public void ExtractData(ref NetworkHost sourceHost, NetworkHost destinationHost, IEnumerable <PacketParser.Packets.AbstractPacket> packetList)
{
foreach (Packets.AbstractPacket p in packetList)
{
if (p.GetType() == typeof(Packets.SipPacket))
{
Packets.SipPacket sipPacket = (Packets.SipPacket)p;
if (sipPacket.To != null && sipPacket.To.Length > 0)
{
string to = sipPacket.To;
if (to.Contains(";"))
{
to = to.Substring(0, to.IndexOf(';'));
}
destinationHost.AddNumberedExtraDetail("SIP User", to);
//destinationHost.ExtraDetailsList["SIP User"]=to;
}
if (sipPacket.From != null && sipPacket.From.Length > 0)
{
string from = sipPacket.From;
if (from.Contains(";"))
{
from = from.Substring(0, from.IndexOf(';'));
}
destinationHost.AddNumberedExtraDetail("SIP User", from);
//sourceHost.ExtraDetailsList["SIP User"]=from;
}
}
}
}
public int ExtractData(NetworkHost sourceHost, NetworkHost destinationHost, IEnumerable <PacketParser.Packets.AbstractPacket> packetList)
{
//Packets.UdpPacket udpPacket = null;
int parsedBytes = 0;
Packets.ITransportLayerPacket transportLayerPacket = null;
FiveTuple ft = null;
foreach (Packets.AbstractPacket p in packetList)
{
if (p is Packets.ITransportLayerPacket)
{
transportLayerPacket = (Packets.ITransportLayerPacket)p;
if (transportLayerPacket is Packets.UdpPacket)
{
ft = new FiveTuple(sourceHost, transportLayerPacket.SourcePort, destinationHost, transportLayerPacket.DestinationPort, FiveTuple.TransportProtocol.UDP);
}
else if (transportLayerPacket is Packets.TcpPacket)
{
ft = new FiveTuple(sourceHost, transportLayerPacket.SourcePort, destinationHost, transportLayerPacket.DestinationPort, FiveTuple.TransportProtocol.TCP);
}
}
if (p.GetType() == typeof(Packets.SipPacket))
{
Packets.SipPacket sipPacket = (Packets.SipPacket)p;
if (sipPacket.MessageLine.StartsWith(INVITE))
{
string to = null;
string from = null;
if (sipPacket.To != null && sipPacket.To.Length > 0)
{
to = sipPacket.To;
if (to.Contains(";"))
{
to = to.Substring(0, to.IndexOf(';'));
}
destinationHost.AddNumberedExtraDetail("SIP User", to);
//destinationHost.ExtraDetailsList["SIP User"]=to;
}
if (sipPacket.From != null && sipPacket.From.Length > 0)
{
from = sipPacket.From;
if (from.Contains(";"))
{
from = from.Substring(0, from.IndexOf(';'));
}
//destinationHost.AddNumberedExtraDetail("SIP User", from);
sourceHost.AddNumberedExtraDetail("SIP User", from);
//sourceHost.ExtraDetailsList["SIP User"]=from;
}
if (ft != null && to != null && from != null && !String.IsNullOrEmpty(sipPacket.CallID))
{
System.Collections.Specialized.NameValueCollection nvc = new System.Collections.Specialized.NameValueCollection {
{ "From", sipPacket.From },
{ "To", sipPacket.To },
{ "Call-ID", sipPacket.CallID }
};
this.MainPacketHandler.OnParametersDetected(new Events.ParametersEventArgs(sipPacket.ParentFrame.FrameNumber, ft, true, nvc, sipPacket.ParentFrame.Timestamp, "SIP session " + ft.ToString()));
}
}
if (!String.IsNullOrEmpty(sipPacket.UserAgent))
{
sourceHost.AddHttpUserAgentBanner(sipPacket.UserAgent);
}
if (sipPacket.SDP != null)
{
if (sipPacket.SDP.Port != null && sipPacket.SDP.IP != null && sipPacket.CallID != null && ft != null)
{
lock (callEndPoints) {
Tuple <System.Net.IPAddress, ushort, FiveTuple> endPoint = new Tuple <System.Net.IPAddress, ushort, FiveTuple>(sipPacket.SDP.IP, sipPacket.SDP.Port.Value, ft);
if (this.callEndPoints.ContainsKey(sipPacket.CallID))
{
Tuple <System.Net.IPAddress, ushort, FiveTuple> matchedTuple = null;
foreach (var previousEndPoint in this.callEndPoints[sipPacket.CallID])
{
if (previousEndPoint.Item3.EqualsIgnoreDirection(ft))
{
//Tuple<System.Net.IPAddress, ushort, FiveTuple> previousEndPoint = ;
if (!(previousEndPoint.Item1.Equals(endPoint.Item1) && previousEndPoint.Item2.Equals(endPoint.Item2)))
{
//this.callEndPoints.Remove(sipPacket.CallID);
matchedTuple = previousEndPoint;
if (sipPacket.From != null && sipPacket.To != null)
{
this.MainPacketHandler.OnVoipCallDetected(sipPacket.SDP.IP, sipPacket.SDP.Port.Value, previousEndPoint.Item1, previousEndPoint.Item2, sipPacket.CallID, sipPacket.From, sipPacket.To);
if (ft != null)
{
}
}
break;
}
}
}
if (matchedTuple == null)
{
this.callEndPoints[sipPacket.CallID].Add(endPoint);
}
if (matchedTuple != null)
{
this.callEndPoints[sipPacket.CallID].Remove(matchedTuple);
}
}
else
{
this.callEndPoints.Add(sipPacket.CallID, new List <Tuple <System.Net.IPAddress, ushort, FiveTuple> >()
{
endPoint
});
}
}
}
}
parsedBytes += sipPacket.PacketLength;
}
}
return(parsedBytes);
}
public void ExtractData(ref NetworkHost sourceHost, NetworkHost destinationHost, IEnumerable <PacketParser.Packets.AbstractPacket> packetList)
{
//Packets.UdpPacket udpPacket = null;
Packets.ITransportLayerPacket transportLayerPacket = null;
FiveTuple ft = null;
foreach (Packets.AbstractPacket p in packetList)
{
/*
* Packets.IIPPacket ipPacket;
* if (p is Packets.IIPPacket) {
* ipPacket = p as Packets.IIPPacket;
* }
*/
if (p is Packets.ITransportLayerPacket)
{
transportLayerPacket = (Packets.ITransportLayerPacket)p;
if (transportLayerPacket is Packets.UdpPacket)
{
ft = new FiveTuple(sourceHost, transportLayerPacket.SourcePort, destinationHost, transportLayerPacket.DestinationPort, FiveTuple.TransportProtocol.UDP);
}
else if (transportLayerPacket is Packets.TcpPacket)
{
ft = new FiveTuple(sourceHost, transportLayerPacket.SourcePort, destinationHost, transportLayerPacket.DestinationPort, FiveTuple.TransportProtocol.TCP);
}
}
if (p.GetType() == typeof(Packets.SipPacket))
{
Packets.SipPacket sipPacket = (Packets.SipPacket)p;
if (sipPacket.MessageLine.StartsWith(INVITE))
{
string to = null;
string from = null;
if (sipPacket.To != null && sipPacket.To.Length > 0)
{
to = sipPacket.To;
if (to.Contains(";"))
{
to = to.Substring(0, to.IndexOf(';'));
}
destinationHost.AddNumberedExtraDetail("SIP User", to);
//destinationHost.ExtraDetailsList["SIP User"]=to;
}
if (sipPacket.From != null && sipPacket.From.Length > 0)
{
from = sipPacket.From;
if (from.Contains(";"))
{
from = from.Substring(0, from.IndexOf(';'));
}
//destinationHost.AddNumberedExtraDetail("SIP User", from);
sourceHost.AddNumberedExtraDetail("SIP User", from);
//sourceHost.ExtraDetailsList["SIP User"]=from;
}
if (ft != null && to != null && from != null && !String.IsNullOrEmpty(sipPacket.CallID))
{
System.Collections.Specialized.NameValueCollection nvc = new System.Collections.Specialized.NameValueCollection {
{ "From", sipPacket.From },
{ "To", sipPacket.To },
{ "Call-ID", sipPacket.CallID }
};
this.MainPacketHandler.OnParametersDetected(new Events.ParametersEventArgs(sipPacket.ParentFrame.FrameNumber, ft, true, nvc, sipPacket.ParentFrame.Timestamp, "SIP session " + ft.ToString()));
}
}
if (!String.IsNullOrEmpty(sipPacket.UserAgent))
{
sourceHost.AddHttpUserAgentBanner(sipPacket.UserAgent);
}
if (sipPacket.SDP != null)
{
if (sipPacket.SDP.Port != null && sipPacket.SDP.IP != null && sipPacket.CallID != null && ft != null)
{
lock (callEndPoints) {
Tuple <System.Net.IPAddress, ushort, FiveTuple> endPoint = new Tuple <System.Net.IPAddress, ushort, FiveTuple>(sipPacket.SDP.IP, sipPacket.SDP.Port.Value, ft);
if (this.callEndPoints.ContainsKey(sipPacket.CallID))
{
Tuple <System.Net.IPAddress, ushort, FiveTuple> matchedTuple = null;
foreach (var previousEndPoint in this.callEndPoints[sipPacket.CallID])
{
if (previousEndPoint.Item3.EqualsIgnoreDirection(ft))
{
//Tuple<System.Net.IPAddress, ushort, FiveTuple> previousEndPoint = ;
if (!(previousEndPoint.Item1.Equals(endPoint.Item1) && previousEndPoint.Item2.Equals(endPoint.Item2)))
{
//this.callEndPoints.Remove(sipPacket.CallID);
matchedTuple = previousEndPoint;
if (sipPacket.From != null && sipPacket.To != null)
{
this.MainPacketHandler.OnVoipCallDetected(sipPacket.SDP.IP, sipPacket.SDP.Port.Value, previousEndPoint.Item1, previousEndPoint.Item2, sipPacket.CallID, sipPacket.From, sipPacket.To);
if (ft != null)
{
}
}
break;
}
}
}
if (matchedTuple == null)
{
this.callEndPoints[sipPacket.CallID].Add(endPoint);
}
if (matchedTuple != null)
{
this.callEndPoints[sipPacket.CallID].Remove(matchedTuple);
}
}
else
{
this.callEndPoints.Add(sipPacket.CallID, new List <Tuple <System.Net.IPAddress, ushort, FiveTuple> >()
{
endPoint
});
}
}
/*
* //check if we have a reverse tuple
* Tuple<System.Net.IPAddress, System.Net.IPAddress> reverseIpPair = new Tuple<System.Net.IPAddress, System.Net.IPAddress>(destinationHost.IPAddress, sourceHost.IPAddress);
*
* TODO: Använd CALL ID istället som unik nyckel!
*
* lock (this.endPointCandidates) {
* if (this.endPointCandidates.ContainsKey(reverseIpPair)) {
* ushort reversePort = this.endPointCandidates[reverseIpPair];
* this.endPointCandidates.Remove(reverseIpPair);
*
* if (this.udpPayloadProtocolFinder != null && !String.IsNullOrEmpty(sipPacket.SDP.Protocol) && sipPacket.SDP.Protocol.StartsWith("RTP", StringComparison.InvariantCultureIgnoreCase))
* this.udpPayloadProtocolFinder.SetPayload(sourceHost.IPAddress, sipPacket.SDP.Port.Value, destinationHost.IPAddress, reversePort, ApplicationLayerProtocol.Rtp);//this might come in too late because the UDP packet has probably already been parsed by now.
* if(sipPacket.From != null && sipPacket.To != null) {
* FiveTuple fiveTuple = new FiveTuple(sourceHost, sipPacket.SDP.Port.Value, destinationHost, reversePort, FiveTuple.TransportProtocol.UDP);
* this.MainPacketHandler.OnVoipCallDetected(fiveTuple, sipPacket.From, sipPacket.To);
* System.Collections.Specialized.NameValueCollection nvc = new System.Collections.Specialized.NameValueCollection();
* nvc.Add("From", sipPacket.From);
* nvc.Add("To", sipPacket.To);
* this.MainPacketHandler.OnParametersDetected(new Events.ParametersEventArgs(sipPacket.ParentFrame.FrameNumber, fiveTuple, true, nvc, sipPacket.ParentFrame.Timestamp, "SIP setup of call " + fiveTuple.ToString()));
* }
*
* }
* else {
* Tuple<System.Net.IPAddress, System.Net.IPAddress> ipPair = new Tuple<System.Net.IPAddress, System.Net.IPAddress>(sourceHost.IPAddress, destinationHost.IPAddress);
* if (this.endPointCandidates.ContainsKey(ipPair))
* this.endPointCandidates[ipPair] = sipPacket.SDP.Port.Value;
* else
* this.endPointCandidates.Add(ipPair, sipPacket.SDP.Port.Value);
* }
* }
*/
}
//rtpPacketHandler.NewRtpEndPoints.Enqueue(new Tuple<System.Net.IPAddress, System.Net.IPAddress, ushort>(destinationHost.IPAddress, sourceHost.IPAddress, sipPacket.SDP.Port.Value));
}
}
}
}