Java PcapPacket.hasHeader方法代码示例

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
/**
 * Printing to DEV_NULL still causes entire packet structure to be decoded and
 * dumped to /dev/null while using every available header found in the packet.
 * Good stress test for Ip6 based packets.
 * 
 * @throws IOException
 *           Signals that an I/O exception has occurred.
 */
public void testScanIpv6File() throws IOException {
	TextFormatter out = new TextFormatter(OUT);
	out.setResolveAddresses(false);

	int i = 0;
	Ethernet eth = new Ethernet();
	for (PcapPacket packet : TestUtils.getIterable("tests/test-ipv6.pcap")) {

		System.out.println(packet.toDebugString());
		if (packet.hasHeader(eth)) {
			out.format(eth);
		}

		out.setFrameIndex(i++);
		out.format(packet);
	}
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
@Override
public Boolean meetCriteria(PcapPacket itemToCheck)
{
	if (!itemToCheck.hasHeader(Ip4.ID))
		return false;
	
	Ip4 ipHeader = new Ip4();
	ipHeader = itemToCheck.getHeader(ipHeader);
	
	if (direction == null) //direction wasn't set, so any direction
		return subnetInfo.isInRange(ipHeader.sourceToInt()) || subnetInfo.isInRange(ipHeader.destinationToInt());
	
	switch(direction)
	{
		case Incoming:	return subnetInfo.isInRange(ipHeader.sourceToInt());
		case Outgoing:	return subnetInfo.isInRange(ipHeader.destinationToInt());
		default:		return null; //doesn't get here
	}
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
@Override
public Boolean meetCriteria(PcapPacket itemToCheck)
{
	if (!itemToCheck.hasHeader(Ethernet.ID))
		return false;

	Ethernet eth = new Ethernet();
	eth = itemToCheck.getHeader(eth);

	switch (direction)
	{
		case Incoming:
			return Arrays.equals(ownMAC, eth.destination());
		case Outgoing:
			return Arrays.equals(ownMAC, eth.source());
		default:
			return false; //doesn't get here
	}
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
/**
 * Test sip.
 */
public void testSip() {
	Sip sip = new Sip();
	Sdp sdp = new Sdp();
	PcapPacket packet = super.getPcapPacket(SIP, 223 - 1);
	if (packet.hasHeader(sip)) {
		System.out.printf("%s", sip);

		if (packet.hasHeader(sdp)) {
			System.out.printf("%s", sdp);

		}
	} else {
		System.out.printf(packet.toString());
	}
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
/**
 * SKI p_test read entire suspect file.
 */
public void SKIP_testReadEntireSuspectFile() {

	Ip4 ip = new Ip4();
	for (PcapPacket packet : TestUtils.getIterable(BUG_FILE)) {
		try {
			if (packet.getFrameNumber() == 15) {
				System.out.println(packet);
				System.out.println(packet
				    .toHexdump(packet.size(), false, false, true));
			}

			packet.hasHeader(ip);
		} catch (NullPointerException e) {
			System.out.println(packet.getState().toDebugString());
			System.out.println(packet.toHexdump());

			throw e;
		}
	}
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
/**
 * pseudonymizes the packet according to the settings and stored the
 *
 * @param packet the captured PcapPacket
 */
@Override
public void handle(PcapPacket packet) {
    // Determine if the packet is an ethernet packet first.
    if (packet.hasHeader(Ethernet.ID)){
        _packetModifier.modifyPacket(packet);
        _pseudoDumper.dump(packet);
    }
    else {
        // TODO PEF-77: don't send or nullify the packet.
        logger.warning("Non-ethernet packet found, packet is left untouched.");
    }
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
/**
 * 将数据包汇聚成网络流
 * @param data
 */
private void converge(List<PacketInfo> data) {
    for (PacketInfo packetInfo : data) {
        PcapPacket packet = packetInfo.getPacket();
        Ip4 ip4 = new Ip4();
        Tcp tcp = new Tcp();

        if (!packet.hasHeader(ip4) || !packet.hasHeader(tcp)) continue;

        NetFlow netFlow = find(packetInfo);
        if (tcp.flags_SYN()) {      // SYN 作为TCP建立连接的标识，创建网络流
            if (netFlow == null) {
                netFlow = new NetFlow(ip4.sourceToInt(), ip4.destinationToInt(),
                        tcp.source(), tcp.destination());
                netFlow.add(packetInfo);
                netFlows.add(netFlow);
            }
        } else if (tcp.flags_FIN()) {
            if (netFlow != null) {
                netFlow.setClosed(true);        // FIN作为TCP结束标识，关闭网络流
            }
        } else {                    // 加入到已存在的网络流中
            if (netFlow != null && !netFlow.isClosed()) {
                netFlow.add(packetInfo);
            }
        }
    }
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
/**
 * 判断数据包是否属于当前网络流
 * @param packetInfo
 * @return
 */
public boolean contain(PacketInfo packetInfo) {
    boolean b = false;

    PcapPacket packet = packetInfo.getPacket();
    Tcp tcp = new Tcp();
    Ip4 ip4 = new Ip4();
    if (packet.hasHeader(ip4)
            && packet.hasHeader(tcp) ) {
        if (ip4.sourceToInt() == srcIp
                && ip4.destinationToInt() == dstIp
                && tcp.source() == srcPort
                && tcp.destination() == dstPort) {
            packetInfo.setReversed(false);
            b = true;
        } else if (ip4.sourceToInt() == dstIp
                && ip4.destinationToInt() == srcIp
                && tcp.source() == dstPort
                && tcp.destination() == srcPort) {
            packetInfo.setReversed(true);
            b = true;
        }
    }
    return b;
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
@Override
public void nextPacket(PcapPacket packet, Void nothing)
{
	if (isFirstPacket)
	{
		if (captureStartListener != null) //notify on first packet captured
			captureStartListener.captureStartedNotification();
	
		isFirstPacket = false;
	}
	
	if (packet.hasHeader(Ip4.ID) && (protocolsToCount.isEmpty() || isSelectedProtocol(packet))) //only if there's an IP layer, and if any filter is selected, filter it 
	{
		Ip4 ipHeader = new Ip4();
		ipHeader = packet.getHeader(ipHeader);

		int sourceInt = ipHeader.sourceToInt();
		int destInt = ipHeader.destinationToInt();

		int key;

		if (ownIpInt == sourceInt)
			key = destInt;
		else
			if (ownIpInt == destInt)
				key = sourceInt;
			else //not relevant to us
				return;

		Integer repeats = ipToAmountOfRepeats.get(key);

		if (repeats == null) //first time we see this ip
			ipToAmountOfRepeats.put(key, 1);
		else
			ipToAmountOfRepeats.put(key, repeats + 1);
	}
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
private boolean isSelectedProtocol(PcapPacket packet)
{
	for (Integer protocolId : protocolsToCount)
		if (packet.hasHeader(protocolId))
			return true;

	return false;
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
/**
 * Test http formatting with resolve address disabled.
 * 
 * @throws IOException
 *           Signals that an I/O exception has occurred.
 */
public void testHttpFormattingWithResolveAddressDisabled() throws IOException {
	JFormatter out = new TextFormatter(OUT);
	out.setResolveAddresses(false);

	PcapPacket packet = TestUtils.getPcapPacket("tests/test-http-jpeg.pcap", 5);

	Ip4 ip = new Ip4();
	Ethernet eth = new Ethernet();
	if (packet.hasHeader(eth)) {
		out.format(eth);
	}
	if (packet.hasHeader(ip)) {
		out.format(ip);
		out.format(ip);
	}

	out.format(packet);

	Html html = new Html();
	assertTrue("html header not found", packet.hasHeader(html));
	System.out.printf("link related tags=%s\n", Arrays.asList(html.links())
	    .toString());

	// if (true && packet.hasHeader(http)) {
	//
	// for (String e : http.fieldArray()) {
	// System.out.println(e);
	// }
	// }
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
/**
 * Test http formatting with resolve address enabled.
 * 
 * @throws IOException
 *           Signals that an I/O exception has occurred.
 */
public void testHttpFormattingWithResolveAddressEnabled() throws IOException {
	JLogger.getLogger(JConfig.class).setLevel(Level.FINE);

	JLogger.getLogger(Resolver.class.getPackage()).setLevel(Level.FINER);

	JFormatter out = new TextFormatter(OUT);
	out.setResolveAddresses(true);

	PcapPacket packet = TestUtils.getPcapPacket("tests/test-http-jpeg.pcap", 5);

	Ip4 ip = new Ip4();
	Ethernet eth = new Ethernet();
	if (packet.hasHeader(eth)) {
		out.format(eth);
	}
	if (packet.hasHeader(ip)) {
		// out.format(ip);
		out.format(ip);
		System.out.println();
	}

	// out.format(packet);

	// if (true && packet.hasHeader(http)) {
	// Map<String, Http.Entry> map = http.headerFields();
	//
	// for (Entry e : map.values()) {
	// System.out.println(e.toString());
	// }
	// }

	JRegistry.shutdown();
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
public void transp() {
	
	try {
		
		// jNetPcap �ʱ�ȭ
		Pcap pcap = packetInit(btn_start);
		
		// ��Ŷ �̺�Ʈ �ڵ鷯
		PcapPacketHandler<String> jpacketHandler = new PcapPacketHandler<String>() {
			
			public void nextPacket(PcapPacket packet, String user) {

				Ip4 ip = new Ip4();
				byte[] dIP = new byte[4], sIP = new byte[4];

				if (packet.hasHeader(ip)) {
					dIP = packet.getHeader(ip).destination();
					sIP = packet.getHeader(ip).source();
				} else {
					return;
				}
				
				// ����� IP
				String sourceIP = org.jnetpcap.packet.format.FormatUtils.ip(sIP);
				
				// ������ IP
				String destinationIP = org.jnetpcap.packet.format.FormatUtils.ip(dIP);
				
				/**
				 *  <pre>
				 *       << �������� >>
				 *       - ��� ��쿡���� ���� ��(��Ƽ or �δ�) ���� ������ �Է��� �޼��� ��Ŷ ������ �ݵ�� �޴´�.
				 *       - ���� ������ �޼��� ��Ŷ�� ������ ���α׷��� ���� �ִٸ� ���� ��(��Ƽor�δ�)������ �ݵ�� ������ ���޹޴´�.
				 *       - ���� Ȯ������ ������ ij���� ���� �����ϴ� ���� IP�� �� ���ڸ��� �ٸ��� �ϴ�.
				 *       - �������� 37�̰�, �����Ҵ� 39, ��ij�� 38�̴� ��Ȯ�� ��Ģ�� �˱Ⱑ ��ƴ�.
				 *  </pre>
				 */
				
				// ��Ŷ ������ �ν��Ͻ�
				PacketSniffing sniiffer = new PacketSniffing(txtMsg);

				// Ŭ�� -> ����
				sniiffer.sendPacketToServer(packet, sourceIP, destinationIP);
				
				// ���� -> Ŭ��
				sniiffer.receivePacketToClient(packet, sourceIP, destinationIP);

			}

		};
		
		// �ǽð����� ��Ŷ�� �����´�.
		pcap.loop(-1, jpacketHandler, "jNetPcap rocks!");
		pcap.close();
		
	} catch (Exception e) {
		System.out.println(e.getMessage());
	}
	
}
 

import org.jnetpcap.packet.PcapPacket; //导入方法依赖的package包/类
@Override
public Boolean meetCriteria(PcapPacket itemToCheck)
{
	return itemToCheck.hasHeader(protocol.getValue());
}