pcapr-local 0.1.10

data/test/pcapr_local/test_xtractr.rb

@@ -0,0 +1,219 @@
+# http://www.mudynamics.com
+# http://labs.mudynamics.com
+# http://www.pcapr.net
+
+require 'mu/testcase'
+require 'pcapr_local'
+require 'test/pcapr_local/testcase'
+
+module PcaprLocal
+class Xtractr
+
+class Test < ::PcaprLocal::Test::TestCase
+
+
+    PCAP = File.expand_path File.join(File.dirname(__FILE__), "arp.pcap")
+    HTTP_PCAP = File.expand_path File.join(File.dirname(__FILE__), "http_chunked.pcap")
+
+    def test_basics
+        do_setup
+
+        config = {
+           "index_dir" => @index_dir, 
+           "reaper_interval" => 60,
+           "idle_timeout" => 60,
+        }
+        xtractr = Xtractr.new config
+
+        config = {
+           "db" => @db, 
+           "xtractr" => xtractr, 
+           "index_dir" => @index_dir, 
+           "pcap_dir" => @pcap_dir,
+           "queue_delay" => 0,
+           "interval" => 0,
+        }
+        scanner = Scanner.new config
+
+        # Add  pcaps and index them.
+        count = 2
+        count.times do |n|
+            FileUtils.cp PCAP, "#{@pcap_dir}/#{n}.pcap"
+        end
+        scanner.scan
+
+        # Get an xtractr instance
+        x0 = xtractr.xtractr_for('0.pcap')
+        assert_kind_of Xtractr::Instance, x0
+
+        # Second request should yield cached instance
+        x0_ = xtractr.xtractr_for('0.pcap')
+        assert_same x0, x0_
+
+        # A xtractr instance  for a second pcap
+        x1 = xtractr.xtractr_for('1.pcap')
+        assert_not_same x0,x1
+        x1.start
+        index_dir1 = scanner.index_path '1.pcap'
+        packets_db = File.join(index_dir1, 'packets.db')
+        pids = `fuser #{packets_db}`.split
+        assert pids.include?(x1.pid.to_s),  "Expected to find xtractr process to have opened packets.db file open"
+
+        # Xtractr instances have not been idle long enough to be reaped.
+        xtractr.reap
+        assert_nothing_raised do 
+            Process.kill 0, x1.pid 
+        end
+
+        # Make instance appear idle, it should be reaped now.
+        x1_pid = x1.pid
+        x1.instance_variable_set :@last_use, 0.0
+        xtractr.reap
+        assert_nil x1.pid
+        assert_raises Errno::ESRCH do
+            Process.kill 0, x1_pid 
+        end
+
+        # Get another xtractr for same pcap and make sure it is function with a get request.
+        x1 = xtractr.xtractr_for('1.pcap')
+        status, headers, body = x1.get('/api/fields')
+        assert_equal 200, status
+        assert_equal({"connection"=>"close", "content-type"=>"text/plain", "server"=>"xtractr"}.to_a.sort, headers.to_a.sort)
+        assert_json "[\"pkt.src\",\"pkt.dst\",\"pkt.id\",\"pkt.pcap\",\"pkt.time\",\"pkt.offset\",\"pkt.length\",\"pkt.service\",\"pkt.title\",\"arp.dst.hw.mac\",\"arp.hw.size\",\"arp.hw.type\",\"arp.isgratuitous\",\"arp.opcode\",\"arp.proto.size\",\"arp.proto.type\",\"arp.src.hw.mac\",\"eth.addr\",\"eth.dst\",\"eth.ig\",\"eth.lg\",\"eth.src\",\"eth.type\"]", body
+
+        # Make instance appear idle, it should be reaped now.
+        x1_pid = x1.pid
+        x1.instance_variable_set :@last_use, 0.0
+        xtractr.reap
+        assert_nil x1.pid
+        assert_raises Errno::ESRCH do
+            Process.kill 0, x1_pid 
+        end
+    ensure
+        xtractr.shutdown if xtractr
+    end
+
+    XTRACTR_VERSION = "4.5.41604"
+    def test_index
+        do_setup
+
+        config = {
+           "index_dir" => @index_dir, 
+           "reaper_interval" => 60,
+           "idle_timeout" => 60,
+        }
+        xtractr = Xtractr.new config
+
+        FileUtils.cp HTTP_PCAP, "#{@pcap_dir}/http.pcap"
+        index_data = xtractr.index "#{@pcap_dir}/http.pcap", "#{@index_dir}/http.pcap"
+        assert File.exist? "#{@index_dir}/http.pcap/packets.db"
+        expected_index_data = { 
+            :services =>["http"],
+            :about => {
+                "packets"  => 2,
+                "hosts"    => 2,
+                "version"  => XTRACTR_VERSION,
+                "services" => 1,
+                "duration" => 14,
+                "flows"    => 1 
+            }
+        }
+
+        assert_equal expected_index_data[:services], index_data[:services]
+        assert_equal expected_index_data[:about].to_a.sort, index_data[:about].to_a.sort
+    ensure
+        xtractr.shutdown if xtractr
+    end
+
+    def test_free_local_port
+        seed = srand
+        srand seed
+        port1 = Xtractr::Instance.free_local_port
+        server1 = TCPServer.open '127.0.0.1', port1
+
+        # Reseed so first port chosen will be in use
+        srand seed
+        port2 = Xtractr::Instance.free_local_port
+        assert_not_equal port1, port2
+        server2 = TCPServer.open '127.0.0.1', port2
+
+        server1.close
+        server2.close
+    end
+
+    def test_do_start
+        do_setup
+
+        max_start_time = Instance::MAX_START_TIME
+        Instance.const_set :MAX_START_TIME, 1
+
+        config = {
+           "index_dir" => @index_dir, 
+           "reaper_interval" => 60,
+           "idle_timeout" => 60,
+        }
+        xtractr = Xtractr.new config
+        FileUtils.cp HTTP_PCAP, "#{@pcap_dir}/http.pcap"
+        index_data = xtractr.index "#{@pcap_dir}/http.pcap", "#{@index_dir}/http.pcap"
+
+        xtractr_instance = Xtractr::Instance.new "#{@index_dir}/http.pcap", EXE_PATH
+        xtractr_instance.instance_variable_set :@xtractr_path, `which false`.strip
+        assert_raises Instance::XtractrStartupException do 
+            xtractr_instance.start
+        end
+    ensure
+        if max_start_time
+            Instance.const_set :MAX_START_TIME, max_start_time
+        end
+    end
+
+    def test_get_and_post
+        do_setup
+
+        config = {
+           "index_dir" => @index_dir, 
+           "reaper_interval" => 60,
+           "idle_timeout" => 60,
+        }
+        xtractr = Xtractr.new config
+
+        config = {
+           "db" => @db, 
+           "xtractr" => xtractr, 
+           "index_dir" => @index_dir, 
+           "pcap_dir" => @pcap_dir,
+           "queue_delay" => 0,
+           "interval" => 0,
+        }
+        scanner = Scanner.new config
+
+        FileUtils.cp HTTP_PCAP, "#{@pcap_dir}/http.pcap"
+        scanner.scan
+
+        # GET /api/about
+        status, headers, body = xtractr.get('http.pcap', '/api/about')
+        assert_equal 200, status
+        assert_kind_of Hash, headers
+        assert_equal 'text/plain', headers['content-type']
+
+        about = JSON.parse body
+        assert_equal 1, about['flows']
+        assert_equal 2, about['packets']
+
+        # POST /api/content?type=text/html&name=content.1.0
+        post_body = "bytes=edgbhachhccaengbglchhccahdgjgnhagmgjgggjgfhdcahegigfcahahcgpgdgfhdhdcagpggcagdhcgfgbhegjgoghcahagbgdglgfhecagdgbhahehfhcgfhdcagghcgpgncagdgpgohegfgohecahegigbhecahjgphfcagbgmhcgfgbgehjcagigbhggfcocafjgphfcagdgbgocahfhdgfcaedgbhachhccaengbglchhccahegpcagdgpgnhahcgfhdhdcacihdgpgpgocbcjcmcagfgogdgpgegfcagbgogecagfgngcgfgecagbhcgcgjhehcgbhchjcagdgpgohegfgohecagjgohegpcahggbhcgjgphfhdcahahcgphegpgdgpgmcahdhehcgfgbgnhdcagbgogecahegigfgocagphfhehahfhecagogfhhcahagdgbhahdcacigphggfhccaejfahgdecagphccaejfahgdgcjcocafegigfhcgfchhdcagbcahdgjhkgfcagmgjgngjhecagpggcadcdfeleccagggphccahegigfcagdgpgohegfgohecahjgphfcahfhagmgpgbgecocafjgphfcagdgbgocahfhagmgpgbgecagfhihagmgpgjhehdcmcahggjhchfhdcmcahdhagbgncmcagngbgmhhgbhcgfcmcagfhegddlcagbgohjhegigjgoghcahegigbhecahjgphfcahagmgbgocagpgocahfhdgjgoghcahegpcahegfhdhecaeggjhcgfhhgbgmgmhdcmcaeefaejhdcagbgogecafffeenhdcocafhgfcagegpcagogphecahdhegphcgfcahegigfcagdgpgohegfgohecagpgocahegigfcahdgfhchggfhccagbgogecahegigfcaghgfgogfhcgbhegfgecahagdgbhacagjhdcahjgphfhchdcahegpcaglgfgfhacmcagggphcgfhggfhccoakejggcahjgphfcagigbhggfcagggfgfgegcgbgdglcagphccahdhfghghgfhdhegjgpgohdcagpgocagngbglgjgoghcahegigjhdcagcgfhehegfhccmcagegpcagmgfhecahfhdcaglgogphhcoak"
+        status, headers, body = xtractr.post('http.pcap', '/api/content?type=text/html&name=content.1.0', post_body)
+        assert_equal 200, status
+        assert_kind_of Hash, headers
+        assert_equal 'text/html', headers['content-type']
+        assert_equal "Cap'r Mak'r simplifies the process of creating packet captures from content that you already have. You can use Cap'r Mak'r to compress (soon!), encode and embed arbitrary content into various protocol streams and then output new pcaps (over IPv4 or IPv6). There's a size limit of 25KB for the content you upload. You can upload exploits, virus, spam, malware, etc; anything that you plan on using to test Firewalls, DPIs and UTMs. We do not store the content on the server and the generated pcap is yours to keep, forever.\nIf you have feedback or suggestions on making this better, do let us know.\n", body
+
+
+    ensure
+        xtractr.shutdown if xtractr
+    end
+
+end
+
+end
+end

data/test/pcapr_local/testcase.rb

@@ -0,0 +1,107 @@
+# http://www.mudynamics.com
+# http://labs.mudynamics.com
+# http://www.pcapr.net
+
+$: << File.expand_path(File.dirname(__FILE__) + '../../../../lib')
+$stderr.puts $:
+
+require 'pcapr_local'
+require 'test/unit'
+require 'mu/testcase'
+
+module PcaprLocal
+module Test
+
+class TestCase < Mu::TestCase
+    def datafile
+        nil
+    end
+
+    # Returns user config but with parameters to changed to prevent clobbering user data.
+    def config
+        config = PcaprLocal::Config.config
+        config['couch']['database'] = "#{config['couch']['database']}_test"
+        config['install_dir'] = "/tmp/pcapr_local_test"
+        config['pcap_dir'] = "/tmp/pcapr_local_test/pcaps"
+        config['index_dir'] = "/tmp/pcapr_local_test/indexes"
+        config['app']['port'] = config['app']['port'].to_i + 1
+        config
+    end
+
+    # Sets up database file system and config. 
+    # Intentionally not using setup method for ease of debugging.
+    def do_setup 
+        config = self.config
+        host = config['app']['host']
+        port = config['app']['port']
+        @url_base = "http://#{host}:#{port}"
+        puts config.inspect
+        @pcap_dir = config.fetch 'pcap_dir'
+        @index_dir = config.fetch 'index_dir'
+
+        # Extract test pcaps and indexes
+        FileUtils.rm_rf '/tmp/pcapr_local_test'
+        FileUtils.mkdir_p @pcap_dir
+        FileUtils.mkdir_p @index_dir
+
+
+        # Recreate test database.
+        begin
+            couch = config['couch']
+            RestClient.delete "#{couch['uri']}/#{couch['database']}"
+        rescue RestClient::ResourceNotFound
+        end
+        db = @db = PcaprLocal.get_db(config)
+    end
+
+    def wait_for_server host, port, time=10
+        stop = Time.new + time
+        while Time.new < stop
+            if s = TCPSocket.open(host, port) rescue nil
+                s.close
+                return
+            end
+            sleep 0.01
+        end
+
+        raise "Server at #{host}:#{port} took longer than #{time} seconds to start"
+    end
+
+    def teardown
+        # stop server
+        if @pid
+            Process.kill -2, @pid 
+            Process.wait @pid
+            @pid = nil
+        end
+    end
+
+    def load_docs doc_file, db
+        open doc_file do |js|
+            while line = js.gets
+                doc = JSON.parse line
+                doc.delete '_rev'
+                db.save_doc doc, true
+            end
+
+            db.bulk_save
+        end
+    end
+
+    def assert_json s1, s2, msg=nil
+        o1 = JSON.parse s1
+        o2 = JSON.parse s2
+
+        if o1.is_a? Hash
+            o1.delete "_rev"
+        end
+
+        if o2.is_a? Hash
+            o2.delete "_rev"
+        end
+
+        assert_equal o1, o2, msg
+    end
+end
+end
+end

data/test/test_export_to_scenario.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+
+set -ex
+
+export MU_ROOT=${MU_ROOT:-~/root2clean}
+
+echo $MU_ROOT
+
+for file in test/mu/scenario/from_pcap/sip_signalled_call_1 test/mu/scenario/from_pcap/arp test/mu/scenario/from_pcap/http-v6 test/mu/scenario/from_pcap/http_chunked test/mu/scenario/from_pcap/http_deflate
+do
+    file=$MU_ROOT/$file
+    for ruby in ruby ruby1.9
+    do
+        echo "trying $file"
+        #$ruby pcap2zip.rb -i $file.pcap /tmp/export.par
+        pcap2zip.rb -i $file.pcap /tmp/export.par
+        (
+        cd $MU_ROOT
+        $MU_ROOT/tools/scenarios/pcap2scenario.rb -wmi /tmp/export.par > $file.msl2
+        diff $file.msl $file.msl2 && echo passed
+        diff $file.msl $file.msl2 #|| echo faileddiffmerge $file.msl $file.msl2
+        echo
+        )
+    done
+done

data/test/test_pcapr_local.rb

@@ -0,0 +1,29 @@
+# http://www.mudynamics.com
+# http://labs.mudynamics.com
+# http://www.pcapr.net
+
+if defined? Encoding
+    Encoding.default_external = Encoding::BINARY
+end
+
+test_dir = File.expand_path(File.dirname(__FILE__))
+lib_dir =  File.expand_path("#{test_dir}/../lib")
+
+$: << lib_dir
+$: << test_dir
+
+require 'environment'
+require 'pcapr_local'
+
+Dir.glob("./**/tc_*.rb").each do |testfile|
+    require testfile
+end
+
+class Module
+    def const_set! name, value
+        if const_defined? name
+            remove_const name
+        end
+        const_set name, value
+    end
+end

metadata

@@ -0,0 +1,450 @@
+--- !ruby/object:Gem::Specification 
+name: pcapr-local
+version: !ruby/object:Gem::Version 
+  prerelease: false
+  segments: 
+  - 0
+  - 1
+  - 10
+  version: 0.1.10
+platform: ruby
+authors: 
+- Mu Dynamics
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2011-03-31 00:00:00 -07:00
+default_executable: 
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: rest-client
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 6
+        - 1
+        version: 1.6.1
+  type: :runtime
+  version_requirements: *id001
+- !ruby/object:Gem::Dependency 
+  name: couchrest
+  prerelease: false
+  requirement: &id002 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 0
+        - 1
+        version: 1.0.1
+  type: :runtime
+  version_requirements: *id002
+- !ruby/object:Gem::Dependency 
+  name: sinatra
+  prerelease: false
+  requirement: &id003 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 1
+        - 0
+        version: 1.1.0
+  type: :runtime
+  version_requirements: *id003
+- !ruby/object:Gem::Dependency 
+  name: json
+  prerelease: false
+  requirement: &id004 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 4
+        - 6
+        version: 1.4.6
+  type: :runtime
+  version_requirements: *id004
+- !ruby/object:Gem::Dependency 
+  name: thin
+  prerelease: false
+  requirement: &id005 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 2
+        - 7
+        version: 1.2.7
+  type: :runtime
+  version_requirements: *id005
+- !ruby/object:Gem::Dependency 
+  name: rack
+  prerelease: false
+  requirement: &id006 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 2
+        - 1
+        version: 1.2.1
+  type: :runtime
+  version_requirements: *id006
+- !ruby/object:Gem::Dependency 
+  name: rack-contrib
+  prerelease: false
+  requirement: &id007 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 1
+        - 0
+        version: 1.1.0
+  type: :runtime
+  version_requirements: *id007
+- !ruby/object:Gem::Dependency 
+  name: shoulda
+  prerelease: false
+  requirement: &id008 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 0
+        version: "0"
+  type: :development
+  version_requirements: *id008
+- !ruby/object:Gem::Dependency 
+  name: bundler
+  prerelease: false
+  requirement: &id009 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 0
+        - 0
+        version: 1.0.0
+  type: :development
+  version_requirements: *id009
+- !ruby/object:Gem::Dependency 
+  name: jeweler
+  prerelease: false
+  requirement: &id010 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 5
+        - 2
+        version: 1.5.2
+  type: :development
+  version_requirements: *id010
+- !ruby/object:Gem::Dependency 
+  name: rcov
+  prerelease: false
+  requirement: &id011 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 0
+        version: "0"
+  type: :development
+  version_requirements: *id011
+description: Index, Browse, and Query your vast pcap collection.
+email: nbaggott@gmail.com
+executables: 
+- pcap2par
+- startpcapr
+- stoppcapr
+- xtractr
+extensions: []
+
+extra_rdoc_files: 
+- LICENSE.txt
+- README.md
+files: 
+- .document
+- LICENSE.txt
+- README.md
+- Rakefile
+- VERSION
+- bin/pcap2par
+- bin/startpcapr
+- bin/stoppcapr
+- bin/xtractr
+- lib/environment.rb
+- lib/exe/xtractr
+- lib/mu/pcap.rb
+- lib/mu/pcap/ethernet.rb
+- lib/mu/pcap/header.rb
+- lib/mu/pcap/io_pair.rb
+- lib/mu/pcap/io_wrapper.rb
+- lib/mu/pcap/ip.rb
+- lib/mu/pcap/ipv4.rb
+- lib/mu/pcap/ipv6.rb
+- lib/mu/pcap/packet.rb
+- lib/mu/pcap/pkthdr.rb
+- lib/mu/pcap/reader.rb
+- lib/mu/pcap/reader/http_family.rb
+- lib/mu/pcap/sctp.rb
+- lib/mu/pcap/sctp/chunk.rb
+- lib/mu/pcap/sctp/chunk/data.rb
+- lib/mu/pcap/sctp/chunk/init.rb
+- lib/mu/pcap/sctp/chunk/init_ack.rb
+- lib/mu/pcap/sctp/parameter.rb
+- lib/mu/pcap/sctp/parameter/ip_address.rb
+- lib/mu/pcap/stream_packetizer.rb
+- lib/mu/pcap/tcp.rb
+- lib/mu/pcap/udp.rb
+- lib/mu/scenario/pcap.rb
+- lib/mu/scenario/pcap/fields.rb
+- lib/mu/scenario/pcap/rtp.rb
+- lib/pcapr_local.rb
+- lib/pcapr_local/config.rb
+- lib/pcapr_local/db.rb
+- lib/pcapr_local/scanner.rb
+- lib/pcapr_local/server.rb
+- lib/pcapr_local/www/favicon.ico
+- lib/pcapr_local/www/favicon.png
+- lib/pcapr_local/www/home/index.html
+- lib/pcapr_local/www/static/image/16x16/Cancel.png
+- lib/pcapr_local/www/static/image/16x16/Cancel.png.1
+- lib/pcapr_local/www/static/image/16x16/Download.png
+- lib/pcapr_local/www/static/image/16x16/Folder3.png
+- lib/pcapr_local/www/static/image/16x16/Full Size.png
+- lib/pcapr_local/www/static/image/16x16/Minus.png
+- lib/pcapr_local/www/static/image/16x16/Plus.png
+- lib/pcapr_local/www/static/image/16x16/Search.png
+- lib/pcapr_local/www/static/image/16x16/User.png
+- lib/pcapr_local/www/static/image/48x48/Phone.png
+- lib/pcapr_local/www/static/image/48x48/Video.png
+- lib/pcapr_local/www/static/image/bar-orange.gif
+- lib/pcapr_local/www/static/image/beta.png
+- lib/pcapr_local/www/static/image/bg.png
+- lib/pcapr_local/www/static/image/blockquote.png
+- lib/pcapr_local/www/static/image/body-bg.png
+- lib/pcapr_local/www/static/image/body-h3.png
+- lib/pcapr_local/www/static/image/body-hl1-bg.png
+- lib/pcapr_local/www/static/image/body-hl1-h3.png
+- lib/pcapr_local/www/static/image/body-hl1-readmore.png
+- lib/pcapr_local/www/static/image/body-hl2-bg.png
+- lib/pcapr_local/www/static/image/body-hl2-h3.png
+- lib/pcapr_local/www/static/image/body-hl2-readmore.png
+- lib/pcapr_local/www/static/image/body-hl3-bg.png
+- lib/pcapr_local/www/static/image/body-hl3-h3.png
+- lib/pcapr_local/www/static/image/body-hl3-readmore.png
+- lib/pcapr_local/www/static/image/body-hl4-bg.png
+- lib/pcapr_local/www/static/image/body-hl4-h3.png
+- lib/pcapr_local/www/static/image/body-hl4-readmore.png
+- lib/pcapr_local/www/static/image/body-hl5-h3.png
+- lib/pcapr_local/www/static/image/body-hl6-h3.png
+- lib/pcapr_local/www/static/image/body-hl7-h3.png
+- lib/pcapr_local/www/static/image/body-hl8-h3.png
+- lib/pcapr_local/www/static/image/body-readmore.png
+- lib/pcapr_local/www/static/image/bottom-bg.png
+- lib/pcapr_local/www/static/image/bottom-l.png
+- lib/pcapr_local/www/static/image/bottom-r.png
+- lib/pcapr_local/www/static/image/btn-search.png
+- lib/pcapr_local/www/static/image/bullet-1.png
+- lib/pcapr_local/www/static/image/bullet-2.png
+- lib/pcapr_local/www/static/image/bullet-3.png
+- lib/pcapr_local/www/static/image/bullet-4.png
+- lib/pcapr_local/www/static/image/bullet-5.png
+- lib/pcapr_local/www/static/image/bullet-6.png
+- lib/pcapr_local/www/static/image/bullet-7.png
+- lib/pcapr_local/www/static/image/bullet-hl1.png
+- lib/pcapr_local/www/static/image/bullet-hl2.png
+- lib/pcapr_local/www/static/image/bullet-hl3.png
+- lib/pcapr_local/www/static/image/bullet-hl4.png
+- lib/pcapr_local/www/static/image/bullet-pathway.png
+- lib/pcapr_local/www/static/image/bullet-section1.png
+- lib/pcapr_local/www/static/image/bullet-section2.png
+- lib/pcapr_local/www/static/image/collapsed.gif
+- lib/pcapr_local/www/static/image/crosslink.png
+- lib/pcapr_local/www/static/image/expanded.gif
+- lib/pcapr_local/www/static/image/favicon.ico
+- lib/pcapr_local/www/static/image/favicon.png
+- lib/pcapr_local/www/static/image/icon-author.png
+- lib/pcapr_local/www/static/image/icon-created.png
+- lib/pcapr_local/www/static/image/p-expand.gif
+- lib/pcapr_local/www/static/image/pcapr-logo.png
+- lib/pcapr_local/www/static/image/powered-by.png
+- lib/pcapr_local/www/static/image/section1-bg.png
+- lib/pcapr_local/www/static/image/section1-h3.png
+- lib/pcapr_local/www/static/image/section1-readmore.png
+- lib/pcapr_local/www/static/image/section2-bg.png
+- lib/pcapr_local/www/static/image/section2-h3.png
+- lib/pcapr_local/www/static/image/section2-readmore.png
+- lib/pcapr_local/www/static/image/status-alert.png
+- lib/pcapr_local/www/static/image/status-download.png
+- lib/pcapr_local/www/static/image/status-info.png
+- lib/pcapr_local/www/static/image/status-note.png
+- lib/pcapr_local/www/static/image/tab-round.png
+- lib/pcapr_local/www/static/image/throbber.gif
+- lib/pcapr_local/www/static/image/user.jpg
+- lib/pcapr_local/www/static/script/closet/async.js
+- lib/pcapr_local/www/static/script/closet/closet.api.js
+- lib/pcapr_local/www/static/script/closet/closet.folders.js
+- lib/pcapr_local/www/static/script/closet/closet.js
+- lib/pcapr_local/www/static/script/closet/closet.mr.js
+- lib/pcapr_local/www/static/script/closet/closet.options.js
+- lib/pcapr_local/www/static/script/closet/closet.quantity.js
+- lib/pcapr_local/www/static/script/closet/closet.render.js
+- lib/pcapr_local/www/static/script/closet/closet.report.js
+- lib/pcapr_local/www/static/script/closet/closet.reports.http.js
+- lib/pcapr_local/www/static/script/closet/closet.reports.overview.js
+- lib/pcapr_local/www/static/script/closet/closet.reports.sip.js
+- lib/pcapr_local/www/static/script/closet/closet.reports.tcp.js
+- lib/pcapr_local/www/static/script/closet/closet.reports.visualize.js
+- lib/pcapr_local/www/static/script/closet/closet.util.js
+- lib/pcapr_local/www/static/script/jquery/jquery-1.4.2.min.js
+- lib/pcapr_local/www/static/script/jquery/jquery-ui.js
+- lib/pcapr_local/www/static/script/jquery/jquery.flot.js
+- lib/pcapr_local/www/static/script/jquery/jquery.flot.selection.js
+- lib/pcapr_local/www/static/script/jquery/jquery.flot.stack.js
+- lib/pcapr_local/www/static/script/jquery/jquery.form.js
+- lib/pcapr_local/www/static/script/jquery/jquery.jsonp.min.js
+- lib/pcapr_local/www/static/script/jquery/jquery.menu.js
+- lib/pcapr_local/www/static/script/jquery/jquery.suggest.js
+- lib/pcapr_local/www/static/script/jquery/jquery.ui.core.js
+- lib/pcapr_local/www/static/script/jquery/jquery.ui.slider.js
+- lib/pcapr_local/www/static/script/jquery/jquery.ui.sortable.js
+- lib/pcapr_local/www/static/script/jquery/jquery.ui.widget.js
+- lib/pcapr_local/www/static/script/json2.js
+- lib/pcapr_local/www/static/script/sammy/plugins/sammy.cache.js
+- lib/pcapr_local/www/static/script/sammy/plugins/sammy.template.js
+- lib/pcapr_local/www/static/script/sammy/sammy.js
+- lib/pcapr_local/www/static/script/tipsy/jquery.tipsy.js
+- lib/pcapr_local/www/static/style/c3p0.css
+- lib/pcapr_local/www/static/style/jquery.suggest.css
+- lib/pcapr_local/www/static/style/page.css
+- lib/pcapr_local/www/static/style/tipsy.css
+- lib/pcapr_local/www/templates/browse.services.template
+- lib/pcapr_local/www/templates/browse.template
+- lib/pcapr_local/www/templates/flows.template
+- lib/pcapr_local/www/templates/pcap.template
+- lib/pcapr_local/www/templates/sip.calls.template
+- lib/pcapr_local/www/templates/statistics.template
+- lib/pcapr_local/xtractr.rb
+- lib/pcapr_local/xtractr/instance.rb
+- pcapr-local.gemspec
+- test/mu/pcap/reader/tc_http_family.rb
+- test/mu/pcap/tc_ethernet.rb
+- test/mu/pcap/tc_header.rb
+- test/mu/pcap/tc_ipv4.rb
+- test/mu/pcap/tc_ipv6.rb
+- test/mu/pcap/tc_packet.rb
+- test/mu/pcap/tc_pair.rb
+- test/mu/pcap/tc_pkthdr.rb
+- test/mu/pcap/tc_reader.rb
+- test/mu/pcap/tc_tcp.rb
+- test/mu/pcap/tc_udp.rb
+- test/mu/pcap/tc_wrapper.rb
+- test/mu/scenario/pcap/tc_fields.rb
+- test/mu/scenario/pcap/tc_rtp.rb
+- test/mu/scenario/sip_signalled_call_1.pcap
+- test/mu/scenario/tc_pcap.rb
+- test/mu/scenario/test_data/arp.pcap
+- test/mu/scenario/test_data/dns.pcap
+- test/mu/scenario/test_data/http-v6.pcap
+- test/mu/scenario/test_data/http.pcap
+- test/mu/scenario/test_data/http_chunked.pcap
+- test/mu/scenario/test_data/http_deflate.pcap
+- test/mu/scenario/test_data/httpauth3.pcap
+- test/mu/scenario/test_data/icmp.pcap
+- test/mu/scenario/test_data/sip_signalled_call_1.pcap
+- test/mu/tc_pcap.rb
+- test/mu/testcase.rb
+- test/pcapr_local/arp.pcap
+- test/pcapr_local/data.js
+- test/pcapr_local/http_chunked.pcap
+- test/pcapr_local/tc_api.rb
+- test/pcapr_local/test.tgz
+- test/pcapr_local/test_scanner.rb
+- test/pcapr_local/test_xtractr.rb
+- test/pcapr_local/testcase.rb
+- test/test_export_to_scenario.sh
+- test/test_pcapr_local.rb
+has_rdoc: true
+homepage: http://github.com/pcapr-local/pcapr-local
+licenses: 
+- MIT
+post_install_message: 
+rdoc_options: []
+
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.3.7
+signing_key: 
+specification_version: 3
+summary: Manage your pcap collection
+test_files: 
+- test/mu/pcap/reader/tc_http_family.rb
+- test/mu/pcap/tc_ethernet.rb
+- test/mu/pcap/tc_header.rb
+- test/mu/pcap/tc_ipv4.rb
+- test/mu/pcap/tc_ipv6.rb
+- test/mu/pcap/tc_packet.rb
+- test/mu/pcap/tc_pair.rb
+- test/mu/pcap/tc_pkthdr.rb
+- test/mu/pcap/tc_reader.rb
+- test/mu/pcap/tc_tcp.rb
+- test/mu/pcap/tc_udp.rb
+- test/mu/pcap/tc_wrapper.rb
+- test/mu/scenario/pcap/tc_fields.rb
+- test/mu/scenario/pcap/tc_rtp.rb
+- test/mu/scenario/tc_pcap.rb
+- test/mu/tc_pcap.rb
+- test/mu/testcase.rb
+- test/pcapr_local/tc_api.rb
+- test/pcapr_local/test_scanner.rb
+- test/pcapr_local/test_xtractr.rb
+- test/pcapr_local/testcase.rb
+- test/test_pcapr_local.rb