm.DialogResult == System.Windows.Forms.DialogResult.OK)
                {
                    data            = showPacketForm.NewPacketData;
                    packetInfo.Size = showPacketForm.NewPacketSize;
                }
                // Send the new data to the DLL
                DllCommunication.WriteCommandToCmdMMF(ServerCodes.SCODE_SETPACKET, data, packetInfo.Size);
            }

            if (!IsCaptureEnabled) // Capture disabled, return
            {
                return;
            }

            // Don't log Functions, Ips, or Ports that are not activated in the program's settings menu
            if (!LogFunctions.HasFlag(FilterManager.GetFilterActionFlagForFunction(packetInfo.FunctionID)))
            {
                return;
            }
            if ((Settings.LocalIpChecked && packetInfo.LocalIp != (uint)Settings.LocalIp) ||
                (Settings.LocalPortChecked && packetInfo.LocalPort != Settings.LocalPort) ||
                (Settings.RemoteIpChecked && packetInfo.RemoteIp != (uint)Settings.RemoteIp) ||
                (Settings.RemotePortChecked && packetInfo.RemotePort != Settings.RemotePort))
            {
                return;
            }


            IsModifiedList = true;
            var packet = new Packet(packetInfo.FunctionID, packetInfo.SocketId, packetInfo.LocalIp, packetInfo.LocalPort, packetInfo.RemoteIp, packetInfo.RemotePort, data, direction);

            lock (LockingVar)
            {
                ID = PacketList.Count;
                PacketList.Add(packet);
                Program.mainForm.AddPacket(packet);
            }

            if (IsFilteringActived && FilterManager.CheckPacketWatch(data, packetInfo.Size, functionFlag))
            {
                Watch.Add(ID);
            }
            // Don't log ignored packets
            if (IsFilteringActived && FilterManager.CheckPacketIgnore(data, packetInfo.Size, functionFlag))
            {
                return;
            }

            Both.Add(ID);

            switch (direction)
            {
            case Packet.Directions.In:
                Received.Add(ID);
                break;

            case Packet.Directions.Out:
                Sent.Add(ID);
                break;
            }

            SmartRefresh();
        }
Beispiel #2
0
        private void SetFunctionsAndActionsWithBitMask(FilterActions actions, FilterCaptureFuncs functions)
        {
            chkBlock.Checked  = actions.HasFlag(FilterActions.Block);
            chkWatch.Checked  = actions.HasFlag(FilterActions.Watch);
            chkIgnore.Checked = actions.HasFlag(FilterActions.Ignore);
            chkBreak.Checked  = actions.HasFlag(FilterActions.Break);

            chkWSSend.Checked     = functions.HasFlag(FilterCaptureFuncs.WSSend);
            chkWSSendTo.Checked   = functions.HasFlag(FilterCaptureFuncs.WSSendTo);
            chkWSRecv.Checked     = functions.HasFlag(FilterCaptureFuncs.WSRecv);
            chkWSRecvFrom.Checked = functions.HasFlag(FilterCaptureFuncs.WSRecvFrom);

            chkWS2Send.Checked     = functions.HasFlag(FilterCaptureFuncs.WS2Send);
            chkWS2SendTo.Checked   = functions.HasFlag(FilterCaptureFuncs.WS2SendTo);
            chkWS2Recv.Checked     = functions.HasFlag(FilterCaptureFuncs.WS2Recv);
            chkWS2RecvFrom.Checked = functions.HasFlag(FilterCaptureFuncs.WS2RecvFrom);

            chkWSASend.Checked     = functions.HasFlag(FilterCaptureFuncs.WSASend);
            chkWSASendTo.Checked   = functions.HasFlag(FilterCaptureFuncs.WSASendTo);
            chkWSARecv.Checked     = functions.HasFlag(FilterCaptureFuncs.WSARecv);
            chkWSARecvFrom.Checked = functions.HasFlag(FilterCaptureFuncs.WSARecvFrom);

            chkPRSend.Checked  = functions.HasFlag(FilterCaptureFuncs.PRSend);
            chkPRRecv.Checked  = functions.HasFlag(FilterCaptureFuncs.PRRecv);
            chkPRRead.Checked  = functions.HasFlag(FilterCaptureFuncs.PRRead);
            chkPRWrite.Checked = functions.HasFlag(FilterCaptureFuncs.PRWrite);

            chkSSLEncryptPacket.Checked = functions.HasFlag(FilterCaptureFuncs.SSLEncryptPacket);
            chkSSLDecryptPacket.Checked = functions.HasFlag(FilterCaptureFuncs.SSLDecryptPacket);
            chkEncryptMessage.Checked   = functions.HasFlag(FilterCaptureFuncs.EncryptMessage);
            chkDecryptMessage.Checked   = functions.HasFlag(FilterCaptureFuncs.DecryptMessage);
            chkSSLRead.Checked          = functions.HasFlag(FilterCaptureFuncs.SSLRead);
            chkSSLWrite.Checked         = functions.HasFlag(FilterCaptureFuncs.SSLWrite);
        }