/// <summary> /// /// </summary> /// <param name="session"></param> /// <param name="message"></param> /// <param name="outputDir"></param> private void HashFiles(Session session, MimeKit.MimeMessage message, string parentDir, string outputDir) { if (System.IO.Directory.Exists(outputDir) == false) { return; } string mailFrom = GetSmtpMailFrom(System.IO.Path.Combine(this.dataDirectory, session.Guid.Substring(0, 2), session.Guid + ".bin")); string from = string.Empty; if (message.From != null) { List<string> temp = new List<string>(); Regex regex = new Regex("<(.*?)>", RegexOptions.IgnoreCase); for(int index = 0; index < message.From.Count; index++) { Match match = regex.Match(message.From[index].ToString()); if (match.Success == true) { temp.Add(match.Groups[1].Value); } else { temp.Add(message.From[index].ToString()); } } from = string.Join(",", temp); } string to = string.Empty; if (message.To != null) { List<string> temp = new List<string>(); Regex regex = new Regex("<(.*?)>", RegexOptions.IgnoreCase); for (int index = 0; index < message.From.Count; index++) { Match match = regex.Match(message.To[index].ToString()); if (match.Success == true) { temp.Add(match.Groups[1].Value); } else { temp.Add(message.To[index].ToString()); } } to = string.Join(",", temp); } string sender = string.Empty; if (message.Sender != null) { sender = message.Sender.Address; } MessageDetails messageDetails = new MessageDetails(); messageDetails.SrcIp = session.SrcIpText; messageDetails.SrcPort = session.SourcePort; messageDetails.DstIp = session.DstIpText; messageDetails.DstPort = session.DestinationPort; messageDetails.From = from; messageDetails.To = to; messageDetails.MailFrom = mailFrom; messageDetails.Sender = sender; messageDetails.Subject = message.Subject; messageDetails.Date = message.Date.ToString("o"); // Now MD5 the files foreach (string file in System.IO.Directory.EnumerateFiles(outputDir, "*.*", SearchOption.AllDirectories)) { if (System.IO.Path.GetFileName(file) == "Message.Info.txt") { continue; } try { // Not sure if BufferedStream should be wrapped in using block using (var stream = new BufferedStream(File.OpenRead(file), 1200000)) { MD5 md5 = new MD5CryptoServiceProvider(); byte[] hashMd5 = md5.ComputeHash(stream); AttachmentDetails attachmentDetails = new AttachmentDetails(); attachmentDetails.File = file; attachmentDetails.Md5 = woanware.Text.ConvertByteArrayToHexString(hashMd5); messageDetails.Attachments.Add(attachmentDetails); } } catch (Exception) { } } messageDetails.Save(System.IO.Path.Combine(outputDir, "Message.Details." + message.MessageId + ".xml")); }