a k#d*@sdZddlZddlZddlZddlZddlZddlZddlmZddl m Z m Z m Z m Z mZmZmZddlmZddlmZmZddlmZmZmZmZmZmZmZmZddlm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&dd l'm(Z(m)Z)m*Z*m+Z+m,Z,dd l-m.Z.dd l/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z;mZ>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZFdd lGmHZHmIZImJZJmKZKdd lLmMZMmNZNmOZOmPZPmQZQddlRmSZSmTZTddlUmVZVmWZWmXZXddlYmZZZm[Z[ddl\m]Z]m^Z^ddl_m`Z`ddlaZbddlcmdmeZeGdddefZgdddddddddddd d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/ZhGd0d1d1eHZiGd2d3d3eHZjGd4d5d5ejZkGd6d7d7ejZlGd8d9d9ejZmGd:d;d;ejZnGdd?d?enZpGd@dAdAejZqGdBdCdCejZrGdDdEdEerZsGdFdGdGejZtGdHdIdIejZuGdJdKdKejZvGdLdMdMejZwGdNdOdOejZxdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^dd_d`dadbdcdddedfdgdhdidjdkdlfZyGdmdndneHZzdodpZ{GdqdrdreQZ|GdsdtdteBZ}Gdudvdve;Z~Gdwdxdxe:e5ZGdydzdzeHegZd{d|Zd}d~ZddZddZddZddZGdddeHZGdddeHZdddddddddddddddd'dddddddddddZddddddddddddddddddddddddddddddddddŜdƜZgdǢZGddɄdeHZGdd˄deZGdd̈́deZGddτdeZGddфdeZeIe eddӍeIe#eddԍeIe$eddԍeIe%eddՍeJe&eddӍeIe&eejdӍeIeeddbd֍eIeedd_d֍eIeeddd֍eIeeddd֍eIeeddbd֍eIeedd_d֍eIeeddd֍eIeeddd֍eIee$ddd֍e.jeee.jeee.jeee.jeee.jeeddۄZe.je eee.je!eee.jjdddބZe.jjdddZddZdddZe.jjddZe.jjddZddZeeV_GdddeXZe.jjdd_deMddd`dfdd'Ze.jjddZGdddeZZe.jjddZe.jjddddfddZe.jjdddZe.jjd ddZGdddeZe.jeeeg7_e.jeeeg7_e.jrddlZbdS( z IPv4 (Internet Protocol v4). N) defaultdict)checksumdo_graphincremental_label linehexdumpstrxorwhoiscolgen)AnsweringMachine)GenNet)ETH_P_IP ETH_P_ALLDLT_RAW DLT_RAW_ALTDLT_IPV4 IP_PROTOS TCP_SERVICES UDP_SERVICES)EtherDot3 getmacbyip CookedLinuxGRESNAPLoopback)rawchborb bytes_encodeOptional)conf) BitEnumFieldBitField ByteEnumField ByteFieldConditionalField DestFieldEmph FieldLenFieldFieldListField FlagsFieldIPFieldIntFieldMultiEnumFieldMultipleTypeFieldPacketListFieldShortEnumField ShortField SourceIPFieldStrFieldStrFixedLenField StrLenField XByteField XShortField)Packet bind_layersbind_bottom_up NoPayload) RandShortRandIntRandBinRandNum VolatileValue)srsr1) _PacketList PacketList SndRcvList) AutomatonATMT) log_runtimewarning) inet_ptonc@s4eZdZdZgZddZddZddZdd Zd S) IPToolsz3Add more powers to a class with an "src" attribute.cCstt|jdddS)z%whois the source and print the outpututf8ignoreN)printrsrcdecodeselfrTH/var/www/html/gsl.tools/lib/python3.9/site-packages/scapy/layers/inet.pyrJsz IPTools.whoiscCst|tjjjr|jS|jS)z0Returns ttl or hlim, depending on the IP version) isinstancescapylayersinet6IPv6hlimttlrRrTrTrU_ttlNsz IPTools._ttlcCs,tgd|g}|||dS)N) @)sortedr]index)rStrTrTrUottlRsz IPTools.ottlcCs||SN)rfr]rRrTrTrUhopsVsz IPTools.hopsN) __name__ __module__ __qualname____doc__ __slots__rr]rfrhrTrTrTrUrLFs rLZ end_of_listZnopsecurityZloose_source_route timestampZextended_securityZcommercial_securityZ record_routeZ stream_idZstrict_source_routeZexperimental_measurementZ mtu_probeZ mtu_replyZ flow_controlZaccess_controlencodeZimi_traffic_descriptorZ extended_IP tracerouteZaddress_extensionZ router_alertZ!selective_directed_broadcast_modeZdynamic_packet_stateZupstream_multicast_packetZ quick_startZrfc4727_experiment)rrb c@s8eZdZedddedddddded dd egZd S) _IPOption_HDR copy_flagrrboptclassrrcontroldebug)rrroptionruN)rirjrkr#r"_ip_options_names fields_descrTrTrTrUrws  rc@s`eZdZdZeedddddddedd d dd gZd d ZiZ e ddZ e dddZ dS)IPOptionz IP OptionlengthNBvaluecCs|dSNrrrTpktlrTrTrUzIPOption.fmtZ length_ofadjustcCs |jdSrrrrTrTrUrrZ length_fromcCsd|fS)NrrT)rSprTrTrUextract_paddingszIPOption.extract_paddingcCs||j|jj<dSrg)registered_ip_optionsrdefault)clsrTrTrUregister_variantszIPOption.register_variantcOs,|r(t|dd@}||jvr(|j|S|S)Nr)rr)rrargskargsoptrTrTrU dispatch_hooks   zIPOption.dispatch_hook)N) rirjrknamerr)r6rrr classmethodrrrTrTrTrUr}s rc@seZdZdZdZegZdS) IPOption_EOLzIP Option End of Options ListrNrirjrkrrrrrTrTrTrUrsrc@seZdZdZdZegZdS) IPOption_NOPzIP Option No OperationrbNrrTrTrTrUrsrc @sHeZdZdZdZdZeeddeddedded de d d d gZ d S)IPOption_SecurityzIP Option Securityrbrrrr{rnrZ compartmentZhandling_restrictionsZtransmission_control_codeZxxxrsN) rirjrkrrrrr%r2r5rrTrTrTrUrs rc @sVeZdZdZdZeeddddddd ed d edge d d dddgZ ddZ dS) IPOption_RRzIP Option Record RouterwrNrrouterscCs|dSNrsrTrrTrTrUrrzIPOption_RR.rpointerrtr0.0.0.0cCs |jdSrrrrTrTrUrrrcCs|j|jddS)Nrtrb)rrrRrTrTrUget_current_routerszIPOption_RR.get_current_router) rirjrkrrrr)r%r*r,rrrTrTrTrUrsrc@seZdZdZdZdZdS) IPOption_LSRRz'IP Option Loose Source and Record RouterbrsNrirjrkrrrrTrTrTrUrsrc@seZdZdZdZdZdS) IPOption_SSRRz(IP Option Strict Source and Record RouterbryNrrTrTrTrUrsrc@s.eZdZdZdZdZeeddeddgZ dS) IPOption_Stream_IdzIP Option Stream IDrbrxrrtrnrN) rirjrkrrrrr%r2rrTrTrTrUrsrc@s*eZdZdZdZeeddeddgZdS)IPOption_MTU_ProbezIP Option MTU Prober{rrtZmturN) rirjrkrrrr%r2rrTrTrTrUrs rc@seZdZdZdZdS)IPOption_MTU_ReplyzIP Option MTU Replyr|N)rirjrkrrrTrTrTrUrsrc@sBeZdZdZdZeeddeddeddedded d gZ d S) IPOption_TraceroutezIP Option Tracerouterrr|idrZ outbound_hopsZ return_hopsZ originator_iprN) rirjrkrrrr%r2r,rrTrTrTrUrsrc @sneZdZdZdZdZeeddeddedd de d d dd d dde e dddde dd gZ ddZdS)IPOption_TimestampzIP Option TimestamprrrtrNrryZoflwrflgrbZtimestamp_onlyZtimestamp_and_ip_addrZprespecified_ip_addr)rrbrsZinternet_addressrcCs |jdkSNr)rrrTrTrUrrzIPOption_Timestamp.rocCs:|jdur2|ddtdt||dd}||S)Nrb!Brr)rstructpacklen)rSrpayrTrTrU post_builds (zIPOption_Timestamp.post_build)rirjrkrrrrr%r#r"r&r,r-rrrTrTrTrUrs&   rc@s6eZdZdZdZdZeeddeddeddgZ d S) IPOption_Address_ExtensionzIP Option Address ExtensionrbrrrzZsrc_extrZdst_extN) rirjrkrrrrr%r,rrTrTrTrUrsrc@s4eZdZdZdZdZeeddeddddigZ d S) IPOption_Router_AlertzIP Option Router AlertrbrrrtalertrZrouter_shall_examine_packetN) rirjrkrrrrr%r1rrTrTrTrUr src@sJeZdZdZdZdZeedddddd d edge d d d d dgZ dS) IPOption_SDBMz+IP Option Selective Directed Broadcast ModerbrrNr addressescCs|dSrrTrrTrTrUrrzIPOption_SDBM.rrrcCs |jdSrrrrTrTrUrrr) rirjrkrrrrr)r*r,rrTrTrTrUrsrEOLNNOPN)MSS!H)WScaler)SAckOKN)SAck!) Timestamp!II) AltChkSumz!BH) AltChkSumOptN)MD5Z16s)Moodz!p)UTOr)AON)TFOr)rrbrrrsrtrurxr~rrr"rbrrrsrtrurxr~rrrrrr)rrrrrrrrrrrrrrc@s4eZdZdZeddeddeddddd gZdS) TCPAOValuezValue of TCP-AO optionZkeyidNZ rnextkeyidmacrcCst|jdSr)roriginalrrTrTrUrIrzTCPAOValue.r)rirjrkrlr%r6rrTrTrTrUrDs rcCs$|jD]\}}|dkr|SqdS)z%Get the TCP-AO option from the headerrN)options)ZtcphdrZoptidoptvalrTrTrU get_tcpaoMs rc@s&eZdZdddZddZddZdS) RandTCPOptionsNcCs|durtdd}||_dS)Nrbru)r@size)rSrrTrTrU__init__Ws zRandTCPOptions.__init__c Csddt|jD}g}|D]\}}|dur<||dfqtd|}g}|D]\}d|}d|vsld|vrttt|}n"t|} t dd d | d }||qP||t |fq|S) Nc Ss.g|]&}ttddttdDqS)css"|]\}}|dkr||fVqdSrrT).0rrrTrTrU `sz1RandTCPOptions._fix...r)randomchoicelistsix itervalues TCPOptions)r_rTrTrU _s  z'RandTCPOptions._fix..rz!?([bBhHiIlLqQfdpP]|\d+[spx])rsrrrrrxrb) rangerappendrefindallbytesr?rcalcsizerrandinttuple) rSZ rand_patternsZ rand_valsonamerstructsrvalZstruv_sizerTrTrU_fix\s$    zRandTCPOptions._fixcCstdd|Srg)TCPOptionsFieldi2mrrRrTrTrU __bytes__yszRandTCPOptions.__bytes__)N)rirjrkrrr rTrTrTrUrVs rc@s8eZdZdZddZddZddZdd Zd d Zd S) r rbcCsH|jdd}|dkr(td|jd}||d|||d|fS)Nrurtrz$bad dataofs (%i). Assuming dataofs=5)dataofsrIinfom2i)rSrrZopszrTrTrUgetfieldszTCPOptionsField.getfieldc CsNg}|rJt|d}|dkr,|dqJ|dkrL|d|dd}qzt|d}Wntyrd}Yn0|dkrtd|d}|d|}|tdvr.td|\}}|dkr|dt|d 7}|d krt|}|rt |t|krt ||}t|dkr|d}|||fn|||f||d}q|S) Nrrrbrrrz-Malformed TCP option (announced length is %i)ru%iIrtr) rr IndexErrorrIr rrrrrunpack) rSrxronumolenovalrofmtrTrTrUrsD        zTCPOptionsField.m2icCs |sgS|SrgrTrSrrrTrTrUi2hszTCPOptionsField.i2hc Csd}|D]b\}}ddd||}t|tr|dkrB|d7}qn|dkrV|d7}qn|tdvrtd|}td|d}|d kr|d t|7}t|ttf }|dur|sd |vrt|ts|f}tj|g|R}|d krt|}n t d |qn<|}t|t st d|qt|ttfs8t d|qt|trLt |}|t |t dt||7}q|ddt|ddS)NrrrrrbrbrrurrrzOption [%s] unknown. Skipped.zInvalid option number [%i]zOption [%i] is not bytes.rrrsrt) getrVstrrrrrrrrJintrr) rSrrrrrrrZ_test_isinstancerTrTrUr sF          "zTCPOptionsField.i2mcCstSrg)rrRrTrTrUrandvalszTCPOptionsField.randvalN) rirjrkZislistrrrr r rTrTrTrUr }s  %(r c@s&eZdZedZddZddZdS)ICMPTimeStampFieldzM([0-2]?[0-9])[Hh:](([0-5]?[0-9])([Mm:]([0-5]?[0-9])([sS:.]([0-9]{0,3}))?)?)?$cCsN|dur dSt|d\}}t|d\}}t|d\}}d|||t|fSdS)Nz--<z %d:%d:%d.%d)divmodr)rSrvalsecZmilliminhourrTrTrUi2reprs zICMPTimeStampField.i2reprc Cst|tr|j|}|rz|\}}}}}}}t|p8dddd}t|dt|pZddt|pjdd|}qd}n|durttdd}|S)NrZ000rsr#rr"iQ)rVrre_hmsmmatchgroupsrtime) rSrr%ZhmsmshrmrmsrTrTrUany2is  2zICMPTimeStampField.any2iN)rirjrkrcompiler*r)r1rTrTrTrUr!s  r!c@s(eZdZiZddZddZddZdS) DestIPFieldcCs t||dt|||dSrg)r,rr')rSrrrTrTrUrszDestIPField.__init__cCs |dur||}t|||Srg) dst_from_pktr,r rrTrTrUr s zDestIPField.i2mcCs |dur||}t|||Srg)r4r,rrrTrTrUrs zDestIPField.i2hN)rirjrkZbindingsrr rrTrTrTrUr3sr3c@seZdZdgZdZedddedddeddedded d ed dd gd eddde dde dde e dde edde eddedgedddg ZddZddZdd Zd!d"Zd#d$Zd%d&Zd*d(d)ZdS)+IP _defrag_posversionrtihlNZtosrrrrbflagsrs)MFZDFZevilfragr}r\r_protochksumrPdstz 127.0.0.1rcCs|jddS)Nrtr)r8rrTrTrUrrz IP.rcCs|j}|dt| d7}|durVt|d}t|jd@d>|d@B|dd}|jdurt|t|}|ddtd||dd}|jdurt|}|ddt|d?t|d @|d d}||S) Nrrtrrbrrrrzrxrar|)r8rrr7rrr=r)rSrrr8tmp_lenckrTrTrUrs & $ 0z IP.post_buildcCs8|j|jd>}|dkr |dfS|d|||dfS)Nrrrr)rr8rSrr?rTrTrUr+szIP.extract_paddingcCs:|j}t|trtt|}tjdur.ddl}tj|Sr)r>rVr nextiterr!routeZ scapy.route)rSr>rWrTrTrUrD1s    zIP.routecCs|jtjkr0t|jtr0|jjdvr0|jjStj sJ|jdvrJ|jS|j dkrlt d|j|jStj rtjrtttj|jttj|j t d|j|jSt d|j|jS)Nrsrtrur{r|rt) 224.0.0.251r)r<socket IPPROTO_ICMPrVpayloadICMPtypehashretr! checkIPinIPr>rr checkIPsrc checkIPaddrrrKAF_INETrPrRrTrTrUrN:s&         z IP.hashretcCstjsh|jdvr|j|St|tr<|jdvr<||jStjrht|tj j j rh|j dvrh||jSt|tsvdStj r|jdkr|jdkr|j|jS|j|jkrdS|jtjkrt|jtr|jjdvr|jj|Stj r|j|jks|j|jkrdS|j|jSdS)NrFrrHrE)r!rOr<rKanswersrVr5 ipv6_enabledrWrXrYrZZnhrQr>rPrIrJrLrMrSotherrTrTrUrSIs:          z IP.answerscCs"|d}|jr|d|j7}|S)Nz%IP.src% > %IP.dst% %IP.proto%z frag:%i)sprintfr;)rSrrTrTrU mysummaryfs z IP.mysummaryc CsF|}||d8}g}d}|}|jdur6|d7}|j}q|D]}t||j}t||krf||q:t|||d|d}t|D]} |} | |`| |`| |`| |dkr| |jdO_| d|} n | ||} | |j | |d7_ t j || || d} ||jj | _ | | || qq:|S)zFragment IP datagramsrxrNrbload) underlayerrrKrrrcopyr=r9r;r! raw_layeroverload_fields add_payload) rSfragsize lastfragszlstZfnbflrrnbiqfragendrrTrTrUfragmentls:         z IP.fragment)rY)rirjrkrmrr#r7r2r+r%r$rr8r(r3r3r0rrrrrDrNrSrXrjrTrTrTrUr5 s.       r5c Cs|jdurb|jdurFtdd|jD}d|d|dr>dnd}n|j}t|jd|d}n|}dd |jD}t|}|dkrt|djr|djd |_n|dkrd }|d 7}t||t d t t j |j t t j |j||S)zIPv4 Pseudo Header as defined in RFC793 as bytes :param proto: value of upper layer protocol :param u: IP layer instance :param plen: the length of the upper layer and payload Ncss|]}t|VqdSrgrrrrTrTrUrrz#in4_pseudoheader..rurtrbrcSs$g|]}t|tst|tr|qSrT)rVrr)rrrTrTrUrs z$in4_pseudoheader..z!Found %d Source Routing Options! z0Falling back to IP.dst for checksum computation.z!4s4sHH)rr8sumrmaxrr>rJrrrKrIrRrP) r<uplenrr8lnZ sr_optionsZlen_sr_optionsmessagerTrTrUin4_pseudoheaders*     rtcCs2t|tstddSt||t|}t||S)zIPv4 Pseudo Header checksum as defined in RFC793 :param nh: value of upper layer protocol :param u: upper layer instance :param p: the payload of the upper layer provided as a string 3No IP underlayer to compute checksum. Leaving null.r)rVr5rJrtrr)r<rprZpsdhdrrTrTrU in4_chksums  rvcCs t|tjjjpt|tjjjSrg)rVrWrXrYrZ _IPv6ExtHdrrrTrTrU_is_ipv6_layersrxcCsjt|jtr(tt|}ttj|j|Stj r^t |jr^tt|}t t j jtj|j|StddS)z[Pseudoheader of a TCP packet as bytes Requires underlayer to be either IP or IPv6 z.TCP packet does not have IP or IPv6 underlayerN)rVr\r5rrrtrI IPPROTO_TCPr!rTrxrrWrXrYZin6_pseudoheader ValueError)tcprqrTrTrUtcp_pseudoheaders     r|cCsfddl}|}t|}|t|||dd|d||dd|||S)z>Calculate TCP-MD5 hash from packet and return a 16-byte stringrNrsr)hashlibmd5rupdater|digest)r{keyr}r.Z tcp_bytesrTrTrUcalc_tcp_md5_hashs  rcCs t||}|jd|fg|_dS)z&Append TCP-MD5 signature to tcp packetrN)rr)r{rsigrTrTrU sign_tcp_md5s rc @seZdZdZeddeeddeeddeddedd d ed dd ed ddde dde dd e dde ddg Z ddZ ddZddZddZd S)TCPsportrdportPseqrackr Nrtreservedrsr9rrryZ FSRPAUECNwindowi r=ZurgptrrrcCs>||7}|j}|durzt|d||j}d|dd}|d>t|dd@B}|ddt|d@|dd}|jdur:t|j t rt t j |j |}|dd td ||d d}nrtjrt|j tjjjst|j tjjjr0tjjt j |j |}|dd td ||d d}n td |S) Nrrursrtr|rrar}rrrru)r r get_fieldr rrrr=rVr\r5rvrIryrrr!rTrWrXrYrZrw in6_chksumrIr )rSrrr Zopt_lenr@rTrTrUrs$$  &,&zTCP.post_buildcCs2tjr$td|j|jA|jS|jSdS)NH)r!rPrrrrrKrNrRrTrTrUrNsz TCP.hashretcCst|tsdS|jjrdS|jjr:|jjs.dS|jjs:dStjr\|j|j krX|j |jks\dS|jjrl|jjrt |j |j dkrdS|jjr|jjsdSt |j |j dt |jkrdSdS)Nrrrrb)rVrr9RSAr!rPrrabsrrrrKrUrTrTrUrSs.   z TCP.answerscCsJt|jtr|jdStjr %IP.dst%:%TCP.dport% %TCP.flags%z?TCP %IPv6.src%:%TCP.sport% > %IPv6.dst%:%TCP.dport% %TCP.flags%z)TCP %TCP.sport% > %TCP.dport% %TCP.flags%) rVr\r5rWr!rTrWrXrYrZrRrTrTrUrX;s    z TCP.mysummary)rirjrkrr1rr-r#r+r2r8r rrrNrSrXrTrTrTrUrs"      rc@s`eZdZdZeddeeddeeddeddgZddZ d d Z d d Z d dZ ddZ dS)UDPr5rrNr=cCs||7}|j}|durBt|}|ddtd||dd}|jdurt|jtrttj |j|}|dkrvd}|ddtd||dd}nxt|jt j j j st|jt j j jr t j j tj |j|}|dkrd}|ddtd||dd}n td|S)Nrtrrvrirxru)rrrr=rVr\r5rvrI IPPROTO_UDPrWrXrYrZrwrrIr )rSrrr?r@rTrTrUrKs($  &&&zUDP.post_buildcCs"|jd}|d|||dfS)NrxrkrArTrTrUrds zUDP.extract_paddingcCs |jSrg)rKrNrRrTrTrUrNhsz UDP.hashretcCs2t|tsdStjr$|j|jkr$dS|j|jSr)rVrr!rPrrrKrSrUrTrTrUrSks   z UDP.answerscCsDt|jtr|jdSt|jtjjjr6|jdS|dSdS)Nz/UDP %IP.src%:%UDP.sport% > %IP.dst%:%UDP.dport%z3UDP %IPv6.src%:%UDP.sport% > %IPv6.dst%:%UDP.dport%zUDP %UDP.sport% > %UDP.dport%)rVr\r5rWrWrXrYrZrRrTrTrUrXss    z UDP.mysummary)rirjrkrr1rr2r8rrrrNrSrXrTrTrTrUrDs  rz echo-replyz dest-unreachz source-quenchredirectz echo-requestzrouter-advertisementzrouter-solicitationz time-exceededzparameter-problemztimestamp-requestztimestamp-replyzinformation-requestzinformation-responsezaddress-mask-requestzaddress-mask-replyzdatagram-conversion-errorzmobile-host-redirectzipv6-where-are-youzipv6-i-am-herezmobile-registration-requestzmobile-registration-replyzdomain-name-requestzdomain-name-replyskipZphoturis)rrsrtrurxryrzr{r|r}r~rrrrrrr^!r#$%&'(znetwork-unreachablezhost-unreachablezprotocol-unreachablezport-unreachablezfragmentation-neededzsource-route-failedznetwork-unknownz host-unknownznetwork-prohibitedzhost-prohibitedzTOS-network-unreachablezTOS-host-unreachablezcommunication-prohibitedzhost-precedence-violationzprecedence-cutoff)rrbrrrsrtrurvrwryrzr{r|r}r~rznetwork-redirectz host-redirectzTOS-network-redirectzTOS-host-redirect)rrbrrrszttl-zero-during-transitzttl-zero-during-reassemblyrz ip-header-badzrequired-option-missingzbad-spizauthentication-failedzdecompression-failedzdecryption-failedzneed-authentificationzneed-authorization)rrbrrrsrtru)rsrur{r|r) rrxr}r~rrrrrrc@sZeZdZdZeddeeddedddded d e ed dd de ed ddde e dd dde e dd dde e dd dde e dddde e dddde e dddde e dddde e dddde e d dd!dee d"dd#dfed"dd$dfged"d%dd&gZd'd(Zd)d*Zd+d,Zd-d.Zd/d0Zd S)1rLrMrxcodercCs|jSrgrMrrTrTrUrrz ICMP.r)Z depends_onrr=NrcCs |jtvSrgrMicmp_id_seq_typesrrTrTrUrrrcCs |jtvSrgrrrTrTrUrrZts_oricCs |jdvSNr}r~rrrTrTrUrrZts_rxcCs |jdvSrrrrTrTrUrrZts_txcCs |jdvSrrrrTrTrUrrZgwrcCs |jdkS)NrurrrTrTrUrrZptrcCs |jdkS)Nr|rrrTrTrUrrrcCs |jdvS)N)rsr{rrrTrTrUrrrcCs |jdvS)N)rsr{r|rrrTrTrUrrZ addr_maskcCs |jdvS)NrrrrrTrTrUrrZ nexthopmtucCs |jdkSrrrrTrTrUrrZunusedcCs |jdvS)N)r{r|rrrTrTrUrrcCs |jdvS)N) rrsrurxr{r|r}r~rrrrrrrTrTrUrrrrcCsN||7}|jdurJt|}|ddt|d?t|d@|dd}|S)Nrrrxrart)r=rr)rSrrr@rTrTrUrs  0zICMP.post_buildcCs0|jtvr&td|j|j|jS|jS)NZHH)rMrrrrrrKrNrRrTrTrUrNs z ICMP.hashretcCs>t|tsdS|j|jfdvr:|j|jkr:|j|jkr:dSdS)Nr))rxrr)rrr)rr)rr)rrrb)rVrLrMrrrUrTrTrUrSs   z ICMP.answerscCs|jdvrtSdSdS)NrE)rMIPerror)rSrKrTrTrUguess_payload_classs zICMP.guess_payload_classcCs&t|jtr|jdS|dSdS)Nz0ICMP %IP.src% > %IP.dst% %ICMP.type% %ICMP.code%zICMP %ICMP.type% %ICMP.code%)rVr\r5rWrRrTrTrUrXs  zICMP.mysummary)rirjrkrr$ icmptypesr. icmpcodesr8r&r!r,r%r2r/r-r5rrrNrSrrXrTrTrTrUrLs>   rLc@s eZdZdZddZddZdS)rz IP in ICMPcCst|tsdStj p |j|jk}|j|jk}tj p@|j|jk}|tjoZ|jt |jkO}|j |j k}|rz|rz|rz|s~dS|j |j Sr) rVr5r!rPrPr>Z checkIPIDrrIhtonsr<rKrS)rSrVZ test_IPsrcZ test_IPdstZ test_IPidZ test_IPprotorTrTrUrSs   zIPerror.answerscCs t|Srgr9rXrRrTrTrUrXszIPerror.mysummaryNrirjrkrrSrXrTrTrTrUrsrc@s eZdZdZddZddZdS)TCPerrorz TCP in ICMPcCsnt|tsdStjr0|j|jkr,|j|jks0dStjrj|jdurP|j|jkrPdS|jdurj|j|jkrjdSdSNrrb) rVrr!rPrrZcheck_TCPerror_seqackrrrUrTrTrUrSs       zTCPerror.answerscCs t|SrgrrRrTrTrUrX%szTCPerror.mysummaryNrrTrTrTrUrsrc@s eZdZdZddZddZdS)UDPerrorz UDP in ICMPcCs4t|tsdStjr0|j|jkr,|j|jks0dSdSr)rVrr!rPrrrUrTrTrUrS,s   zUDPerror.answerscCs t|SrgrrRrTrTrUrX5szUDPerror.mysummaryNrrTrTrTrUr)s rc@s eZdZdZddZddZdS) ICMPerrorz ICMP in ICMPcCs^t|tsdS|j|jkr&|j|jks*dS|jdvrV|j|jkrP|j|jkrPdSdSndSdS)Nr)rrxr}r~rrrb)rVrLrMrrrrUrTrTrUrS<s      zICMPerror.answerscCs t|SrgrrRrTrTrUrXKszICMPerror.mysummaryNrrTrTrTrUr9srir)r<)r)r;r<rvr/cCs t|jSrg)rr>)l2l3rTrTrUinet_register_l3gsrrYc Cs |}||d8}g}|D]}t|tj}t|||d|d}t|D]}|}|t`|t`|t`||dkr|tjdO_|d|} n |||} |tj||d7_t j |||| d} |tjj | _ | | | |qNq|S)zFragment a big IP datagramrxrbrZ)rr5rKrrr]r=r9r;r!r^r_r`r) rrarbrcrrrerfrgrhrirTrTrUrjss*     rjcCsX|dur |}|}|t`|t|t||}|dtjdO_|t||S)zBuild overlapping fragments to bypass NIPS p: the original packet overlap: the overlapping data fragsize: the fragment size of the packet overlap_fragsize: the fragment size of the overlapping packetNrmrb)r]r5rKr`rjr9)roverlapraZoverlap_fragsizergZqfragrTrTrU overlap_frags  rc Cs|d}|d}|jdks"|jjr0||dS|}tj|vrN|tjj`|t }|j dusj|j durvt |j}n|j |j d>}t }|ddD]}||jd>kr||jd>krt d||jd>|||f||q|t j dus|t j dur|t |t j7}n||t j |t j d>7}tj|vrN|tjj`||t j|j|jkr|j|_qd|j_|`|` ||}td d |D|_||dS) z.Internal usage only. Part of the _defrag_logicrrmNrrrbrsz*Fragment overlap (%i > %i) %r || %r || %rFcss|] }|jVqdSrgr6rlrTrTrUrrz_defrag_list..)r;r9r:extendr]r! padding_layerr\rKr5rr8r^rJr`r-r=ror6r) rcdefragmissfragrZlastpipZc_lentxtrgrTrTrU _defrag_listsB          rFcCsRtdd}g}d}|D]b}||_|d7}t|vrp|t}|jdksL|jjrp|j|j|j|j f}|| |q| |qg}g} t |D] } | j dddt| || qg} |D],}|t|} |j| _|j| _| | q|r8|| || |j dddt|dr(d |j} nd } t|| d St|t| t| fSd S) zInternal function used to defragment a list of packets. It contains the logic behind the defrag() and defragment() functions cSsgSrgrTrTrTrTrUrrz_defrag_logic..rrbcSs|jSrg)r;rrTrTrUrr)rcSs|jSrgrrrTrTrUrrlistnamezDefragmented %sZ Defragmented)rN)rr6r5r;r9r:rrPr>r<rrrsortr __class__rr-rhasattrrrE)plistcompleteZfragsfinalposrrZuniqrrrcZdefrag2rgrrTrTrU _defrag_logicsB        rcCs t|ddS)zpdefrag(plist) -> ([not fragmented], [defragmented], [ [bad fragments], [bad fragments], ... ])FrrrrTrTrUrsrcCs t|ddS)z plist defragmented as much as possible TrrrrTrTrU defragmentsrc sddlm}m}m}fddjD}fdd|D}g}tdd} |D]F} | tj} | D]0} | ddkr`| | j | d| d dfq`qL|st d gS|dd|dd dfd d fdd|D} |ikr|}|j | fi|}|s ||S)zOTries to graph the timeskew between the timestamps and real time for a given ipr)pltMATPLOTLIB_INLINEDMATPLOTLIB_DEFAULT_PLOT_KARGSc3s|]}|VqdSrg)Z_elt2pktrlrRrTrUr rz-_packetlist_timeskew_graph..c3s0|](}t|vr|tjkrt|vr|VqdSrg)r5rPrrl)rrTrUrrrNrrbz"No timestamps found in packet listcs,|\}}||}||d}||fS)zWrap the list of tuples.g@@rT)Zts_tupleZ wrap_secondsctrtXY)first_creation_timefirst_replied_timestamprTrU _wrap_data"sz._packetlist_timeskew_graph.._wrap_datacsg|] }|qSrTrTre)rrTrUr+rz._packetlist_timeskew_graph..)r)scapy.libs.matplotrrrresr!getlayerrrrr-r1rJplotshow)rSrrrrrtmpbcZtsfroptsodatalinesrT)rrrrrSrU_packetlist_timeskew_graphs.   $   rc@sbeZdZgdZdddZddZdd Zdd d Zd dZddZ dddZ e j dfddZ dS)TracerouteResult)graphdef graphpadding graphASrespaddinghlocnlocN TraceroutecCs2t||||d|_d|_d|_d|_d|_dSr)rFrrrrrr)rSrrstatsrTrTrUrAs zTracerouteResult.__init__cCs|ddS)NcSs|d|j|dfS)NzB%IP.dst%:{TCP:tcp%ir,TCP.dport%}{UDP:udp%ir,UDP.dport%}{ICMP:ICMP}z4%-15s,IP.src% {TCP:%TCP.flags%}{ICMP:%ir,ICMP.type%})rWr\)rrirTrTrUrJsz'TracerouteResult.show..)Z make_tablerRrTrTrUrIszTracerouteResult.showc Csi}|jD]L\}}t|vrq |tj}||vr6i||<|tjt|vf|||tj<q t|D]T}ztddt |D}Wnt yYqbYn0t |D]}||kr||=qqb|S)Ncss|]\}}|dr|VqdS)rbNrT)rryrTrTrUrYrz-TracerouteResult.get_trace..) rr5r>rPrLr\rrr' iteritemsrzr)rStracerridkr/ZlirTrTrU get_traceNs" "    zTracerouteResult.get_traceTcCs.ddl}|j|jd}||r*|dS)a,Give a 3D representation of the traceroute. right button: rotate the scene middle button: zoom shift-left button: move the scene left button on a ball: toggle IP displaying double-click button on a ball: scan ports 21,22,23,25,80 and 443 and display the resultrN)target)multiprocessingProcesstrace3D_notebookstartjoin)rSrrrrTrTrUtrace3Das zTracerouteResult.trace3Dc s|}ddlGfdddj_d|jj_jt ddt dd d d j_ i}i}|D]}||}g||<t d t |d D]}||vrg||<||vr||||vr|| |||| ||||q|| d || t||d qqr|D]}||}t|}t |D]}||d dkrhddd} n ||d rjj} njj} |d d|j||d d|j|d|||d| d} t|D]2} |t| kr| |d |kr| | |d <qqBq$tdddd} t|D]L} jt| } ddd} | D]$}j| |j| | dd|j} qfqBdfdd}jd|dS)z7Same than trace3D, used when ran from Jupyter notebooksrNcsJeZdZfddZfddZddZdfdd Zd d Zd d ZdS)z3TracerouteResult.trace3D_notebook..IPspherecsLjj|fi|||_d|_||jd|_d|_j|jj |_ dSNF) sphererrlabelsetlabel last_clickedfullveccolorrsavcolor)rSrrvpythonrTrUrvs z.IPsphere.__init__csd|_ddd|_tt|jdtgdddddd \}}t|dkrXd |j}n&d |j}|D]\}}||d 7}qf|j |dd dS)NTrbrr>)rrrrir)rr9rrtimeoutverbosez%s: no resultsz%s: zh{TCP:%IP.src%:%TCP.sport% %TCP.flags%}{TCPerror:%IPerror.dst%:%TCPerror.dport% %IP.src% %ir,ICMP.type%} )visible) rrrrBr5rrrrWr)rSarrrrirrTrU fullinfoss*    z=TracerouteResult.trace3D_notebook..IPsphere.fullinfoscSs|j|_d|_||jdSr)rrrrrrRrTrTrUunfullsz:TracerouteResult.trace3D_notebook..IPsphere.unfullNcsP|jdur$|dur|jj}d|j_n |dur0d}j||j|jdd|d|_dS)Nrrzr)textrspaceZxoffsetZyoffsetr)rrrradius)rSrrrrTrUrs  z.IPsphere.setlabelcSshzV|js|jjs Wt|_dS|jdurHt|jdkWt|_SWt|_dSt|_0dS)NFg?)rrrr-rrRrTrTrUcheck_double_clicks    zFTracerouteResult.trace3D_notebook..IPsphere.check_double_clickcSs"|jjdN_|jr|dSNrb)rrrrrRrTrTrUactionsz:TracerouteResult.trace3D_notebook..IPsphere.action)N) rirjrkrrrrrrrTrrTrUIPsphereus    rz!
%s
z\%(.*)\%z"\1z\`(.*)\`z&\1aCommands: %Click% to toggle information about a node. %Double click% to perform a quick web scan on this node. Camera usage: `Right button drag or Ctrl-drag` to rotate "camera" to view scene. `Shift-drag` to move the object around. `Middle button or Alt-drag` to drag up or down to zoom in or out. On a two-button mouse, `middle is wheel or left + right`. Touch screen: pinch/extend to zoom, swipe or two-finger rotate.Trb)unkrmrmg?rr)rrrg?g?g?g?皙?)rZaxisrr2csN|jdkrJjjj}|rJt|rJ|rB|jdkr8dS|n|dS)Nleftr) ZpressscenemousepickrVrrrr)ZevrrrrTrU mouse_clicks    z6TracerouteResult.trace3D_notebook..mouse_clickZ mousedown)rrrZcanvasrrtitleZappend_to_captionrsubexitrrorrdrrrgreenbluecospisinrrr rBZcylinderrZratebind)rSrZringsZtr3drftrrerir?colrZtrlstZforecolrrr!rTr rUrpst3    J   z!TracerouteResult.trace3D_notebookc sNddlm}m}m}zddl}ddl}Wn tyHtdgYS0t j s^tdgSzddl m }Wn tytdgYS0|stdgSz|j t j }Wn$tytdt j gYS0i}i}i} |jD]\} } d|| j<| ts| tr,| j| j| j| jf} n4| trN| j| j| j| jf} n| j| j| jdf} || i} | tr| jd kr| | vrqd| | <| j| | j<| || <qi}|D]} || } g}tt| D]d}| |d}|durqz||}Wn|jj yYqYn0|!|j"j#|j"j$fq|r||| <q|j%d d |j&|'d ()*|+d ddl,m-}ddl.m/}t0|j1}g}t23|D]r\}t4|fddtt5dD}||d|dd}|!|6||7fddDq8|sB|9:|S)z*Display traceroute results on a world map.r)r MATPLOTLIBrNz6Cannot import geoip2. Won't be able to plot the world.zCannot import the geolite2 CITY database. Download it from http://dev.maxmind.com/geoip/geoip2/geolite2/ then set its path to conf.geoip_cityz_Cannot import cartopy. More infos on http://scitools.org.uk/cartopy/docs/latest/installing.htmlz=Matplotlib is not installed. Won't be able to plot the world.z!Cannot open geoip2 database at %sr{ZScapy)num)Z projectionzScapy traceroute results)LineCollection)colorscs g|]}||dfqS)rbrT)rrf)trcrTrUrnrz0TracerouteResult.world_trace..rbrr)Z linewidthsrrcsg|]}j|ddqS).)markerr)rrl)axrrTrUrvr);rrr-rZgeoip2.databaseZ geoip2.errors ImportErrorrIerrorr!Z geoip_cityZ cartopy.crsZcrsZdatabaseReader ExceptionrrPhaslayerrrr>r<rrLrMrr\rroZcityerrorsZAddressNotFoundErrorrlocationZ longitudeZlatitudeZfigureZaxesZ PlateCarreeZ coastlinesZ stock_imgZ set_globalr"Zmatplotlib.collectionsr/Z matplotlibr0rCZ BASE_COLORSrrrBrZadd_collectionrZlegendrremove)rSrr-rZgeoip2Zccrsdbipsr ports_donerritrace_idrZtrtZloctracerfrZsresultr/ZmcolorsZ colors_cyclerrZ data_linesZline_colrT)r4rr1rU world_traces                        zTracerouteResult.world_tracerc# Cs||_||_i}i}i}i}|jD]\}}|tpLtjrJ|tjj j pL|}|tpntjrl|tjj j pn|}d||j <t |vr|j |j d|jf} nJt|vr|j |j d|jf} n.t|vr|j |j d|jf} n|j |j |jdf} || i} tjr tjj j |vr |jp|j} t|vr,|tjdkstjrTtjj j |vrTtjj j|vs| |vr`q"d|| <||j g} t |vr| |d|d| | <nrt|vr| |d|d | | <nHt|vr| |d |d | | <n| |d |d | | <| ||j <n|d| | <| || <q"td} g}i}|D]}||} t| }tt| |D]}|| vrlt| | |<ql||vrJ|ddkrd|d|df}n\|ddkrd|d|df}n8|ddkrd|d|df}nd|d|df}d||<|||d<d|}|| |d<||qJtdd|D}|durlg}n |j|}i}i}|D]n\}}}|durq||g}||vr||vr|||||n |||||<|||<qt dddd}t dddd }d!}|d"7}|d#7}|D]r}|d$|7}t|}|d%|7}|d&|7}|d'7}|d(|||f7}||D]}|d)|7}qz|d*7}q&|d+7}|D]"} |d,| | d-!|| f7}q|d.7}|D]}|d/|7}q|rj|d07}i}|jD]N\} }!|!j |vr|!"tj#r|!tj#j$} | d1t%| krd||!j <q|D]}!|d2|!7}qV|d"7}|D]l}|d3t&|7}|d4t|7}||} t| }"tt| |"D]}|d5| |7}q|d6| |"7}qv|d77}||_'dS)8Nrvrrbrr{z) %TCP.sport% %TCP.flags%z"%r,src%":T%ir,TCP.sport%z %UDP.sport%z"%r,src%":U%ir,UDP.sport%z" ICMP %ICMP.type%z"%r,src%":I%ir,ICMP.type%z8{IP: IP %proto%}{IPv6: IPv6 %nh%}z)"%r,src%":{IP:P%ir,proto%}{IPv6:P%ir,nh%}z "%r,src%"zunk%irrz %s %i/icmprsz %s %i/tcpz %s %i/udpz %s %i/protoz"%s"css|]}|dddVqdS) rbrN)rsplitrlrTrTrUrrz.TracerouteResult.make_graph..Z60Z86baffZa0Z70Z40Z20zdigraph trace { z1 node [shape=ellipse,color=black,style=solid]; z #ASN clustering z subgraph cluster_%s { z color="#%s%s%s";z* node [fillcolor="#%s%s%s",style=filled];z fontsize = 10;z label = "%s\n[%s]" z "%s"; z } z #endpoints zM "%s" [shape=record,color=black,fillcolor=green,style=filled,label="%s|%s"]; |z #Blackholes z< %s [shape=octagon,color=black,fillcolor=red,style=filled]; z #Padding rz? "%s" [shape=triangle,color=black,fillcolor=red,style=filled]; z#---[%s z edge [color="#%s%s%s"]; z %s -> z %s; z} )(rrrrr5r!rTrWrXrYrZrPrr>rrrLrMr<rr[r\ZICMPv6TimeExceededrrWrrorr'rBsetresolver rr9rr[rreprr)#rSASresrr>rportsr?rrir@rr\rZ unknown_labelZ blackholesZbhipZrtkZ max_tracenZbhZASN_query_listZASNlistZASNsZASDsrZasndescZiplistZ backcolorlistZ forecolorlistr,padZsndZrcvZmaxtracerTrTrU make_graphs""  &B                         zTracerouteResult.make_graphcKs<|jdus|j|ks|j|kr*|||t|jfi|S)ax.graph(ASres=conf.AS_resolver, other args): ASres=None : no AS resolver => no clustering ASres=AS_resolver() : default whois AS resolver (riswhois.ripe.net) ASres=AS_resolver_cymru(): use whois.cymru.com whois database ASres=AS_resolver(server="whois.ra.net") type: output type (svg, ps, gif, jpg, etc.), passed to dot's "-T" option # noqa: E501 target: filename or redirect. Defaults pipe to Imagemagick's display program # noqa: E501 prog: which graphviz program to useN)rrrrOr)rSrJrrrTrTrUgraphs  zTracerouteResult.graph)NrN)T)Nr)rirjrkrmrrrrrrArOr!Z AS_resolverrPrTrTrTrUr=s   rrrc Ks|durtj}|durd}|dur`tt|t||fdtt||df|||d| \} } n4d}tt|t||fd|f|||d| \} } t| j} |r| | | fS)aHInstant TCP traceroute :param target: hostnames or IP addresses :param dport: TCP destination port (default is 80) :param minttl: minimum TTL (default is 1) :param maxttl: maximum TTL (default is 30) :param sport: TCP source port (default is random) :param l4: use a Scapy packet instead of TCP :param filter: BPF filter applied to received packets :param timeout: time to wait for answers (default is 2s) :param verbose: detailed output :return: an TracerouteResult, and a list of unanswered packetsNzq(icmp and (icmp[0]=3 or icmp[0]=4 or icmp[0]=5 or icmp[0]=11 or icmp[0]=12)) or (tcp and (tcp[13] & 0x16 > 0x10)))r>rr\)rrr)r filterr r) r!verbrBr5r=rr>rrr) rrZminttlZmaxttlrl4rQr r rrrrTrTrUrq%s(&   cKs|ddt|dS)zUtil function to call traceroute on multiple targets, then show the different paths on a map. :param ips: a list of IPs on which traceroute will be called :param kargs: (optional) kwargs, passed to traceroute r r) setdefaultrqrA)r>rrTrTrUtraceroute_mapIs rUc@seZdZdZddZddZddZejdd d d Z ed d Z eddZ eddZ ejddddZ ejddddZeddZee ddZeeddZee ddZeed d!Zee d"d#Zeed$d%Zeje d&d'd(d)d*Zeed+d,Zee d-d.Zee d/d0Zeed1d2Zee d3d4Zeed5d6Z ee d7d8Z!eed9d:Z"ee"d;d<Z#e$e dd=d>Z%e$edd?d@Z&dAS)B TCP_clientaF Creates a TCP Client Automaton. This automaton will handle TCP 3-way handshake. Usage: the easiest usage is to use it as a SuperSocket. >>> a = TCP_client.tcplink(HTTP, "www.google.com", 80) >>> a.send(HTTPRequest()) >>> a.recv() :param ip: the ip to connect to :param port: c Osddlm}tt||_||_tdd|_t |dt |j|jdtddd|_ |j j |_ |j t j |_d|_||jdd|_d |j |j|j|jf}tj|fd |i|dS) Nr) TCPSessionir l)rrr9rF)Zprnstorez,host %s and host %s and port %i and port %irQ)Zscapy.sessionsrWrr r>rr randrangerr5rrSrPrsackZrel_seq_transmit_packetrcvbufrG parse_args)rSrportrrrWZbpfrTrTrUr]gs"   zTCP_client.parse_argscCs|jjt|tjdS)z5Transmits a packet from TCPSession to the SuperSocketN)Zoir{sendrrrKrSrrTrTrUr[xszTCP_client._transmit_packetcCst|vo|tj|jko|tj|jkot|vo|tj|jko|tj|jko|jtj|tjko|jtjdkp|j |tjko|jtj|tj kSSr) r5rPr>rrrrSrrrZrr`rTrTrU master_filter|s@zTCP_client.master_filterrb)initialcCsdSrgrTrRrTrTrUSTARTszTCP_client.STARTcCsdSrgrTrRrTrTrUSYN_SENTszTCP_client.SYN_SENTcCsdSrgrTrRrTrTrU ESTABLISHEDszTCP_client.ESTABLISHEDcCsdSrgrTrRrTrTrULAST_ACKszTCP_client.LAST_ACK)rcCsdSrgrTrRrTrTrUCLOSEDszTCP_client.CLOSED)stopcCsdSrgrTrRrTrTrUSTOPszTCP_client.STOPcCsdSrgrTrRrTrTrUSTOP_SENT_FIN_ACKszTCP_client.STOP_SENT_FIN_ACKcCs |dSrg)rdrRrTrTrUconnectszTCP_client.connectcCs0d|jt_||j|jtjd7_dS)NrrbrSrr9r_rrRrTrTrUsend_syns  zTCP_client.send_syncCs|tjjr||dSrg)rr9ZSAreaction_parametersr`rTrTrUsynack_receiveds zTCP_client.synack_receivedcCs2|tjd|jt_d|jt_||jdS)Nrbr)rrrSrr9r_r`rTrTrUsend_ack_of_synacks zTCP_client.send_ack_of_synackcCs(t|tjttjfs$||dSrg)rVrrKr<r!rrernr`rTrTrUincoming_data_receivedsz!TCP_client.incoming_data_receivedcCsvt|tj}|rr|jtj|tjkrr|jtj|_|jtjt|7_d|jt_| |j|j |dS)Nr) rrrKrSrrrZrr9r_r\Zon_packet_received)rSrrrTrTrU receive_datas  zTCP_client.receive_datar{Ztcplink)rZas_supersocketcCs||dSrg)rernrecv)rSfdrTrTrUoutgoing_data_receivedsz!TCP_client.outgoing_data_receivedcCs8d|jt_||j||jtjt|7_dS)NZPA)rSrr9r_rr)rSrrTrTrU send_datas zTCP_client.send_datacCs|tjjr|dSrg)rr9rrgr`rTrTrUreset_receiveds zTCP_client.reset_receivedcCs|tjjr||dSrg)rr9Frfrnr`rTrTrU fin_receiveds zTCP_client.fin_receivedcCsFd|jt_|tjd|jt_||j|jtjd7_dSNZFArbrSrr9rrr_r`rTrTrU send_finacks  zTCP_client.send_finackcCs|tjjr|dSrg)rr9rrgr`rTrTrUack_of_fin_receiveds zTCP_client.ack_of_fin_receivedcCs |dSrg)rjrRrTrTrUstop_requestedszTCP_client.stop_requestedcCs0d|jt_||j|jtjd7_dSrzrlrRrTrTrUstop_send_finacks  zTCP_client.stop_send_finackcCs|tjjr||dSrg)rr9rxrgrnr`rTrTrUstop_fin_receiveds zTCP_client.stop_fin_receivedcCs2d|jt_|tjd|jt_||jdS)Nrrbr{r`rTrTrU stop_send_acks zTCP_client.stop_send_ackcCs |dSrgrgrRrTrTrUsyn_ack_timeoutszTCP_client.syn_ack_timeoutcCs |dSrgrrRrTrTrUstop_ack_timeoutszTCP_client.stop_ack_timeoutN)'rirjrkrlr]r[rarHstatercrdrerfrgrirj conditionrkrrmZreceive_conditionrorprqrrZioeventrurvrwryr|r}r~rrrr rrrTrTrTrUrVYsl                              rVcCstt|dt|ddd\}}d}|D],\}}|ts(|jjdkr(||d7}q(|d7}|D]<\}}|tr||d 7}qb|jjdkrb||d 7}qb|d7}|D]}||d 7}q|d 7}|S) zPportscan a target and output a LaTeX table report_ports(target, ports) -> stringr )rru)r z \begin{tabular}{|r|l|l|} \hline rz%TCP.sport% & open & SA \\ z\hline zO%TCPerror.dport% & closed & ICMP type %ICMP.type%/%ICMP.code% from %IP.src% \\ z*%TCP.sport% & closed & TCP %TCP.flags% \\ z %TCP.dport% & ? & unanswered \\ z\hline \end{tabular} )rBr5rr9rLrKr9rW)rrKansZunansreprrirfrTrTrU report_ports s"       rcCs |djSr)rrrTrTrUr#rrcCs |dSr)summaryrrTrTrUr#rcsfdd|D}||dg}|ddt|dd|ddD7}fdd|D}|td t||f|D]\}}td ||qdS) zIdentify IP id values classes in a list of packets lst: a list of packets funcID: a function that returns IP id values funcpres: a function used to summarize packetscsg|] }|qSrTrTr)funcIDrTrUr)rzIPID_count..rcSs,g|]$}t|d|ddkr|dqS)rrbr)r)rrerTrTrUr,rNrmrbcsg|]}||fqSrTrTrlrfuncpresrTrUr-rzProbably %i classes: %sz%5i)rziprOr)rcrrZidlstclassesrprrTrrU IPID_count"s ( r{rcCsvd}t|tddd}|t||d|}t}d} i} z |dusL|rZ|durft|trf|d8}z| sv||t|ggg|d} | sWq>| d} t| tsWq>t| j t sWq>t| j j t sWq>| j j j |krWq>| j|krtd| j| tjsWq>| tjj} | | vr4d| | <t| |d Wq>tyV| rNd} Yq>0q>WntypYn0dS) NZXXXXYYYYYYYYYY(rb)r>rrr9)rrri@z leak fromonlyasc)r5r=rr!ZL3socketrVrr_selectrsrKrLrr>rPrOr9rrr[rKeyboardInterrupt)rrrr rcountr[rrZintrfoundr)rleakrTrTrUfragleak4sN       r皙?cCsi}z|dus|r|dur,t|tr,|d8}t|ddd}|d}t||dd}|sVqtj|vr|tjj}||vrd||<t||dqWntyYn0dS) Nrbr)r>rr<ZXXXXYYYYYYYYYYYYrr r) rVrr5rCr!rr[rr8)rr rrrrrrrTrTrU fragleak2_s"    rc@s,eZdZdZdZddZddZddZd S) ICMPEcho_amz%Responds to ICMP Echo-Requests (ping)Z icmpechodcCs&|tr"|t}|jdkr"dSdS)NrxTF)r9rLrrM)rSreqZicmp_reqrTrTrU is_requestys    zICMPEcho_am.is_requestcCstd|tj|jfdS)NzReplying %s to %s)rOrr5r>rSrZreplyrTrTrU print_replyszICMPEcho_am.print_replycCsNt|tjdt}d|t_|tj|t_|tj|t_d|t_|S)Nr r)r5rPrLrMrrr=rrTrTrU make_replys   zICMPEcho_am.make_replyN)rirjrkrlZ function_namerrrrTrTrTrUrus r)rY)rxN)F)rrrrN)rrN)rlr-rrrrrI collectionsrZ scapy.utilsrrrrrrr Zscapy.ansmachiner Zscapy.base_classesr r Z scapy.datar rrrrrrrZscapy.layers.l2rrrrrrrZ scapy.compatrrrrr Z scapy.configr!Z scapy.fieldsr"r#r$r%r&r'r(r)r*r+r,r-r.r/r0r1r2r3r4r5r6r7r8Z scapy.packetr9r:r;r<Zscapy.volatiler=r>r?r@rAZscapy.sendrecvrBrCZ scapy.plistrDrErFZscapy.automatonrGrHZ scapy.errorrIrJZscapy.pton_ntoprKZscapy.as_resolversrWZscapy.libs.sixZlibsrobjectrLrrrrrrrrrrrrrrrrrrrrrr r!r3r5rtrvrxr|rrrrrrrrLrrrrrRZl2typesregisterZregister_num2layerZl3typesrZneighborZ register_l3commandsrjrrrrrrZtimeskew_graphrrqrUrVrrrrrZstats_classic_protocolsZstats_dot11_protocolsrTZscapy.layers.inet6rTrTrTrUs $ ($ d       $  'b&Q8=( *  7k# 3 *