pypcapkit 1.5.0b9__cp315-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pcapkit/__init__.py +133 -0
- pcapkit/__main__.py +153 -0
- pcapkit/all.py +149 -0
- pcapkit/const/__init__.py +90 -0
- pcapkit/const/arp/__init__.py +25 -0
- pcapkit/const/arp/hardware.py +167 -0
- pcapkit/const/arp/operation.py +117 -0
- pcapkit/const/esp/__init__.py +39 -0
- pcapkit/const/esp/cipher.py +237 -0
- pcapkit/const/esp/integrity.py +126 -0
- pcapkit/const/ftp/__init__.py +25 -0
- pcapkit/const/ftp/command.py +590 -0
- pcapkit/const/ftp/return_code.py +329 -0
- pcapkit/const/hip/__init__.py +94 -0
- pcapkit/const/hip/certificate.py +63 -0
- pcapkit/const/hip/cipher.py +51 -0
- pcapkit/const/hip/di.py +45 -0
- pcapkit/const/hip/ecdsa_curve.py +45 -0
- pcapkit/const/hip/ecdsa_low_curve.py +42 -0
- pcapkit/const/hip/eddsa_curve.py +51 -0
- pcapkit/const/hip/esp_transform_suite.py +84 -0
- pcapkit/const/hip/group.py +72 -0
- pcapkit/const/hip/hi_algorithm.py +72 -0
- pcapkit/const/hip/hit_suite.py +54 -0
- pcapkit/const/hip/nat_traversal.py +48 -0
- pcapkit/const/hip/notify_message.py +186 -0
- pcapkit/const/hip/packet.py +75 -0
- pcapkit/const/hip/parameter.py +363 -0
- pcapkit/const/hip/registration.py +54 -0
- pcapkit/const/hip/registration_failure.py +70 -0
- pcapkit/const/hip/suite.py +57 -0
- pcapkit/const/hip/transport.py +45 -0
- pcapkit/const/http/__init__.py +39 -0
- pcapkit/const/http/error_code.py +80 -0
- pcapkit/const/http/frame.py +81 -0
- pcapkit/const/http/method.py +330 -0
- pcapkit/const/http/setting.py +82 -0
- pcapkit/const/http/status_code.py +313 -0
- pcapkit/const/ipv4/__init__.py +57 -0
- pcapkit/const/ipv4/classification_level.py +49 -0
- pcapkit/const/ipv4/option_class.py +41 -0
- pcapkit/const/ipv4/option_number.py +123 -0
- pcapkit/const/ipv4/protection_authority.py +49 -0
- pcapkit/const/ipv4/qs_function.py +37 -0
- pcapkit/const/ipv4/router_alert.py +240 -0
- pcapkit/const/ipv4/tos_del.py +37 -0
- pcapkit/const/ipv4/tos_ecn.py +41 -0
- pcapkit/const/ipv4/tos_pre.py +49 -0
- pcapkit/const/ipv4/tos_rel.py +37 -0
- pcapkit/const/ipv4/tos_thr.py +37 -0
- pcapkit/const/ipv4/ts_flag.py +39 -0
- pcapkit/const/ipv6/__init__.py +53 -0
- pcapkit/const/ipv6/extension_header.py +54 -0
- pcapkit/const/ipv6/option.py +123 -0
- pcapkit/const/ipv6/option_action.py +41 -0
- pcapkit/const/ipv6/qs_function.py +37 -0
- pcapkit/const/ipv6/router_alert.py +252 -0
- pcapkit/const/ipv6/routing.py +66 -0
- pcapkit/const/ipv6/seed_id.py +41 -0
- pcapkit/const/ipv6/smf_dpd_mode.py +37 -0
- pcapkit/const/ipv6/tagger_id.py +48 -0
- pcapkit/const/ipx/__init__.py +27 -0
- pcapkit/const/ipx/packet.py +58 -0
- pcapkit/const/ipx/socket.py +93 -0
- pcapkit/const/l2tp/__init__.py +21 -0
- pcapkit/const/l2tp/type.py +37 -0
- pcapkit/const/mh/__init__.py +206 -0
- pcapkit/const/mh/access_type.py +78 -0
- pcapkit/const/mh/ack_status_code.py +57 -0
- pcapkit/const/mh/ani_suboption.py +60 -0
- pcapkit/const/mh/auth_subtype.py +39 -0
- pcapkit/const/mh/binding_ack_flag.py +54 -0
- pcapkit/const/mh/binding_error.py +37 -0
- pcapkit/const/mh/binding_revocation.py +45 -0
- pcapkit/const/mh/binding_update_flag.py +69 -0
- pcapkit/const/mh/cga_extension.py +52 -0
- pcapkit/const/mh/cga_sec.py +43 -0
- pcapkit/const/mh/cga_type.py +54 -0
- pcapkit/const/mh/dhcp_support_mode.py +39 -0
- pcapkit/const/mh/dns_status_code.py +51 -0
- pcapkit/const/mh/dsmip6_tls_packet.py +48 -0
- pcapkit/const/mh/dsmipv6_home_address.py +60 -0
- pcapkit/const/mh/enumerating_algorithm.py +42 -0
- pcapkit/const/mh/fb_ack_status.py +48 -0
- pcapkit/const/mh/fb_action.py +57 -0
- pcapkit/const/mh/fb_indication_trigger.py +51 -0
- pcapkit/const/mh/fb_type.py +45 -0
- pcapkit/const/mh/flow_id_status.py +63 -0
- pcapkit/const/mh/flow_id_suboption.py +57 -0
- pcapkit/const/mh/handoff_type.py +57 -0
- pcapkit/const/mh/handover_ack_flag.py +42 -0
- pcapkit/const/mh/handover_ack_status.py +78 -0
- pcapkit/const/mh/handover_initiate_flag.py +45 -0
- pcapkit/const/mh/handover_initiate_status.py +48 -0
- pcapkit/const/mh/home_address_reply.py +57 -0
- pcapkit/const/mh/lla_code.py +49 -0
- pcapkit/const/mh/lma_mag_suboption.py +45 -0
- pcapkit/const/mh/mn_group_id.py +45 -0
- pcapkit/const/mh/mn_id_subtype.py +63 -0
- pcapkit/const/mh/operator_id.py +49 -0
- pcapkit/const/mh/option.py +246 -0
- pcapkit/const/mh/packet.py +105 -0
- pcapkit/const/mh/qos_attribute.py +75 -0
- pcapkit/const/mh/revocation_status_code.py +69 -0
- pcapkit/const/mh/revocation_trigger.py +72 -0
- pcapkit/const/mh/status_code.py +218 -0
- pcapkit/const/mh/traffic_selector.py +48 -0
- pcapkit/const/mh/upa_status.py +57 -0
- pcapkit/const/mh/upn_reason.py +66 -0
- pcapkit/const/ngap/__init__.py +36 -0
- pcapkit/const/ngap/procedure_code.py +195 -0
- pcapkit/const/ngap/protocol_ie.py +909 -0
- pcapkit/const/ospf/__init__.py +27 -0
- pcapkit/const/ospf/authentication.py +51 -0
- pcapkit/const/ospf/packet.py +57 -0
- pcapkit/const/pcapng/__init__.py +55 -0
- pcapkit/const/pcapng/block_type.py +138 -0
- pcapkit/const/pcapng/filter_type.py +34 -0
- pcapkit/const/pcapng/hash_algorithm.py +45 -0
- pcapkit/const/pcapng/option_type.py +383 -0
- pcapkit/const/pcapng/record_type.py +42 -0
- pcapkit/const/pcapng/secrets_type.py +41 -0
- pcapkit/const/pcapng/tls_key_label.py +59 -0
- pcapkit/const/pcapng/verdict_type.py +39 -0
- pcapkit/const/reg/__init__.py +42 -0
- pcapkit/const/reg/apptype/__init__.py +187 -0
- pcapkit/const/reg/apptype/apptype.py +5260 -0
- pcapkit/const/reg/apptype/dccp.py +112 -0
- pcapkit/const/reg/apptype/sctp.py +432 -0
- pcapkit/const/reg/apptype/tcp.py +25135 -0
- pcapkit/const/reg/apptype/udp.py +24548 -0
- pcapkit/const/reg/ethertype.py +700 -0
- pcapkit/const/reg/linktype.py +765 -0
- pcapkit/const/reg/transtype.py +512 -0
- pcapkit/const/sctp/__init__.py +37 -0
- pcapkit/const/sctp/cause_code.py +118 -0
- pcapkit/const/sctp/chunk.py +136 -0
- pcapkit/const/sctp/parameter.py +142 -0
- pcapkit/const/sctp/payload_protocol_identifier.py +285 -0
- pcapkit/const/tcp/__init__.py +35 -0
- pcapkit/const/tcp/checksum.py +41 -0
- pcapkit/const/tcp/flags.py +68 -0
- pcapkit/const/tcp/mp_tcp_option.py +67 -0
- pcapkit/const/tcp/option.py +182 -0
- pcapkit/const/vlan/__init__.py +23 -0
- pcapkit/const/vlan/priority_level.py +57 -0
- pcapkit/corekit/__init__.py +63 -0
- pcapkit/corekit/context.py +250 -0
- pcapkit/corekit/enum.py +643 -0
- pcapkit/corekit/fields/__init__.py +45 -0
- pcapkit/corekit/fields/collections.py +555 -0
- pcapkit/corekit/fields/field.py +642 -0
- pcapkit/corekit/fields/ipaddress.py +733 -0
- pcapkit/corekit/fields/misc.py +876 -0
- pcapkit/corekit/fields/numbers.py +1145 -0
- pcapkit/corekit/fields/strings.py +401 -0
- pcapkit/corekit/infoclass.py +1180 -0
- pcapkit/corekit/io.py +874 -0
- pcapkit/corekit/module.py +120 -0
- pcapkit/corekit/multidict.py +638 -0
- pcapkit/corekit/packet.py +172 -0
- pcapkit/corekit/protochain.py +266 -0
- pcapkit/corekit/sentinels.py +421 -0
- pcapkit/corekit/version.py +33 -0
- pcapkit/dumpkit/__init__.py +15 -0
- pcapkit/dumpkit/common.py +787 -0
- pcapkit/dumpkit/null.py +77 -0
- pcapkit/dumpkit/pcap.py +307 -0
- pcapkit/foundation/__init__.py +51 -0
- pcapkit/foundation/engines/__init__.py +37 -0
- pcapkit/foundation/engines/_pcap_backend.py +276 -0
- pcapkit/foundation/engines/dpkt.py +619 -0
- pcapkit/foundation/engines/engine.py +322 -0
- pcapkit/foundation/engines/pcap.py +243 -0
- pcapkit/foundation/engines/pcap_ct.py +488 -0
- pcapkit/foundation/engines/pcapng.py +505 -0
- pcapkit/foundation/engines/pypcap.py +382 -0
- pcapkit/foundation/engines/pypcapfile.py +422 -0
- pcapkit/foundation/engines/pyshark.py +358 -0
- pcapkit/foundation/engines/scapy.py +418 -0
- pcapkit/foundation/extraction.py +1663 -0
- pcapkit/foundation/reassembly/__init__.py +50 -0
- pcapkit/foundation/reassembly/data/__init__.py +32 -0
- pcapkit/foundation/reassembly/data/data.py +171 -0
- pcapkit/foundation/reassembly/data/ip.py +189 -0
- pcapkit/foundation/reassembly/data/tcp.py +249 -0
- pcapkit/foundation/reassembly/ip.py +518 -0
- pcapkit/foundation/reassembly/ipv4.py +80 -0
- pcapkit/foundation/reassembly/ipv6.py +177 -0
- pcapkit/foundation/reassembly/reassembly.py +595 -0
- pcapkit/foundation/reassembly/tcp.py +754 -0
- pcapkit/foundation/registry/__init__.py +48 -0
- pcapkit/foundation/registry/foundation.py +339 -0
- pcapkit/foundation/registry/protocols.py +1429 -0
- pcapkit/foundation/traceflow/__init__.py +45 -0
- pcapkit/foundation/traceflow/data/__init__.py +17 -0
- pcapkit/foundation/traceflow/data/data.py +139 -0
- pcapkit/foundation/traceflow/data/tcp.py +196 -0
- pcapkit/foundation/traceflow/tcp.py +564 -0
- pcapkit/foundation/traceflow/traceflow.py +563 -0
- pcapkit/interface/__init__.py +24 -0
- pcapkit/interface/core.py +234 -0
- pcapkit/interface/misc.py +205 -0
- pcapkit/interface/registry.py +116 -0
- pcapkit/protocols/__init__.py +87 -0
- pcapkit/protocols/application/NotImplemented/bgp.py +0 -0
- pcapkit/protocols/application/NotImplemented/dhcp.py +0 -0
- pcapkit/protocols/application/NotImplemented/dhcpv6.py +0 -0
- pcapkit/protocols/application/NotImplemented/dns.py +0 -0
- pcapkit/protocols/application/NotImplemented/imap.py +0 -0
- pcapkit/protocols/application/NotImplemented/ldap.py +0 -0
- pcapkit/protocols/application/NotImplemented/mqtt.py +0 -0
- pcapkit/protocols/application/NotImplemented/nntp.py +0 -0
- pcapkit/protocols/application/NotImplemented/ntp.py +0 -0
- pcapkit/protocols/application/NotImplemented/onc_rpc.py +0 -0
- pcapkit/protocols/application/NotImplemented/pop.py +0 -0
- pcapkit/protocols/application/NotImplemented/rip.py +0 -0
- pcapkit/protocols/application/NotImplemented/rtp.py +0 -0
- pcapkit/protocols/application/NotImplemented/sip.py +0 -0
- pcapkit/protocols/application/NotImplemented/smtp.py +0 -0
- pcapkit/protocols/application/NotImplemented/snmp.py +0 -0
- pcapkit/protocols/application/NotImplemented/ssh.py +0 -0
- pcapkit/protocols/application/NotImplemented/telnet.py +0 -0
- pcapkit/protocols/application/NotImplemented/tls.py +0 -0
- pcapkit/protocols/application/NotImplemented/xmpp.py +0 -0
- pcapkit/protocols/application/__init__.py +44 -0
- pcapkit/protocols/application/application.py +175 -0
- pcapkit/protocols/application/ftp.py +325 -0
- pcapkit/protocols/application/http.py +641 -0
- pcapkit/protocols/application/httpv1.py +606 -0
- pcapkit/protocols/application/httpv2.py +1495 -0
- pcapkit/protocols/application/ngap.py +581 -0
- pcapkit/protocols/application/ospf.py +460 -0
- pcapkit/protocols/application/rarp.py +113 -0
- pcapkit/protocols/data/__init__.py +230 -0
- pcapkit/protocols/data/application/__init__.py +76 -0
- pcapkit/protocols/data/application/ftp.py +72 -0
- pcapkit/protocols/data/application/httpv1.py +91 -0
- pcapkit/protocols/data/application/httpv2.py +334 -0
- pcapkit/protocols/data/application/ngap.py +123 -0
- pcapkit/protocols/data/application/ospf.py +63 -0
- pcapkit/protocols/data/data.py +31 -0
- pcapkit/protocols/data/internet/__init__.py +310 -0
- pcapkit/protocols/data/internet/ah.py +33 -0
- pcapkit/protocols/data/internet/esp.py +69 -0
- pcapkit/protocols/data/internet/hip.py +883 -0
- pcapkit/protocols/data/internet/hopopt.py +372 -0
- pcapkit/protocols/data/internet/ipv4.py +397 -0
- pcapkit/protocols/data/internet/ipv6.py +78 -0
- pcapkit/protocols/data/internet/ipv6_ext.py +53 -0
- pcapkit/protocols/data/internet/ipv6_frag.py +34 -0
- pcapkit/protocols/data/internet/ipv6_opts.py +389 -0
- pcapkit/protocols/data/internet/ipv6_route.py +94 -0
- pcapkit/protocols/data/internet/ipx.py +60 -0
- pcapkit/protocols/data/internet/mh.py +2263 -0
- pcapkit/protocols/data/link/__init__.py +31 -0
- pcapkit/protocols/data/link/arp.py +74 -0
- pcapkit/protocols/data/link/ethernet.py +28 -0
- pcapkit/protocols/data/link/l2tp.py +73 -0
- pcapkit/protocols/data/link/loopback.py +25 -0
- pcapkit/protocols/data/link/vlan.py +48 -0
- pcapkit/protocols/data/misc/__init__.py +109 -0
- pcapkit/protocols/data/misc/null.py +19 -0
- pcapkit/protocols/data/misc/pcap/__init__.py +18 -0
- pcapkit/protocols/data/misc/pcap/frame.py +63 -0
- pcapkit/protocols/data/misc/pcap/header.py +53 -0
- pcapkit/protocols/data/misc/pcapng.py +1014 -0
- pcapkit/protocols/data/misc/raw.py +25 -0
- pcapkit/protocols/data/protocol.py +32 -0
- pcapkit/protocols/data/transport/__init__.py +158 -0
- pcapkit/protocols/data/transport/sctp.py +634 -0
- pcapkit/protocols/data/transport/tcp.py +601 -0
- pcapkit/protocols/data/transport/udp.py +33 -0
- pcapkit/protocols/internet/NotImplemented/ecn.py +0 -0
- pcapkit/protocols/internet/NotImplemented/icmp.py +0 -0
- pcapkit/protocols/internet/NotImplemented/icmpv6.py +0 -0
- pcapkit/protocols/internet/NotImplemented/igmp.py +0 -0
- pcapkit/protocols/internet/NotImplemented/shim6.py +0 -0
- pcapkit/protocols/internet/__init__.py +45 -0
- pcapkit/protocols/internet/ah.py +315 -0
- pcapkit/protocols/internet/esp.py +1496 -0
- pcapkit/protocols/internet/hip.py +5291 -0
- pcapkit/protocols/internet/hopopt.py +2228 -0
- pcapkit/protocols/internet/internet.py +430 -0
- pcapkit/protocols/internet/ip.py +52 -0
- pcapkit/protocols/internet/ipsec.py +48 -0
- pcapkit/protocols/internet/ipv4.py +2120 -0
- pcapkit/protocols/internet/ipv6.py +754 -0
- pcapkit/protocols/internet/ipv6_ext.py +670 -0
- pcapkit/protocols/internet/ipv6_frag.py +281 -0
- pcapkit/protocols/internet/ipv6_opts.py +2217 -0
- pcapkit/protocols/internet/ipv6_route.py +905 -0
- pcapkit/protocols/internet/ipx.py +267 -0
- pcapkit/protocols/internet/mh.py +11277 -0
- pcapkit/protocols/link/NotImplemented/dsl.py +0 -0
- pcapkit/protocols/link/NotImplemented/eapol.py +1 -0
- pcapkit/protocols/link/NotImplemented/fddi.py +0 -0
- pcapkit/protocols/link/NotImplemented/isdn.py +0 -0
- pcapkit/protocols/link/NotImplemented/ndp.py +0 -0
- pcapkit/protocols/link/NotImplemented/ppp.py +0 -0
- pcapkit/protocols/link/__init__.py +40 -0
- pcapkit/protocols/link/arp.py +496 -0
- pcapkit/protocols/link/c_tag.py +103 -0
- pcapkit/protocols/link/ethernet.py +252 -0
- pcapkit/protocols/link/l2tp.py +175 -0
- pcapkit/protocols/link/l2tpv2.py +442 -0
- pcapkit/protocols/link/link.py +206 -0
- pcapkit/protocols/link/loopback.py +286 -0
- pcapkit/protocols/link/s_tag.py +102 -0
- pcapkit/protocols/link/vlan.py +265 -0
- pcapkit/protocols/misc/__init__.py +37 -0
- pcapkit/protocols/misc/null.py +135 -0
- pcapkit/protocols/misc/pcap/__init__.py +17 -0
- pcapkit/protocols/misc/pcap/frame.py +666 -0
- pcapkit/protocols/misc/pcap/header.py +381 -0
- pcapkit/protocols/misc/pcapng.py +6684 -0
- pcapkit/protocols/misc/raw.py +188 -0
- pcapkit/protocols/protocol.py +2495 -0
- pcapkit/protocols/schema/__init__.py +176 -0
- pcapkit/protocols/schema/application/__init__.py +54 -0
- pcapkit/protocols/schema/application/ftp.py +21 -0
- pcapkit/protocols/schema/application/httpv1.py +21 -0
- pcapkit/protocols/schema/application/httpv2.py +456 -0
- pcapkit/protocols/schema/application/ngap.py +29 -0
- pcapkit/protocols/schema/application/ospf.py +95 -0
- pcapkit/protocols/schema/internet/__init__.py +306 -0
- pcapkit/protocols/schema/internet/ah.py +41 -0
- pcapkit/protocols/schema/internet/esp.py +46 -0
- pcapkit/protocols/schema/internet/hip.py +1606 -0
- pcapkit/protocols/schema/internet/hopopt.py +688 -0
- pcapkit/protocols/schema/internet/ipv4.py +752 -0
- pcapkit/protocols/schema/internet/ipv6.py +145 -0
- pcapkit/protocols/schema/internet/ipv6_ext.py +42 -0
- pcapkit/protocols/schema/internet/ipv6_frag.py +51 -0
- pcapkit/protocols/schema/internet/ipv6_option.py +299 -0
- pcapkit/protocols/schema/internet/ipv6_opts.py +693 -0
- pcapkit/protocols/schema/internet/ipv6_route.py +337 -0
- pcapkit/protocols/schema/internet/ipx.py +46 -0
- pcapkit/protocols/schema/internet/mh.py +3239 -0
- pcapkit/protocols/schema/link/__init__.py +17 -0
- pcapkit/protocols/schema/link/arp.py +39 -0
- pcapkit/protocols/schema/link/ethernet.py +71 -0
- pcapkit/protocols/schema/link/l2tp.py +122 -0
- pcapkit/protocols/schema/link/loopback.py +33 -0
- pcapkit/protocols/schema/link/vlan.py +77 -0
- pcapkit/protocols/schema/misc/__init__.py +108 -0
- pcapkit/protocols/schema/misc/byteorder.py +72 -0
- pcapkit/protocols/schema/misc/null.py +19 -0
- pcapkit/protocols/schema/misc/pcap/__init__.py +10 -0
- pcapkit/protocols/schema/misc/pcap/frame.py +37 -0
- pcapkit/protocols/schema/misc/pcap/header.py +63 -0
- pcapkit/protocols/schema/misc/pcapng.py +2473 -0
- pcapkit/protocols/schema/misc/raw.py +24 -0
- pcapkit/protocols/schema/schema.py +1510 -0
- pcapkit/protocols/schema/transport/__init__.py +154 -0
- pcapkit/protocols/schema/transport/sctp.py +967 -0
- pcapkit/protocols/schema/transport/tcp.py +1110 -0
- pcapkit/protocols/schema/transport/udp.py +44 -0
- pcapkit/protocols/transport/NotImplemented/dccp.py +0 -0
- pcapkit/protocols/transport/NotImplemented/rsvp.py +0 -0
- pcapkit/protocols/transport/__init__.py +28 -0
- pcapkit/protocols/transport/sctp.py +3819 -0
- pcapkit/protocols/transport/tcp.py +3416 -0
- pcapkit/protocols/transport/transport.py +268 -0
- pcapkit/protocols/transport/udp.py +274 -0
- pcapkit/py.typed +0 -0
- pcapkit/toolkit/__init__.py +85 -0
- pcapkit/toolkit/dpkt.py +1098 -0
- pcapkit/toolkit/pcap.py +390 -0
- pcapkit/toolkit/pcap_ct.py +173 -0
- pcapkit/toolkit/pcapng.py +274 -0
- pcapkit/toolkit/pypcap.py +172 -0
- pcapkit/toolkit/pypcapfile.py +1336 -0
- pcapkit/toolkit/pyshark.py +624 -0
- pcapkit/toolkit/scapy.py +708 -0
- pcapkit/utilities/__init__.py +23 -0
- pcapkit/utilities/chardet.py +67 -0
- pcapkit/utilities/compat.py +228 -0
- pcapkit/utilities/decorators.py +322 -0
- pcapkit/utilities/exceptions.py +742 -0
- pcapkit/utilities/logging.py +362 -0
- pcapkit/utilities/warnings.py +441 -0
- pcapkit/vendor/__init__.py +116 -0
- pcapkit/vendor/__main__.py +250 -0
- pcapkit/vendor/arp/__init__.py +27 -0
- pcapkit/vendor/arp/hardware.py +29 -0
- pcapkit/vendor/arp/operation.py +29 -0
- pcapkit/vendor/default.py +672 -0
- pcapkit/vendor/esp/__init__.py +32 -0
- pcapkit/vendor/esp/cipher.py +107 -0
- pcapkit/vendor/esp/integrity.py +104 -0
- pcapkit/vendor/ftp/__init__.py +27 -0
- pcapkit/vendor/ftp/command.py +511 -0
- pcapkit/vendor/ftp/return_code.py +289 -0
- pcapkit/vendor/hip/__init__.py +94 -0
- pcapkit/vendor/hip/certificate.py +29 -0
- pcapkit/vendor/hip/cipher.py +29 -0
- pcapkit/vendor/hip/di.py +29 -0
- pcapkit/vendor/hip/ecdsa_curve.py +29 -0
- pcapkit/vendor/hip/ecdsa_low_curve.py +29 -0
- pcapkit/vendor/hip/eddsa_curve.py +85 -0
- pcapkit/vendor/hip/esp_transform_suite.py +29 -0
- pcapkit/vendor/hip/group.py +87 -0
- pcapkit/vendor/hip/hi_algorithm.py +29 -0
- pcapkit/vendor/hip/hit_suite.py +29 -0
- pcapkit/vendor/hip/nat_traversal.py +29 -0
- pcapkit/vendor/hip/notify_message.py +29 -0
- pcapkit/vendor/hip/packet.py +88 -0
- pcapkit/vendor/hip/parameter.py +88 -0
- pcapkit/vendor/hip/registration.py +29 -0
- pcapkit/vendor/hip/registration_failure.py +29 -0
- pcapkit/vendor/hip/suite.py +29 -0
- pcapkit/vendor/hip/transport.py +29 -0
- pcapkit/vendor/http/__init__.py +39 -0
- pcapkit/vendor/http/error_code.py +94 -0
- pcapkit/vendor/http/frame.py +91 -0
- pcapkit/vendor/http/method.py +310 -0
- pcapkit/vendor/http/setting.py +93 -0
- pcapkit/vendor/http/status_code.py +199 -0
- pcapkit/vendor/ipv4/__init__.py +57 -0
- pcapkit/vendor/ipv4/classification_level.py +90 -0
- pcapkit/vendor/ipv4/option_class.py +80 -0
- pcapkit/vendor/ipv4/option_number.py +105 -0
- pcapkit/vendor/ipv4/protection_authority.py +84 -0
- pcapkit/vendor/ipv4/qs_function.py +78 -0
- pcapkit/vendor/ipv4/router_alert.py +96 -0
- pcapkit/vendor/ipv4/tos_del.py +78 -0
- pcapkit/vendor/ipv4/tos_ecn.py +95 -0
- pcapkit/vendor/ipv4/tos_pre.py +84 -0
- pcapkit/vendor/ipv4/tos_rel.py +78 -0
- pcapkit/vendor/ipv4/tos_thr.py +77 -0
- pcapkit/vendor/ipv4/ts_flag.py +79 -0
- pcapkit/vendor/ipv6/__init__.py +53 -0
- pcapkit/vendor/ipv6/extension_header.py +191 -0
- pcapkit/vendor/ipv6/option.py +104 -0
- pcapkit/vendor/ipv6/option_action.py +90 -0
- pcapkit/vendor/ipv6/qs_function.py +78 -0
- pcapkit/vendor/ipv6/router_alert.py +93 -0
- pcapkit/vendor/ipv6/routing.py +87 -0
- pcapkit/vendor/ipv6/seed_id.py +81 -0
- pcapkit/vendor/ipv6/smf_dpd_mode.py +78 -0
- pcapkit/vendor/ipv6/tagger_id.py +81 -0
- pcapkit/vendor/ipx/__init__.py +37 -0
- pcapkit/vendor/ipx/packet.py +204 -0
- pcapkit/vendor/ipx/socket.py +333 -0
- pcapkit/vendor/l2tp/__init__.py +21 -0
- pcapkit/vendor/l2tp/type.py +79 -0
- pcapkit/vendor/mh/__init__.py +206 -0
- pcapkit/vendor/mh/access_type.py +87 -0
- pcapkit/vendor/mh/ack_status_code.py +88 -0
- pcapkit/vendor/mh/ani_suboption.py +88 -0
- pcapkit/vendor/mh/auth_subtype.py +83 -0
- pcapkit/vendor/mh/binding_ack_flag.py +136 -0
- pcapkit/vendor/mh/binding_error.py +78 -0
- pcapkit/vendor/mh/binding_revocation.py +87 -0
- pcapkit/vendor/mh/binding_update_flag.py +135 -0
- pcapkit/vendor/mh/cga_extension.py +91 -0
- pcapkit/vendor/mh/cga_sec.py +91 -0
- pcapkit/vendor/mh/cga_type.py +74 -0
- pcapkit/vendor/mh/dhcp_support_mode.py +77 -0
- pcapkit/vendor/mh/dns_status_code.py +87 -0
- pcapkit/vendor/mh/dsmip6_tls_packet.py +87 -0
- pcapkit/vendor/mh/dsmipv6_home_address.py +87 -0
- pcapkit/vendor/mh/enumerating_algorithm.py +82 -0
- pcapkit/vendor/mh/fb_ack_status.py +87 -0
- pcapkit/vendor/mh/fb_action.py +88 -0
- pcapkit/vendor/mh/fb_indication_trigger.py +87 -0
- pcapkit/vendor/mh/fb_type.py +88 -0
- pcapkit/vendor/mh/flow_id_status.py +87 -0
- pcapkit/vendor/mh/flow_id_suboption.py +87 -0
- pcapkit/vendor/mh/handoff_type.py +87 -0
- pcapkit/vendor/mh/handover_ack_flag.py +131 -0
- pcapkit/vendor/mh/handover_ack_status.py +87 -0
- pcapkit/vendor/mh/handover_initiate_flag.py +131 -0
- pcapkit/vendor/mh/handover_initiate_status.py +87 -0
- pcapkit/vendor/mh/home_address_reply.py +87 -0
- pcapkit/vendor/mh/lla_code.py +97 -0
- pcapkit/vendor/mh/lma_mag_suboption.py +88 -0
- pcapkit/vendor/mh/mn_group_id.py +87 -0
- pcapkit/vendor/mh/mn_id_subtype.py +87 -0
- pcapkit/vendor/mh/operator_id.py +87 -0
- pcapkit/vendor/mh/option.py +83 -0
- pcapkit/vendor/mh/packet.py +82 -0
- pcapkit/vendor/mh/qos_attribute.py +87 -0
- pcapkit/vendor/mh/revocation_status_code.py +87 -0
- pcapkit/vendor/mh/revocation_trigger.py +87 -0
- pcapkit/vendor/mh/status_code.py +91 -0
- pcapkit/vendor/mh/traffic_selector.py +87 -0
- pcapkit/vendor/mh/upa_status.py +87 -0
- pcapkit/vendor/mh/upn_reason.py +87 -0
- pcapkit/vendor/ngap/__init__.py +34 -0
- pcapkit/vendor/ngap/procedure_code.py +205 -0
- pcapkit/vendor/ngap/protocol_ie.py +175 -0
- pcapkit/vendor/ospf/__init__.py +27 -0
- pcapkit/vendor/ospf/authentication.py +29 -0
- pcapkit/vendor/ospf/packet.py +29 -0
- pcapkit/vendor/pcapng/__init__.py +55 -0
- pcapkit/vendor/pcapng/block_type.py +136 -0
- pcapkit/vendor/pcapng/filter_type.py +77 -0
- pcapkit/vendor/pcapng/hash_algorithm.py +82 -0
- pcapkit/vendor/pcapng/option_type.py +438 -0
- pcapkit/vendor/pcapng/record_type.py +81 -0
- pcapkit/vendor/pcapng/secrets_type.py +80 -0
- pcapkit/vendor/pcapng/tls_key_label.py +163 -0
- pcapkit/vendor/pcapng/verdict_type.py +79 -0
- pcapkit/vendor/reg/__init__.py +47 -0
- pcapkit/vendor/reg/apptype/__init__.py +36 -0
- pcapkit/vendor/reg/apptype/apptype.py +1354 -0
- pcapkit/vendor/reg/apptype/dccp.py +27 -0
- pcapkit/vendor/reg/apptype/sctp.py +27 -0
- pcapkit/vendor/reg/apptype/tcp.py +27 -0
- pcapkit/vendor/reg/apptype/udp.py +27 -0
- pcapkit/vendor/reg/ethertype.py +172 -0
- pcapkit/vendor/reg/linktype.py +199 -0
- pcapkit/vendor/reg/transtype.py +111 -0
- pcapkit/vendor/sctp/__init__.py +37 -0
- pcapkit/vendor/sctp/cause_code.py +29 -0
- pcapkit/vendor/sctp/chunk.py +29 -0
- pcapkit/vendor/sctp/parameter.py +29 -0
- pcapkit/vendor/sctp/payload_protocol_identifier.py +29 -0
- pcapkit/vendor/tcp/__init__.py +35 -0
- pcapkit/vendor/tcp/checksum.py +80 -0
- pcapkit/vendor/tcp/flags.py +148 -0
- pcapkit/vendor/tcp/mp_tcp_option.py +90 -0
- pcapkit/vendor/tcp/option.py +103 -0
- pcapkit/vendor/vlan/__init__.py +23 -0
- pcapkit/vendor/vlan/priority_level.py +97 -0
- pypcapkit-1.5.0b9.dist-info/METADATA +208 -0
- pypcapkit-1.5.0b9.dist-info/RECORD +533 -0
- pypcapkit-1.5.0b9.dist-info/WHEEL +5 -0
- pypcapkit-1.5.0b9.dist-info/entry_points.txt +3 -0
- pypcapkit-1.5.0b9.dist-info/licenses/LICENSE +29 -0
- pypcapkit-1.5.0b9.dist-info/top_level.txt +1 -0
pcapkit/__init__.py
ADDED
|
@@ -0,0 +1,133 @@
|
|
|
1
|
+
# -*- coding: utf-8 -*-
|
|
2
|
+
# pylint: disable=wrong-import-position,unused-import,unused-wildcard-import
|
|
3
|
+
"""Stream PCAP File Extractor
|
|
4
|
+
================================
|
|
5
|
+
|
|
6
|
+
.. module:: pcapkit
|
|
7
|
+
|
|
8
|
+
:mod:`pcapkit` is an independent open source library, using only
|
|
9
|
+
`DictDumper`_ as its formatted output dumper.
|
|
10
|
+
|
|
11
|
+
.. _DictDumper: https://dictdumper.jarryshaw.me
|
|
12
|
+
|
|
13
|
+
Unlike popular PCAP file extractors, such as `Scapy`_,
|
|
14
|
+
`DPKT`_, `PyShark`_, and etc, :mod:`pcapkit` uses streaming
|
|
15
|
+
strategy to read input files. That is to read frame by
|
|
16
|
+
frame, decrease occupation on memory, as well as enhance
|
|
17
|
+
efficiency in some way.
|
|
18
|
+
|
|
19
|
+
.. _Scapy: https://scapy.net
|
|
20
|
+
.. _DPKT: https://dpkt.readthedocs.io
|
|
21
|
+
.. _PyShark: https://kiminewt.github.io/pyshark
|
|
22
|
+
|
|
23
|
+
In :mod:`pcapkit`, all files can be described as following eight
|
|
24
|
+
different components.
|
|
25
|
+
|
|
26
|
+
- Interface (:mod:`pcapkit.interface`)
|
|
27
|
+
|
|
28
|
+
User interface for the :mod:`pcapkit` library, which
|
|
29
|
+
standardises and simplifies the usage of this library.
|
|
30
|
+
|
|
31
|
+
- Foundation (:mod:`pcapkit.foundation`)
|
|
32
|
+
|
|
33
|
+
Synthesises file I/O and protocol analysis, coordinates
|
|
34
|
+
information exchange in all network layers, as well as
|
|
35
|
+
provides the fundamental functions for :mod:`pcapkit`.
|
|
36
|
+
|
|
37
|
+
- Protocols (:mod:`pcapkit.protocols`)
|
|
38
|
+
|
|
39
|
+
Collection of all protocol family, with detailed
|
|
40
|
+
implementation and methods.
|
|
41
|
+
|
|
42
|
+
- Utilities (:mod:`pcapkit.utilities`)
|
|
43
|
+
|
|
44
|
+
Auxiliary functions and tools for :mod:`pcapkit`.
|
|
45
|
+
|
|
46
|
+
- CoreKit (:mod:`pcapkit.corekit`)
|
|
47
|
+
|
|
48
|
+
Core utilities for :mod:`pcapkit` implementation, mainly
|
|
49
|
+
for internal data structure and processing.
|
|
50
|
+
|
|
51
|
+
- ToolKit (:mod:`pcapkit.toolkit`)
|
|
52
|
+
|
|
53
|
+
Auxiliary tools for :mod:`pcapkit` to support the multiple
|
|
54
|
+
extraction engines with a unified interface.
|
|
55
|
+
|
|
56
|
+
- DumpKit (:mod:`pcapkit.dumpkit`)
|
|
57
|
+
|
|
58
|
+
File output formatters for :mod:`pcapkit`.
|
|
59
|
+
|
|
60
|
+
- Constants (:mod:`pcapkit.const`)
|
|
61
|
+
|
|
62
|
+
Constant enumerations used in :mod:`pcapkit` for protocol
|
|
63
|
+
family extraction and representation.
|
|
64
|
+
|
|
65
|
+
"""
|
|
66
|
+
###############################################################################
|
|
67
|
+
# conda ``_extern`` module support
|
|
68
|
+
|
|
69
|
+
import os
|
|
70
|
+
import sys
|
|
71
|
+
|
|
72
|
+
_extern = os.path.join(os.path.dirname(os.path.realpath(__file__)), '_extern')
|
|
73
|
+
if os.path.exists(_extern):
|
|
74
|
+
sys.path.append(_extern)
|
|
75
|
+
|
|
76
|
+
###############################################################################
|
|
77
|
+
|
|
78
|
+
import warnings
|
|
79
|
+
|
|
80
|
+
import tbtrim
|
|
81
|
+
|
|
82
|
+
from pcapkit.utilities.exceptions import BaseError
|
|
83
|
+
from pcapkit.utilities.logging import DEVMODE
|
|
84
|
+
from pcapkit.utilities.warnings import DevModeWarning
|
|
85
|
+
|
|
86
|
+
# set up sys.excepthook
|
|
87
|
+
if DEVMODE:
|
|
88
|
+
warnings.showwarning('development mode enabled', DevModeWarning,
|
|
89
|
+
filename=__file__, lineno=0,
|
|
90
|
+
line=f"PCAPKIT_DEVMODE={os.environ.get('PCAPKIT_DEVMODE', '1')}")
|
|
91
|
+
else:
|
|
92
|
+
ROOT = os.path.dirname(os.path.realpath(__file__))
|
|
93
|
+
tbtrim.set_trim_rule(lambda filename: ROOT in os.path.realpath(filename),
|
|
94
|
+
exception=BaseError, strict=False)
|
|
95
|
+
|
|
96
|
+
from pcapkit.interface import *
|
|
97
|
+
from pcapkit.protocols import *
|
|
98
|
+
|
|
99
|
+
__all__ = [
|
|
100
|
+
'extract', 'reassemble', 'trace', # Interface Functions
|
|
101
|
+
|
|
102
|
+
'TREE', 'JSON', 'PLIST', 'PCAP', # Format Macros
|
|
103
|
+
'LINK', 'INET', 'TRANS', 'APP', 'RAW', # Layer Macros
|
|
104
|
+
'DPKT', 'Scapy', 'PyShark', 'PCAPKit', # Engine Macros
|
|
105
|
+
'PyPCAP', 'PCAP_CT', 'PyPCAPFile', # Engine Macros
|
|
106
|
+
|
|
107
|
+
'LINKTYPE', 'ETHERTYPE', 'TRANSTYPE', 'APPTYPE', # Protocol Numbers
|
|
108
|
+
|
|
109
|
+
'Header', 'Frame', # PCAP Headers
|
|
110
|
+
'PCAPNG', # PCAPNG Format
|
|
111
|
+
|
|
112
|
+
'NoPayload', # No Payload
|
|
113
|
+
'Raw', # Raw Packet
|
|
114
|
+
|
|
115
|
+
'ARP', 'C_Tag', 'Ethernet', 'InARP', 'L2TP', # Link Layer
|
|
116
|
+
'L2TPv2', 'Loopback', 'S_Tag', 'VLAN',
|
|
117
|
+
|
|
118
|
+
'AH', 'ESP', 'IP', 'IPsec', 'IPv4', 'IPv6', 'IPX', # Internet Layer
|
|
119
|
+
'HIP', 'HOPOPT', 'IPv6_Frag', 'IPv6_Ext', 'IPv6_Opts', 'IPv6_Route', 'MH',
|
|
120
|
+
# IPv6 Extension Header
|
|
121
|
+
|
|
122
|
+
'TCP', 'UDP', 'SCTP', # Transport Layer
|
|
123
|
+
|
|
124
|
+
'FTP', 'FTP_DATA', # Application Layer
|
|
125
|
+
'HTTP', 'HTTPv1', 'HTTPv2', 'NGAP', 'OSPF',
|
|
126
|
+
'RARP', 'DRARP',
|
|
127
|
+
|
|
128
|
+
'Data', # Protocol Data
|
|
129
|
+
'Schema', # Protocol Schema
|
|
130
|
+
]
|
|
131
|
+
|
|
132
|
+
#: version number
|
|
133
|
+
__version__ = '1.5.0b9'
|
pcapkit/__main__.py
ADDED
|
@@ -0,0 +1,153 @@
|
|
|
1
|
+
# -*- coding: utf-8 -*-
|
|
2
|
+
"""Command Line Tool
|
|
3
|
+
=======================
|
|
4
|
+
|
|
5
|
+
.. module:: pcapkit.__main__
|
|
6
|
+
|
|
7
|
+
.. important::
|
|
8
|
+
|
|
9
|
+
The ``emoji`` package is optional. Without it, importing this module
|
|
10
|
+
warns :class:`~pcapkit.utilities.warnings.EmojiWarning` and the verbose
|
|
11
|
+
messages print as plain text.
|
|
12
|
+
|
|
13
|
+
:mod:`pcapkit.__main__` was originally the module file of
|
|
14
|
+
|jspcapy|_, which is deprecated and merged with :mod:`pcapkit`.
|
|
15
|
+
|
|
16
|
+
.. |jspcapy| replace:: ``jspcapy``
|
|
17
|
+
.. _jspcapy: https://github.com/JarryShaw/jspcapy
|
|
18
|
+
|
|
19
|
+
"""
|
|
20
|
+
import argparse
|
|
21
|
+
import sys
|
|
22
|
+
from typing import TYPE_CHECKING
|
|
23
|
+
|
|
24
|
+
from pcapkit import __version__
|
|
25
|
+
from pcapkit.foundation.extraction import Extractor
|
|
26
|
+
from pcapkit.interface import JSON, PLIST, TREE
|
|
27
|
+
from pcapkit.utilities.compat import ModuleNotFoundError # pylint: disable=redefined-builtin
|
|
28
|
+
from pcapkit.utilities.exceptions import stacklevel
|
|
29
|
+
from pcapkit.utilities.warnings import EmojiWarning, warn
|
|
30
|
+
|
|
31
|
+
try:
|
|
32
|
+
import emoji
|
|
33
|
+
except ModuleNotFoundError:
|
|
34
|
+
warn("dependency package 'emoji' not found",
|
|
35
|
+
EmojiWarning, stacklevel=stacklevel())
|
|
36
|
+
|
|
37
|
+
__all__ = ['main']
|
|
38
|
+
|
|
39
|
+
if TYPE_CHECKING:
|
|
40
|
+
from argparse import ArgumentParser
|
|
41
|
+
|
|
42
|
+
|
|
43
|
+
def get_parser() -> 'ArgumentParser':
|
|
44
|
+
"""CLI argument parser."""
|
|
45
|
+
parser = argparse.ArgumentParser(prog='pcapkit-cli',
|
|
46
|
+
description='PCAP file extractor and formatted dumper')
|
|
47
|
+
parser.add_argument('-V', '--version', action='version', version=__version__)
|
|
48
|
+
parser.add_argument('fin', metavar='input-file-name',
|
|
49
|
+
help=('The name of input pcap file. If ".pcap" omits, '
|
|
50
|
+
'it will be automatically appended. Use "-" to indicate '
|
|
51
|
+
'reading from `stdin\'.'))
|
|
52
|
+
parser.add_argument('-o', '--output', action='store', metavar='file-name', dest='fout',
|
|
53
|
+
help=('The name of input pcap file. If format extension '
|
|
54
|
+
'omits, it will be automatically appended.'))
|
|
55
|
+
parser.add_argument('-f', '--format', action='store', metavar='format', dest='format',
|
|
56
|
+
help=('Print a extraction report in the specified output '
|
|
57
|
+
'format. Available are all formats supported by '
|
|
58
|
+
'dictdumper, e.g.: json, plist, and tree.'))
|
|
59
|
+
parser.add_argument('-j', '--json', action='store_true', default=False,
|
|
60
|
+
help=('Display extraction report as json. This will yield '
|
|
61
|
+
'"raw" output that may be used by external tools. '
|
|
62
|
+
'This option overrides all other options.'))
|
|
63
|
+
parser.add_argument('-p', '--plist', action='store_true', default=False,
|
|
64
|
+
help=('Display extraction report as macOS Property List '
|
|
65
|
+
'(plist). This will yield "raw" output that may be '
|
|
66
|
+
'used by external tools. This option overrides all '
|
|
67
|
+
'other options.'))
|
|
68
|
+
parser.add_argument('-t', '--tree', action='store_true', default=False,
|
|
69
|
+
help=('Display extraction report as tree view text. This '
|
|
70
|
+
'will yield "raw" output that may be used by external '
|
|
71
|
+
'tools. This option overrides all other options.'))
|
|
72
|
+
parser.add_argument('-a', '--auto-extension', action='store_true', default=False,
|
|
73
|
+
help='If output file extension omits, append automatically.')
|
|
74
|
+
parser.add_argument('-v', '--verbose', action='store_true', default=False,
|
|
75
|
+
help='Show more information.')
|
|
76
|
+
parser.add_argument('-F', '--files', action='store_true', default=False,
|
|
77
|
+
help='Split each frame into different files.')
|
|
78
|
+
parser.add_argument('-E', '--engine', action='store', dest='engine', default='default', metavar='PKG',
|
|
79
|
+
help=('Indicate extraction engine. Note that except '
|
|
80
|
+
'default or pcapkit engine, all other engines '
|
|
81
|
+
'need support of corresponding packages.'))
|
|
82
|
+
parser.add_argument('-P', '--protocol', action='store', dest='protocol', default=None, metavar='PROTOCOL',
|
|
83
|
+
help='Indicate extraction stops after which protocol.')
|
|
84
|
+
# NOTE: ``choices`` rather than a free-form string, because the layer names
|
|
85
|
+
# are a closed set (``pcapkit.foundation.extraction.Layers``) and a name
|
|
86
|
+
# outside it is not rejected anywhere downstream -- it simply never matches a
|
|
87
|
+
# protocol's ``__layer__`` and the parse silently runs to the top of the
|
|
88
|
+
# stack, which is the failure mode GH-356 was about. ``type=str.lower`` keeps
|
|
89
|
+
# ``-L Internet`` accepted, matching ``Extractor.__init__``, which lowercases
|
|
90
|
+
# the value anyway.
|
|
91
|
+
#
|
|
92
|
+
# The defaults are :data:`None` and not the ``'None'``/``'null'`` strings:
|
|
93
|
+
# ``Extractor.__init__`` substitutes its own sentinels for an
|
|
94
|
+
# omitted value, so passing the strings would only work because it happens to
|
|
95
|
+
# lowercase ``'None'`` into the sentinel it wants.
|
|
96
|
+
parser.add_argument('-L', '--layer', action='store', dest='layer', default=None, metavar='LAYER',
|
|
97
|
+
type=str.lower, choices=['link', 'internet', 'transport', 'application', 'none'],
|
|
98
|
+
help='Indicate extract frames until which layer.')
|
|
99
|
+
parser.add_argument('-B', '--buffer-save', action='store_true', default=False,
|
|
100
|
+
help='Indicate if store buffer to file when reading from stdin.')
|
|
101
|
+
parser.add_argument('-O', '--buffer-path', action='store', metavar='file-name', dest='buffer_path',
|
|
102
|
+
help=('The name of buffer storage file. If `--buffer-save` is set and this '
|
|
103
|
+
'omits, it will be automatically assigned.'))
|
|
104
|
+
return parser
|
|
105
|
+
|
|
106
|
+
|
|
107
|
+
def main() -> 'int':
|
|
108
|
+
"""Entrypoint."""
|
|
109
|
+
parser = get_parser()
|
|
110
|
+
args = parser.parse_args()
|
|
111
|
+
|
|
112
|
+
if args.format:
|
|
113
|
+
fmt = args.format
|
|
114
|
+
elif args.json:
|
|
115
|
+
fmt = JSON
|
|
116
|
+
elif args.plist:
|
|
117
|
+
fmt = PLIST
|
|
118
|
+
elif args.tree:
|
|
119
|
+
fmt = TREE
|
|
120
|
+
else:
|
|
121
|
+
fmt = None
|
|
122
|
+
|
|
123
|
+
no_eof = args.fin == '-'
|
|
124
|
+
if args.fin == '-':
|
|
125
|
+
args.fin = sys.stdin.buffer
|
|
126
|
+
|
|
127
|
+
extractor = Extractor(store=False, auto=not args.verbose,
|
|
128
|
+
fin=args.fin, fout=args.fout,
|
|
129
|
+
files=args.files, format=fmt,
|
|
130
|
+
layer=args.layer, protocol=args.protocol,
|
|
131
|
+
engine=args.engine, extension=args.auto_extension,
|
|
132
|
+
verbose=args.verbose, buffer_save=args.buffer_save,
|
|
133
|
+
no_eof=no_eof, buffer_path=args.buffer_path) # type: ignore[var-annotated]
|
|
134
|
+
|
|
135
|
+
if args.verbose:
|
|
136
|
+
try:
|
|
137
|
+
print(emoji.emojize(f":police_car_light: Loading file {extractor.input!r}"))
|
|
138
|
+
except (UnicodeEncodeError, NameError): # may trigger if emoji not installed
|
|
139
|
+
print(f"[*] Loading file {extractor.input!r}")
|
|
140
|
+
|
|
141
|
+
for _ in extractor:
|
|
142
|
+
pass
|
|
143
|
+
|
|
144
|
+
try:
|
|
145
|
+
print(emoji.emojize(f":beer_mug: Report file{'s' if args.files else ''} stored in {extractor.output!r}"))
|
|
146
|
+
except (UnicodeEncodeError, NameError): # may trigger if emoji not installed
|
|
147
|
+
print(f"[*] Report file{'s' if args.files else ''} stored in {extractor.output!r}")
|
|
148
|
+
|
|
149
|
+
return 0
|
|
150
|
+
|
|
151
|
+
|
|
152
|
+
if __name__ == '__main__':
|
|
153
|
+
sys.exit(main())
|
pcapkit/all.py
ADDED
|
@@ -0,0 +1,149 @@
|
|
|
1
|
+
# -*- coding: utf-8 -*-
|
|
2
|
+
# pylint: disable=unused-import,unused-wildcard-import,wildcard-import
|
|
3
|
+
"""Library Index
|
|
4
|
+
===================
|
|
5
|
+
|
|
6
|
+
.. module:: pcapkit.all
|
|
7
|
+
|
|
8
|
+
:mod:`pcapkit` has defined various and numerous functions
|
|
9
|
+
and classes, which have different features and purposes.
|
|
10
|
+
To make a simple index for this library, :mod:`pcapkit.all`
|
|
11
|
+
contains all things from :mod:`pcapkit`.
|
|
12
|
+
|
|
13
|
+
"""
|
|
14
|
+
from pcapkit import const
|
|
15
|
+
from pcapkit.corekit import *
|
|
16
|
+
from pcapkit.dumpkit import *
|
|
17
|
+
from pcapkit.foundation import *
|
|
18
|
+
from pcapkit.interface import *
|
|
19
|
+
from pcapkit.protocols import *
|
|
20
|
+
from pcapkit.toolkit import *
|
|
21
|
+
from pcapkit.utilities import * # pylint: disable=redefined-builtin
|
|
22
|
+
|
|
23
|
+
#from pcapkit import vendor
|
|
24
|
+
|
|
25
|
+
# tools for Scapy engine
|
|
26
|
+
from pcapkit.toolkit.scapy import packet2chain as scapy_packet2chain # isort: skip
|
|
27
|
+
from pcapkit.toolkit.scapy import packet2dict as scapy_packet2dict # isort: skip
|
|
28
|
+
from pcapkit.toolkit.scapy import ipv4_reassembly as scapy_ipv4_reassembly # isort: skip
|
|
29
|
+
from pcapkit.toolkit.scapy import ipv6_reassembly as scapy_ipv6_reassembly # isort: skip
|
|
30
|
+
from pcapkit.toolkit.scapy import tcp_reassembly as scapy_tcp_reassembly # isort: skip
|
|
31
|
+
from pcapkit.toolkit.scapy import tcp_traceflow as scapy_tcp_traceflow # isort: skip
|
|
32
|
+
|
|
33
|
+
# tools for DPKT engine
|
|
34
|
+
from pcapkit.toolkit.dpkt import ipv6_hdr_len as dpkt_ipv6_hdr_len # isort: skip
|
|
35
|
+
from pcapkit.toolkit.dpkt import packet2chain as dpkt_packet2chain # isort: skip
|
|
36
|
+
from pcapkit.toolkit.dpkt import packet2dict as dpkt_packet2dict # isort: skip
|
|
37
|
+
from pcapkit.toolkit.dpkt import ipv4_reassembly as dpkt_ipv4_reassembly # isort: skip
|
|
38
|
+
from pcapkit.toolkit.dpkt import ipv6_reassembly as dpkt_ipv6_reassembly # isort: skip
|
|
39
|
+
from pcapkit.toolkit.dpkt import tcp_reassembly as dpkt_tcp_reassembly # isort: skip
|
|
40
|
+
from pcapkit.toolkit.dpkt import tcp_traceflow as dpkt_tcp_traceflow # isort: skip
|
|
41
|
+
|
|
42
|
+
# tools for PyShark engine
|
|
43
|
+
from pcapkit.toolkit.pyshark import packet2dict as pyshark_packet2dict # isort: skip
|
|
44
|
+
from pcapkit.toolkit.pyshark import tcp_traceflow as pyshark_tcp_traceflow # isort: skip
|
|
45
|
+
|
|
46
|
+
__all__ = [
|
|
47
|
+
# pcapkit.const
|
|
48
|
+
'const',
|
|
49
|
+
|
|
50
|
+
# # pcapkit.vendor
|
|
51
|
+
# 'vendor',
|
|
52
|
+
|
|
53
|
+
# pcapkit.corekit
|
|
54
|
+
'EnumRegistry', # Enum Registry
|
|
55
|
+
'Info', 'info_final', # Info Class
|
|
56
|
+
'MultiInfo', 'OrderedMultiInfo',
|
|
57
|
+
'ProtoChain', # ProtoChain
|
|
58
|
+
'VersionInfo', # Version
|
|
59
|
+
'NumberField', 'Int32Field', 'UInt32Field', # numeric protocol fields
|
|
60
|
+
'Int16Field', 'UInt16Field', 'Int64Field', 'UInt64Field',
|
|
61
|
+
'Int8Field', 'UInt8Field', 'EnumField',
|
|
62
|
+
'BytesField', 'StringField', 'BitField', # text protocol fields
|
|
63
|
+
'PaddingField',
|
|
64
|
+
'ConditionalField', 'PayloadField', 'SchemaField', # misc protocol fields
|
|
65
|
+
'ForwardMatchField', 'NoValueField',
|
|
66
|
+
'IPv4AddressField', 'IPv6AddressField', # IP address protocol fields
|
|
67
|
+
'IPv4InterfaceField', 'IPv6InterfaceField',
|
|
68
|
+
'ListField', 'OptionField', # container protocol fields
|
|
69
|
+
'SeekableReader', # Seekable Reader
|
|
70
|
+
'MultiDict', 'OrderedMultiDict', # Multi Dict
|
|
71
|
+
'ModuleDescriptor', # Module Descriptor
|
|
72
|
+
|
|
73
|
+
# pcapkit.dumpkit
|
|
74
|
+
'PCAPIO', # PCAP Dumper
|
|
75
|
+
'NotImplementedIO', # Simulated I/O
|
|
76
|
+
|
|
77
|
+
# pcapkit.foundation
|
|
78
|
+
'Extractor', # Extraction
|
|
79
|
+
'TraceFlowManager', 'TCP_TraceFlow', # Trace Flow
|
|
80
|
+
|
|
81
|
+
# pcapkit.foundation.reassembly
|
|
82
|
+
'ReassemblyManager', # Reassembly Manager
|
|
83
|
+
'IPv4_Reassembly', 'IPv6_Reassembly', # IP Reassembly
|
|
84
|
+
'TCP_Reassembly', # TCP Reassembly
|
|
85
|
+
|
|
86
|
+
# pcapkit.foundation.registry
|
|
87
|
+
'register_protocol',
|
|
88
|
+
'register_protocol_code',
|
|
89
|
+
'register_linktype',
|
|
90
|
+
'register_pcap', 'register_pcapng',
|
|
91
|
+
'register_ethertype',
|
|
92
|
+
'register_transtype',
|
|
93
|
+
'register_ipv4_option', 'register_hip_parameter', 'register_hopopt_option',
|
|
94
|
+
'register_ipv6_opts_option', 'register_ipv6_route_routing',
|
|
95
|
+
'register_mh_message', 'register_mh_option', 'register_mh_extension',
|
|
96
|
+
'register_apptype',
|
|
97
|
+
'register_tcp', 'register_udp', 'register_sctp',
|
|
98
|
+
'register_tcp_option', 'register_tcp_mp_option',
|
|
99
|
+
'register_http_frame',
|
|
100
|
+
'register_pcapng_block', 'register_pcapng_option', 'register_pcapng_secrets',
|
|
101
|
+
'register_pcapng_record',
|
|
102
|
+
'register_extractor_engine',
|
|
103
|
+
'register_dumper',
|
|
104
|
+
'register_extractor_dumper', 'register_traceflow_dumper',
|
|
105
|
+
'register_extractor_reassembly', 'register_extractor_traceflow',
|
|
106
|
+
'register_reassembly_ipv4_callback', 'register_reassembly_ipv6_callback',
|
|
107
|
+
'register_reassembly_tcp_callback', 'register_traceflow_tcp_callback',
|
|
108
|
+
|
|
109
|
+
# pcapkit.interface
|
|
110
|
+
'extract', 'reassemble', 'trace', # Interface Functions
|
|
111
|
+
'TREE', 'JSON', 'PLIST', 'PCAP', # Format Macros
|
|
112
|
+
'LINK', 'INET', 'TRANS', 'APP', 'RAW', # Layer Macros
|
|
113
|
+
'DPKT', 'Scapy', 'PyShark', 'PCAPKit', # Engine Macros
|
|
114
|
+
'PyPCAP', 'PCAP_CT', 'PyPCAPFile', # Engine Macros
|
|
115
|
+
|
|
116
|
+
# pcapkit.protocols
|
|
117
|
+
'LINKTYPE', 'ETHERTYPE', 'TRANSTYPE', 'APPTYPE', # Protocol Numbers
|
|
118
|
+
'Header', 'Frame', # PCAP Headers
|
|
119
|
+
'PCAPNG', # PCAPNG Format
|
|
120
|
+
'NoPayload', # No Payload
|
|
121
|
+
'Raw', # Raw Packet
|
|
122
|
+
'ARP', 'C_Tag', 'Ethernet', 'InARP', 'L2TP', 'L2TPv2',
|
|
123
|
+
'Loopback', 'S_Tag', 'VLAN', # Link Layer
|
|
124
|
+
'AH', 'ESP', 'IP', 'IPsec', 'IPv4', 'IPv6', 'IPX', # Internet Layer
|
|
125
|
+
'HIP', 'HOPOPT', 'IPv6_Ext', 'IPv6_Frag', 'IPv6_Opts', 'IPv6_Route', 'MH',
|
|
126
|
+
# IPv6 Extension Header
|
|
127
|
+
'TCP', 'UDP', 'SCTP', # Transport Layer
|
|
128
|
+
'FTP', 'FTP_DATA', # Application Layer
|
|
129
|
+
'HTTP', 'HTTPv1', 'HTTPv2', 'NGAP', 'OSPF', 'RARP', 'DRARP',
|
|
130
|
+
'Schema', 'schema', # Protocol Schema
|
|
131
|
+
'Data', 'data', # Protocol Data
|
|
132
|
+
|
|
133
|
+
# pcapkit.toolkit
|
|
134
|
+
'ipv4_reassembly', 'ipv6_reassembly', 'tcp_reassembly', 'tcp_traceflow',
|
|
135
|
+
'pcapng_ipv4_reassembly', 'pcapng_ipv6_reassembly', 'pcapng_tcp_reassembly', 'pcapng_tcp_traceflow',
|
|
136
|
+
'pcapng_block2frame', # default engine
|
|
137
|
+
'dpkt_ipv6_hdr_len', 'dpkt_packet2chain', 'dpkt_packet2dict',
|
|
138
|
+
'dpkt_ipv4_reassembly', 'dpkt_ipv6_reassembly', 'dpkt_tcp_reassembly', 'dpkt_tcp_traceflow',
|
|
139
|
+
# DPKT engine
|
|
140
|
+
'pyshark_packet2dict', 'pyshark_tcp_traceflow', # PyShark engine
|
|
141
|
+
'scapy_packet2chain', 'scapy_packet2dict',
|
|
142
|
+
'scapy_ipv4_reassembly', 'scapy_ipv6_reassembly', 'scapy_tcp_reassembly', 'scapy_tcp_traceflow',
|
|
143
|
+
# Scapy engine
|
|
144
|
+
|
|
145
|
+
# pcapkit.utilities -- unlisted: its names stay reachable as attributes, but
|
|
146
|
+
# ``import *`` leaves out generic helpers such as ``warn``, ``reset``,
|
|
147
|
+
# ``configure`` and ``detect``
|
|
148
|
+
#'beholder_ng', 'seekset_ng', # Decorators
|
|
149
|
+
]
|
|
@@ -0,0 +1,90 @@
|
|
|
1
|
+
# -*- coding: utf-8 -*-
|
|
2
|
+
# pylint: disable=unused-import, unused-wildcard-import
|
|
3
|
+
"""Constant Enumerations
|
|
4
|
+
===========================
|
|
5
|
+
|
|
6
|
+
This module contains all constant enumerations of :mod:`pcapkit`, which are
|
|
7
|
+
automatically generated from the :mod:`pcapkit.vendor` module.
|
|
8
|
+
|
|
9
|
+
"""
|
|
10
|
+
|
|
11
|
+
# IANA registration
|
|
12
|
+
from pcapkit.const.reg import *
|
|
13
|
+
|
|
14
|
+
# Miscellanous
|
|
15
|
+
from pcapkit.const.pcapng import *
|
|
16
|
+
|
|
17
|
+
# per protocol
|
|
18
|
+
from pcapkit.const.arp import *
|
|
19
|
+
from pcapkit.const.esp import *
|
|
20
|
+
from pcapkit.const.ftp import *
|
|
21
|
+
from pcapkit.const.hip import *
|
|
22
|
+
from pcapkit.const.http import *
|
|
23
|
+
from pcapkit.const.ipv4 import *
|
|
24
|
+
from pcapkit.const.ipv6 import *
|
|
25
|
+
from pcapkit.const.ipx import *
|
|
26
|
+
from pcapkit.const.l2tp import *
|
|
27
|
+
from pcapkit.const.mh import *
|
|
28
|
+
from pcapkit.const.ngap import *
|
|
29
|
+
from pcapkit.const.ospf import *
|
|
30
|
+
from pcapkit.const.sctp import *
|
|
31
|
+
from pcapkit.const.tcp import *
|
|
32
|
+
from pcapkit.const.vlan import *
|
|
33
|
+
|
|
34
|
+
__all__ = [
|
|
35
|
+
# Protocol Registration
|
|
36
|
+
'ETHERTYPE', 'LINKTYPE', 'TRANSTYPE', 'APPTYPE',
|
|
37
|
+
# ARP
|
|
38
|
+
'ARP_Hardware', 'ARP_Operation',
|
|
39
|
+
# ESP
|
|
40
|
+
'ESP_Cipher', 'ESP_Integrity',
|
|
41
|
+
# FTP
|
|
42
|
+
'FTP_Command', 'FTP_ReturnCode',
|
|
43
|
+
# HIP
|
|
44
|
+
'HIP_Certificate', 'HIP_Cipher', 'HIP_DITypes', 'HIP_ECDSACurve', 'HIP_ECDSALowCurve',
|
|
45
|
+
'HIP_ESPTransformSuite', 'HIP_Group', 'HIP_HIAlgorithm', 'HIP_HITSuite', 'HIP_NATTraversal',
|
|
46
|
+
'HIP_NotifyMessage', 'HIP_Packet', 'HIP_Parameter', 'HIP_Registration', 'HIP_RegistrationFailure',
|
|
47
|
+
'HIP_Suite', 'HIP_Transport', 'HIP_EdDSACurve',
|
|
48
|
+
# HTTP
|
|
49
|
+
'HTTP_ErrorCode', 'HTTP_Frame', 'HTTP_Method', 'HTTP_Setting', 'HTTP_Status',
|
|
50
|
+
# IPv4
|
|
51
|
+
'IPv4_ClassificationLevel', 'IPv4_OptionClass', 'IPv4_OptionNumber', 'IPv4_ProtectionAuthority',
|
|
52
|
+
'IPv4_QSFunction', 'IPv4_RouterAlert', 'IPv4_ToSDelay', 'IPv4_ToSECN', 'IPv4_ToSPrecedence',
|
|
53
|
+
'IPv4_ToSReliability', 'IPv4_ToSThroughput', 'IPv4_TSFlag',
|
|
54
|
+
# IPv6
|
|
55
|
+
'IPv6_ExtensionHeader', 'IPv6_Option', 'IPv6_QSFunction', 'IPv6_RouterAlert', 'IPv6_Routing',
|
|
56
|
+
'IPv6_SeedID', 'IPv6_SMFDPDMode', 'IPv6_TaggerID', 'IPv6_OptionAction',
|
|
57
|
+
# IPX
|
|
58
|
+
'IPX_Packet', 'IPX_Socket',
|
|
59
|
+
# L2TP
|
|
60
|
+
'L2TP_Type',
|
|
61
|
+
# MH
|
|
62
|
+
'MH_Packet', 'MH_Option', 'MH_DNSStatusCode', 'MH_ACKStatusCode',
|
|
63
|
+
'MH_MNIDSubtype', 'MH_StatusCode', 'MH_EnumeratingAlgorithm',
|
|
64
|
+
'MH_AuthSubtype', 'MH_HandoffType', 'MH_AccessType',
|
|
65
|
+
'MH_BindingUpdateFlag', 'MH_BindingACKFlag', 'MH_DSMIPv6HomeAddress',
|
|
66
|
+
'MH_BindingRevocation', 'MH_RevocationTrigger', 'MH_RevocationStatusCode',
|
|
67
|
+
'MH_HomeAddressReply', 'MH_DHCPSupportMode', 'MH_HandoverInitiateFlag',
|
|
68
|
+
'MH_HandoverACKFlag', 'MH_HandoverInitiateStatus', 'MH_HandoverACKStatus',
|
|
69
|
+
'MH_FlowIDStatus', 'MH_FlowIDSuboption', 'MH_TrafficSelector',
|
|
70
|
+
'MH_MNGroupID', 'MH_DSMIP6TLSPacket', 'MH_ANISuboption', 'MH_OperatorID',
|
|
71
|
+
'MH_UpdateNotificationReason', 'MH_UpdateNotificationACKStatus',
|
|
72
|
+
'MH_FlowBindingType', 'MH_FlowBindingIndicationTrigger',
|
|
73
|
+
'MH_FlowBindingACKStatus', 'MH_FlowBindingAction', 'MH_QoSAttribute',
|
|
74
|
+
'MH_LMAControlledMAGSuboption', 'MH_LLACode', 'MH_CGAType',
|
|
75
|
+
'MH_CGAExtension', 'MH_CGASec', 'MH_BindingError',
|
|
76
|
+
# NGAP
|
|
77
|
+
'NGAP_ProcedureCode', 'NGAP_ProtocolIE',
|
|
78
|
+
# OSPF
|
|
79
|
+
'OSPF_Authentication', 'OSPF_Packet',
|
|
80
|
+
# SCTP
|
|
81
|
+
'SCTP_Chunk', 'SCTP_Parameter', 'SCTP_CauseCode', 'SCTP_PayloadProtocolIdentifier',
|
|
82
|
+
# TCP
|
|
83
|
+
'TCP_Checksum', 'TCP_Option', 'TCP_MPTCPOption', 'TCP_Flags',
|
|
84
|
+
# VLAN
|
|
85
|
+
'VLAN_PriorityLevel',
|
|
86
|
+
# PCAPNG
|
|
87
|
+
'PCAPNG_BlockType', 'PCAPNG_OptionType', 'PCAPNG_HashAlgorithm',
|
|
88
|
+
'PCAPNG_VerdictType', 'PCAPNG_RecordType', 'PCAPNG_SecretsType',
|
|
89
|
+
'PCAPNG_FilterType', 'PCAPNG_TLSKeyLabel',
|
|
90
|
+
]
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
# -*- coding: utf-8 -*-
|
|
2
|
+
# pylint: disable=unused-import
|
|
3
|
+
""":class:`~pcapkit.protocols.link.arp.ARP` Constant Enumerations
|
|
4
|
+
=====================================================================
|
|
5
|
+
|
|
6
|
+
This module contains all constant enumerations of :class:`~pcapkit.protocols.link.arp.ARP`
|
|
7
|
+
and :class:`~pcapkit.protocols.application.rarp.RARP` implementations. Available
|
|
8
|
+
enumerations include:
|
|
9
|
+
|
|
10
|
+
.. list-table::
|
|
11
|
+
|
|
12
|
+
* - :class:`ARP_Hardware <pcapkit.const.arp.hardware.Hardware>`
|
|
13
|
+
- ARP Hardware Types [*]_
|
|
14
|
+
* - :class:`ARP_Operation <pcapkit.const.arp.operation.Operation>`
|
|
15
|
+
- Operation Codes [*]_
|
|
16
|
+
|
|
17
|
+
.. [*] https://www.iana.org/assignments/arp-parameters/arp-parameters.xhtml#arp-parameters-2
|
|
18
|
+
.. [*] https://www.iana.org/assignments/arp-parameters/arp-parameters.xhtml#arp-parameters-1
|
|
19
|
+
|
|
20
|
+
"""
|
|
21
|
+
|
|
22
|
+
from pcapkit.const.arp.hardware import Hardware as ARP_Hardware
|
|
23
|
+
from pcapkit.const.arp.operation import Operation as ARP_Operation
|
|
24
|
+
|
|
25
|
+
__all__ = ['ARP_Hardware', 'ARP_Operation']
|