a
    kÄ#dâ  ã                   @   sb  d dl mZmZ d dlmZmZmZmZ ddddddd	d
dddddddœZG dd„ deƒZ	G dd„ deƒZ
G dd„ deƒZG dd„ deƒZG dd„ deƒZG dd„ deƒZG dd„ deƒZG d d!„ d!eƒZG d"d#„ d#eƒZG d$d%„ d%eƒZG d&d'„ d'eƒZee	e
ƒ ee
eƒ ee
eƒ ee
eƒ ee
eƒ ee
eƒ ee
eƒ ee
eƒ ee
eƒ ee
eƒ d(S ))é    )ÚPacketÚbind_layers)ÚByteEnumFieldÚ	ByteFieldÚIntFieldÚ
ShortFieldZREAD_IDZOPEN_IDZWRITE_IDZCHMOD_IDZCHOWN_IDZ	SETUID_IDZ	CHROOT_IDZCREATE_MODULE_IDZINIT_MODULE_IDZDELETE_MODULE_IDZ	CAPSET_IDZ	CAPGET_IDZFORK_IDZ	EXECVE_ID)r   é   é   é   é   é   é   é   é   é	   é
   é   é   é   c                   @   s,   e Zd ZdZeddƒeddƒeddƒgZdS )ÚUberlogger_honeypot_caractzUberlogger honeypot_caractZhoneypot_idr   ÚreservedZos_type_and_versionN)Ú__name__Ú
__module__Ú__qualname__Únamer   Úfields_desc© r   r   úP/var/www/html/gsl.tools/lib/python3.9/site-packages/scapy/contrib/ubberlogger.pyr       s
   þr   c                   @   sn   e Zd ZdZeddeƒeddƒeddƒeddƒeddƒeddƒed	dƒed
dƒeddƒeddƒeddƒgZdS )ÚUberlogger_uber_hzUberlogger uber_hZsyscall_typer   Ztime_secZ	time_usecÚpidÚuidZeuidZcap_effectiveZcap_inheritableZcap_permittedÚresÚlengthN)r   r   r   r   r   Úuberlogger_sys_callsr   r   r   r   r   r   r   )   s   
ör   c                   @   s   e Zd ZdZeddƒgZdS )ÚUberlogger_capget_datazUberlogger capget_dataÚ
target_pidr   N©r   r   r   r   r   r   r   r   r   r   r$   :   s   r$   c                   @   s4   e Zd ZdZeddƒeddƒeddƒeddƒgZdS )ÚUberlogger_capset_datazUberlogger capset_datar%   r   Zeffective_capZpermitted_capZinheritable_capNr&   r   r   r   r   r'   ?   s   ýr'   c                   @   s   e Zd ZdZeddƒgZdS )ÚUberlogger_chmod_datazUberlogger chmod_dataÚmoder   N)r   r   r   r   r   r   r   r   r   r   r(   G   s   r(   c                   @   s$   e Zd ZdZeddƒeddƒgZdS )ÚUberlogger_chown_datazUberlogger chown_datar    r   ÚgidNr&   r   r   r   r   r*   L   s   ÿr*   c                   @   s$   e Zd ZdZeddƒeddƒgZdS )ÚUberlogger_open_datazUberlogger open_dataÚflagsr   r)   Nr&   r   r   r   r   r,   R   s   ÿr,   c                   @   s$   e Zd ZdZeddƒeddƒgZdS )ÚUberlogger_read_datazUberlogger read_dataÚfdr   ÚcountNr&   r   r   r   r   r.   X   s   ÿr.   c                   @   s   e Zd ZdZeddƒgZdS )ÚUberlogger_setuid_datazUberlogger setuid_datar    r   Nr&   r   r   r   r   r1   ^   s   r1   c                   @   s   e Zd ZdZeddƒgZdS )ÚUberlogger_create_module_datazUberlogger create_module_dataÚsizer   Nr&   r   r   r   r   r2   c   s   r2   c                   @   s   e Zd ZdZeddƒgZdS )ÚUberlogger_execve_datazUberlogger execve_dataZnbargr   Nr&   r   r   r   r   r4   h   s   r4   N)Zscapy.packetr   r   Zscapy.fieldsr   r   r   r   r#   r   r   r$   r'   r(   r*   r,   r.   r1   r2   r4   r   r   r   r   Ú<module>
   sJ   ó	








