public static void PacketReceived(PacketInfo packetInfo, ref byte[] data /*, ref ServerCommand serverResponse*/) { Packet.Directions direction; int ID; TotalSize += packetInfo.Size; switch (packetInfo.FunctionID) { case Functions.CODE_RECV: case Functions.CODE_RECVFROM: case Functions.CODE_WS2RECV: case Functions.CODE_WS2RECVFROM: case Functions.CODE_WSARECV: case Functions.CODE_WSARECVFROM: case Functions.CODE_PR_RECV: case Functions.CODE_PR_READ: case Functions.CODE_SSLDECRYPTPACKET: case Functions.CODE_DECRYPTMESSAGE: case Functions.CODE_SSL_READ: direction = Packet.Directions.In; TotalSizeReceived += packetInfo.Size; break; case Functions.CODE_SEND: case Functions.CODE_SENDTO: case Functions.CODE_WS2SEND: case Functions.CODE_WS2SENDTO: case Functions.CODE_WSASEND: case Functions.CODE_WSASENDTO: case Functions.CODE_PR_SEND: case Functions.CODE_PR_WRITE: case Functions.CODE_SSLENCRYPTPACKET: case Functions.CODE_ENCRYPTMESSAGE: case Functions.CODE_SSL_WRITE: direction = Packet.Directions.Out; TotalSizeSent += packetInfo.Size; break; default: throw new IndexOutOfRangeException(); } var functionFlag = FilterManager.GetFilterActionFlagForFunction(packetInfo.FunctionID); // If a matching breakpoint type filter is active, we open a new window to edit the data if (IsFilteringActived && FilterManager.CheckPacketBreak(data, packetInfo.Size, functionFlag)) { var pckt = new Packet(packetInfo.FunctionID, packetInfo.SocketId, packetInfo.LocalIp, packetInfo.LocalPort, packetInfo.RemoteIp, packetInfo.RemotePort, data, direction); var showPacketForm = new ShowPacketForm(0, pckt, true); showPacketForm.ShowDialog(); if (showPacketForm.DialogResult == System.Windows.Forms.DialogResult.OK) { data = showPacketForm.NewPacketData; packetInfo.Size = showPacketForm.NewPacketSize; } // Send the new data to the DLL DllCommunication.WriteCommandToCmdMMF(ServerCodes.SCODE_SETPACKET, data, packetInfo.Size); } if (!IsCaptureEnabled) // Capture disabled, return { return; } // Don't log Functions, Ips, or Ports that are not activated in the program's settings menu if (!LogFunctions.HasFlag(FilterManager.GetFilterActionFlagForFunction(packetInfo.FunctionID))) { return; } if ((Settings.LocalIpChecked && packetInfo.LocalIp != (uint)Settings.LocalIp) || (Settings.LocalPortChecked && packetInfo.LocalPort != Settings.LocalPort) || (Settings.RemoteIpChecked && packetInfo.RemoteIp != (uint)Settings.RemoteIp) || (Settings.RemotePortChecked && packetInfo.RemotePort != Settings.RemotePort)) { return; } IsModifiedList = true; var packet = new Packet(packetInfo.FunctionID, packetInfo.SocketId, packetInfo.LocalIp, packetInfo.LocalPort, packetInfo.RemoteIp, packetInfo.RemotePort, data, direction); lock (LockingVar) { ID = PacketList.Count; PacketList.Add(packet); Program.mainForm.AddPacket(packet); } if (IsFilteringActived && FilterManager.CheckPacketWatch(data, packetInfo.Size, functionFlag)) { Watch.Add(ID); } // Don't log ignored packets if (IsFilteringActived && FilterManager.CheckPacketIgnore(data, packetInfo.Size, functionFlag)) { return; } Both.Add(ID); switch (direction) { case Packet.Directions.In: Received.Add(ID); break; case Packet.Directions.Out: Sent.Add(ID); break; } SmartRefresh(); }
private void SetFunctionsAndActionsWithBitMask(FilterActions actions, FilterCaptureFuncs functions) { chkBlock.Checked = actions.HasFlag(FilterActions.Block); chkWatch.Checked = actions.HasFlag(FilterActions.Watch); chkIgnore.Checked = actions.HasFlag(FilterActions.Ignore); chkBreak.Checked = actions.HasFlag(FilterActions.Break); chkWSSend.Checked = functions.HasFlag(FilterCaptureFuncs.WSSend); chkWSSendTo.Checked = functions.HasFlag(FilterCaptureFuncs.WSSendTo); chkWSRecv.Checked = functions.HasFlag(FilterCaptureFuncs.WSRecv); chkWSRecvFrom.Checked = functions.HasFlag(FilterCaptureFuncs.WSRecvFrom); chkWS2Send.Checked = functions.HasFlag(FilterCaptureFuncs.WS2Send); chkWS2SendTo.Checked = functions.HasFlag(FilterCaptureFuncs.WS2SendTo); chkWS2Recv.Checked = functions.HasFlag(FilterCaptureFuncs.WS2Recv); chkWS2RecvFrom.Checked = functions.HasFlag(FilterCaptureFuncs.WS2RecvFrom); chkWSASend.Checked = functions.HasFlag(FilterCaptureFuncs.WSASend); chkWSASendTo.Checked = functions.HasFlag(FilterCaptureFuncs.WSASendTo); chkWSARecv.Checked = functions.HasFlag(FilterCaptureFuncs.WSARecv); chkWSARecvFrom.Checked = functions.HasFlag(FilterCaptureFuncs.WSARecvFrom); chkPRSend.Checked = functions.HasFlag(FilterCaptureFuncs.PRSend); chkPRRecv.Checked = functions.HasFlag(FilterCaptureFuncs.PRRecv); chkPRRead.Checked = functions.HasFlag(FilterCaptureFuncs.PRRead); chkPRWrite.Checked = functions.HasFlag(FilterCaptureFuncs.PRWrite); chkSSLEncryptPacket.Checked = functions.HasFlag(FilterCaptureFuncs.SSLEncryptPacket); chkSSLDecryptPacket.Checked = functions.HasFlag(FilterCaptureFuncs.SSLDecryptPacket); chkEncryptMessage.Checked = functions.HasFlag(FilterCaptureFuncs.EncryptMessage); chkDecryptMessage.Checked = functions.HasFlag(FilterCaptureFuncs.DecryptMessage); chkSSLRead.Checked = functions.HasFlag(FilterCaptureFuncs.SSLRead); chkSSLWrite.Checked = functions.HasFlag(FilterCaptureFuncs.SSLWrite); }