xbase-util 0.5.4__tar.gz → 0.5.5__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {xbase_util-0.5.4 → xbase_util-0.5.5}/PKG-INFO +1 -1
- {xbase_util-0.5.4 → xbase_util-0.5.5}/setup.py +1 -1
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/packet_util.py +2 -53
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util.egg-info/PKG-INFO +1 -1
- {xbase_util-0.5.4 → xbase_util-0.5.5}/README.md +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/setup.cfg +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/__init__.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/add_column_util.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/dangerous_util.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/__init__.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/bean/ConfigBean.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/bean/CurrentConfigBean.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/bean/FlowBean.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/bean/TaskTemplateBean.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/bean/__init__.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/dao/ConfigDao.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/dao/CurrentConfigDao.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/dao/FlowDao.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/dao/TaskTemplateDao.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/dao/__init__.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/db/initsqlite3.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/es_db_util.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/esreq.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/geo_util.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/handle_features_util.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/pcap_util.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/xbase_constant.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util/xbase_util.py +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util.egg-info/SOURCES.txt +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util.egg-info/dependency_links.txt +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util.egg-info/not-zip-safe +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util.egg-info/top_level.txt +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util_assets/GeoLite2-City.mmdb +0 -0
- {xbase_util-0.5.4 → xbase_util-0.5.5}/xbase_util_assets/arkimeparse.js +0 -0
@@ -89,61 +89,10 @@ def get_all_packets_by_reg(packets):
|
|
89
89
|
'res_time': http_Req_Raw[item['next_ack']]['time']
|
90
90
|
}
|
91
91
|
for ack, item in http_Req_Raw.items()
|
92
|
-
if
|
92
|
+
if item['next_ack'] in http_Req_Raw # 检查 next_ack 是否存在
|
93
|
+
and any(method in filter_visible_chars(item['data']) for method in http_methods)
|
93
94
|
]
|
94
95
|
return packet_list
|
95
|
-
# def get_all_packets_by_reg(packets):
|
96
|
-
# packets = [packet for packet in packets if packet.haslayer(TCP) and packet.haslayer(IP) and packet.haslayer(Raw)]
|
97
|
-
# packet_list = []
|
98
|
-
# my_map = {
|
99
|
-
# 'req_data': b'',
|
100
|
-
# 'res_data': b'',
|
101
|
-
# 'req_text': '',
|
102
|
-
# 'res_text': '',
|
103
|
-
# 'req_time': [],
|
104
|
-
# 'res_time': []
|
105
|
-
# }
|
106
|
-
# last_is_req = None
|
107
|
-
# for item in packets:
|
108
|
-
# data = item[Raw].load
|
109
|
-
# time = float(item.time)
|
110
|
-
# req_match = req_pattern.search(filter_visible_chars(data))
|
111
|
-
# res_match = res_pattern.search(filter_visible_chars(data))
|
112
|
-
# if req_match is not None or res_match is not None:
|
113
|
-
# if req_match:
|
114
|
-
# # 新的请求:请求时间不为空或者响应时间不为空,说明不为空,添加到列表并清空数据
|
115
|
-
# if len(my_map['req_time']) != 0 or len(my_map['res_time']) != 0:
|
116
|
-
# packet_list.append(my_map.copy())
|
117
|
-
# my_map = {
|
118
|
-
# 'req_data': data,
|
119
|
-
# 'res_data': b'',
|
120
|
-
# 'req_text': filter_visible_chars(data),
|
121
|
-
# 'res_text': '',
|
122
|
-
# 'req_time': [time],
|
123
|
-
# 'res_time': []
|
124
|
-
# }
|
125
|
-
# last_is_req = True
|
126
|
-
# if res_match:
|
127
|
-
# my_map['res_data'] += data
|
128
|
-
# my_map['res_text'] = filter_visible_chars(my_map['res_data'])
|
129
|
-
# my_map['res_time'].append(time)
|
130
|
-
# last_is_req = False
|
131
|
-
# else:
|
132
|
-
# # 不是请求不是相应,就是中间的包
|
133
|
-
# if last_is_req is None:
|
134
|
-
# # 一开始就没匹配到请求或者响应头,那就不管即使是中间的包
|
135
|
-
# continue
|
136
|
-
# if last_is_req is True:
|
137
|
-
# my_map['req_time'].append(time)
|
138
|
-
# my_map['req_data'] += data
|
139
|
-
# my_map['req_text'] = filter_visible_chars(my_map['req_data'])
|
140
|
-
# elif last_is_req is False:
|
141
|
-
# my_map['res_time'].append(time)
|
142
|
-
# my_map['res_data'] += data
|
143
|
-
# my_map['res_text'] = filter_visible_chars(my_map['res_data'])
|
144
|
-
# if len(my_map['req_time']) != 0 or len(my_map['res_time']) != 0:
|
145
|
-
# packet_list.append(my_map.copy())
|
146
|
-
# return packet_list
|
147
96
|
|
148
97
|
|
149
98
|
def get_body(param):
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|