| public AddTcpPacket ( PacketDotNet packet ) : void | ||
| packet | PacketDotNet | |
| return | void | |
public static void WorkOnPackets()
{
try
{
while(true)
{
Working_copy = new List<Packet>();
lock(_lock)
{
foreach(var p in Packets)
Working_copy.Add(p);
Packets = new List<Packet>();
}
//Working_copy = Working_copy.OrderBy(f => f.Tcp.SequenceNumber).ToList();
foreach(var p in Working_copy)
{
var s = Encoding.UTF8.GetString(p.Tcp.PayloadData);
if (s.StartsWith ("GET") || s.StartsWith ("POST") ||
s.StartsWith ("HEAD") || s.StartsWith ("PUT") ||
s.StartsWith ("DELETE") || s.StartsWith ("TRACE") ||
s.StartsWith ("OPTIONS") || s.StartsWith ("CONNECT") ||
s.StartsWith ("PATCH"))
{
var en = new Entity()
{
IpInfo = new IpInfo()
{
Source_Ip = p.Ip.SourceAddress.ToString(),
Source_Port = p.Tcp.SourcePort.ToString(),
Dest_Ip = p.Ip.DestinationAddress.ToString(),
Dest_Port = p.Tcp.DestinationPort.ToString()
},
IsRequest = true,
Next_sequence_number = p.Tcp.SequenceNumber
};
Pairs.AddRequest(en);
en.AddTcpPacket(p.Tcp);
}
else if (s.StartsWith ("HTTP"))
{
if(s.IndexOf('\n') != -1)
{
var line = s.Substring(0, s.IndexOf('\n'));
if(line.ToLower().Contains("100 continue"))
continue;
}
var en = new Entity()
{
IpInfo = new IpInfo()
{
Source_Ip = p.Ip.SourceAddress.ToString(),
Source_Port = p.Tcp.SourcePort.ToString(),
Dest_Ip = p.Ip.DestinationAddress.ToString(),
Dest_Port = p.Tcp.DestinationPort.ToString()
},
IsRequest = false,
Next_sequence_number = p.Tcp.SequenceNumber
};
Pairs.AddResponse(en, s);
en.AddTcpPacket(p.Tcp);
}
else
{
var any = Pairs.Pairs.LastOrDefault(f => f.Response == null && /*!f.Request._is_completed &&*/
f.Request.Next_sequence_number == p.Tcp.SequenceNumber &&
f.Request.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Request.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
f.Request.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Request.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString());
if(any != null && any.Request.Length <= Utils.MaxSizeInBytes)
{
any.Request.AddTcpPacket(p.Tcp);
continue;
}
any = Pairs.Pairs.LastOrDefault(f => f.Response != null && /*!f.Response._is_completed &&*/
f.Response.Next_sequence_number == p.Tcp.SequenceNumber &&
f.Response.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Response.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
f.Response.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Response.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString());
if(any != null && any.Response.Length <= Utils.MaxSizeInBytes)
{
any.Response.AddTcpPacket(p.Tcp);
continue;
}
int c = 500;
any = Pairs.Pairs.LastOrDefault(f => f.Response == null && /*!f.Request._is_completed &&*/
f.Request.Next_sequence_number - p.Tcp.WindowSize*c < p.Tcp.SequenceNumber &&
f.Request.Next_sequence_number + p.Tcp.WindowSize*c > p.Tcp.SequenceNumber &&
f.Request.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Request.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
f.Request.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Request.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString());
if(any != null && any.Request.Length <= Utils.MaxSizeInBytes)
{
any.Request.AddTcpPacket(p.Tcp);
continue;
}
any = Pairs.Pairs.LastOrDefault(f => f.Response != null && /*!f.Response._is_completed &&*/
f.Response.Next_sequence_number - p.Tcp.WindowSize*c < p.Tcp.SequenceNumber &&
f.Response.Next_sequence_number + p.Tcp.WindowSize*c > p.Tcp.SequenceNumber &&
f.Response.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Response.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
f.Response.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Response.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString());
if(any != null && any.Response.Length <= Utils.MaxSizeInBytes)
{
any.Response.AddTcpPacket(p.Tcp);
continue;
}
/*
var req = Pairs.Pairs.LastOrDefault(f => f.Request.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Request.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString() &&
f.Request.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Request.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
f.Response == null && !f.Request._is_completed);
if(req != null)
{
req.Request.AddTcpPacket(p.Tcp);
continue;
}
var res = Pairs.Pairs.LastOrDefault(f => f.Response != null &&
f.Response.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Response.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString() &&
f.Response.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Response.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
!f.Response._is_completed);
if(res != null)
{
res.Response.AddTcpPacket(p.Tcp);
continue;
}*/
}
}
foreach(var r in Pairs.Pairs.Where(f => f.Request.Packets_added))
{
r.Request.DoWorkOnPackets();
}
foreach(var r in Pairs.Pairs.Where(f => f.Response != null && f.Response.Packets_added))
{
r.Response.DoWorkOnPackets();
}
Capturing.RemovePairs();
Thread.Sleep(500);
}
}
catch(Exception e)
{
if(!(e is ThreadAbortException))
{
Console.Error.WriteLine("Working thread: {0}", e.InnerException != null ? e.InnerException.Message+"\n"+e.InnerException.StackTrace : e.Message+"\n"+e.StackTrace);
}
}
}
public static void WorkOnPackets()
{
try
{
while (true)
{
Working_copy = new List <Packet>();
lock (_lock)
{
foreach (var p in Packets)
{
Working_copy.Add(p);
}
Packets = new List <Packet>();
}
//Working_copy = Working_copy.OrderBy(f => f.Tcp.SequenceNumber).ToList();
foreach (var p in Working_copy)
{
var s = Encoding.UTF8.GetString(p.Tcp.PayloadData);
if (s.StartsWith("GET") || s.StartsWith("POST") ||
s.StartsWith("HEAD") || s.StartsWith("PUT") ||
s.StartsWith("DELETE") || s.StartsWith("TRACE") ||
s.StartsWith("OPTIONS") || s.StartsWith("CONNECT") ||
s.StartsWith("PATCH"))
{
var en = new Entity()
{
IpInfo = new IpInfo()
{
Source_Ip = p.Ip.SourceAddress.ToString(),
Source_Port = p.Tcp.SourcePort.ToString(),
Dest_Ip = p.Ip.DestinationAddress.ToString(),
Dest_Port = p.Tcp.DestinationPort.ToString()
},
IsRequest = true,
Next_sequence_number = p.Tcp.SequenceNumber
};
Pairs.AddRequest(en);
en.AddTcpPacket(p.Tcp);
}
else if (s.StartsWith("HTTP"))
{
if (s.IndexOf('\n') != -1)
{
var line = s.Substring(0, s.IndexOf('\n'));
if (line.ToLower().Contains("100 continue"))
{
continue;
}
}
var en = new Entity()
{
IpInfo = new IpInfo()
{
Source_Ip = p.Ip.SourceAddress.ToString(),
Source_Port = p.Tcp.SourcePort.ToString(),
Dest_Ip = p.Ip.DestinationAddress.ToString(),
Dest_Port = p.Tcp.DestinationPort.ToString()
},
IsRequest = false,
Next_sequence_number = p.Tcp.SequenceNumber
};
Pairs.AddResponse(en, s);
en.AddTcpPacket(p.Tcp);
}
else
{
var any = Pairs.Pairs.LastOrDefault(f => f.Response == null && /*!f.Request._is_completed &&*/
f.Request.Next_sequence_number == p.Tcp.SequenceNumber &&
f.Request.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Request.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
f.Request.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Request.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString());
if (any != null && any.Request.Length <= Utils.MaxSizeInBytes)
{
any.Request.AddTcpPacket(p.Tcp);
continue;
}
any = Pairs.Pairs.LastOrDefault(f => f.Response != null && /*!f.Response._is_completed &&*/
f.Response.Next_sequence_number == p.Tcp.SequenceNumber &&
f.Response.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Response.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
f.Response.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Response.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString());
if (any != null && any.Response.Length <= Utils.MaxSizeInBytes)
{
any.Response.AddTcpPacket(p.Tcp);
continue;
}
int c = 500;
any = Pairs.Pairs.LastOrDefault(f => f.Response == null && /*!f.Request._is_completed &&*/
f.Request.Next_sequence_number - p.Tcp.WindowSize * c <p.Tcp.SequenceNumber &&
f.Request.Next_sequence_number + p.Tcp.WindowSize *c> p.Tcp.SequenceNumber &&
f.Request.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Request.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
f.Request.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Request.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString());
if (any != null && any.Request.Length <= Utils.MaxSizeInBytes)
{
any.Request.AddTcpPacket(p.Tcp);
continue;
}
any = Pairs.Pairs.LastOrDefault(f => f.Response != null && /*!f.Response._is_completed &&*/
f.Response.Next_sequence_number - p.Tcp.WindowSize * c <p.Tcp.SequenceNumber &&
f.Response.Next_sequence_number + p.Tcp.WindowSize *c> p.Tcp.SequenceNumber &&
f.Response.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
f.Response.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
f.Response.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
f.Response.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString());
if (any != null && any.Response.Length <= Utils.MaxSizeInBytes)
{
any.Response.AddTcpPacket(p.Tcp);
continue;
}
/*
* var req = Pairs.Pairs.LastOrDefault(f => f.Request.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
* f.Request.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString() &&
* f.Request.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
* f.Request.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
* f.Response == null && !f.Request._is_completed);
* if(req != null)
* {
* req.Request.AddTcpPacket(p.Tcp);
* continue;
* }
*
* var res = Pairs.Pairs.LastOrDefault(f => f.Response != null &&
* f.Response.IpInfo.Dest_Ip == p.Ip.DestinationAddress.ToString() &&
* f.Response.IpInfo.Dest_Port == p.Tcp.DestinationPort.ToString() &&
* f.Response.IpInfo.Source_Ip == p.Ip.SourceAddress.ToString() &&
* f.Response.IpInfo.Source_Port == p.Tcp.SourcePort.ToString() &&
* !f.Response._is_completed);
* if(res != null)
* {
* res.Response.AddTcpPacket(p.Tcp);
* continue;
* }*/
}
}
foreach (var r in Pairs.Pairs.Where(f => f.Request.Packets_added))
{
r.Request.DoWorkOnPackets();
}
foreach (var r in Pairs.Pairs.Where(f => f.Response != null && f.Response.Packets_added))
{
r.Response.DoWorkOnPackets();
}
Capturing.RemovePairs();
Thread.Sleep(500);
}
}
catch (Exception e)
{
if (!(e is ThreadAbortException))
{
Console.Error.WriteLine("Working thread: {0}", e.InnerException != null ? e.InnerException.Message + "\n" + e.InnerException.StackTrace : e.Message + "\n" + e.StackTrace);
}
}
}
