xbase-util 0.6.3__tar.gz → 0.6.5__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {xbase_util-0.6.3 → xbase_util-0.6.5}/PKG-INFO +1 -1
- {xbase_util-0.6.3 → xbase_util-0.6.5}/setup.py +1 -1
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/packet_util.py +7 -19
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/PKG-INFO +1 -1
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/SOURCES.txt +0 -1
- xbase_util-0.6.3/test/test.py +0 -9
- {xbase_util-0.6.3 → xbase_util-0.6.5}/README.md +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/setup.cfg +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/__init__.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/add_column_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/dangerous_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/__init__.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/ConfigBean.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/CurrentConfigBean.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/FlowBean.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/TaskTemplateBean.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/__init__.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/ConfigDao.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/CurrentConfigDao.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/FlowDao.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/TaskTemplateDao.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/__init__.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/initsqlite3.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/es_db_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/esreq.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/geo_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/handle_features_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/pcap_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/xbase_constant.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/xbase_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/dependency_links.txt +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/not-zip-safe +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/top_level.txt +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util_assets/GeoLite2-City.mmdb +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util_assets/arkimeparse.js +0 -0
@@ -96,22 +96,10 @@ def get_all_packets_by_reg(packets):
|
|
96
96
|
return packet_list
|
97
97
|
|
98
98
|
|
99
|
-
def get_body(packet
|
99
|
+
def get_body(packet):
|
100
100
|
try:
|
101
|
-
|
102
|
-
|
103
|
-
a = packet['req_text']
|
104
|
-
print(f"req_text类型:{a}")
|
105
|
-
return "".join([item for item in f"{a}".split("\r\n\r\n") if "HTTP/" not in item])
|
106
|
-
elif is_req is False and 'res_text' in packet:
|
107
|
-
a = packet['res_text']
|
108
|
-
print(f"res_text类型:{a}")
|
109
|
-
return "".join([item for item in f"{a}".split("\r\n\r\n") if "HTTP/" not in item])
|
110
|
-
else:
|
111
|
-
print("里面没有")
|
112
|
-
return ""
|
113
|
-
except Exception as e:
|
114
|
-
print("-" * 30)
|
101
|
+
return "".join([item for item in packet.split("\r\n\r\n") if "HTTP/" not in item])
|
102
|
+
except Exception:
|
115
103
|
traceback.print_exc()
|
116
104
|
return ""
|
117
105
|
|
@@ -133,8 +121,8 @@ def get_detail_by_package(packets_from_pcap, publicField, use_regx):
|
|
133
121
|
"""
|
134
122
|
res_field = publicField.copy()
|
135
123
|
if use_regx:
|
136
|
-
req = packets_from_pcap['
|
137
|
-
res = packets_from_pcap['
|
124
|
+
req = packets_from_pcap['req_body']
|
125
|
+
res = packets_from_pcap['res_body']
|
138
126
|
else:
|
139
127
|
res = packets_from_pcap["response"]
|
140
128
|
req = packets_from_pcap["request"]
|
@@ -160,9 +148,9 @@ def get_detail_by_package(packets_from_pcap, publicField, use_regx):
|
|
160
148
|
res_field['plain_body_src'] = ""
|
161
149
|
res_field['plain_body_dst'] = ""
|
162
150
|
if content_type_is_plain(req):
|
163
|
-
res_field['plain_body_src'] = get_body(req
|
151
|
+
res_field['plain_body_src'] = get_body(req)
|
164
152
|
if content_type_is_plain(res):
|
165
|
-
res_field['plain_body_dst'] = get_body(res
|
153
|
+
res_field['plain_body_dst'] = get_body(res)
|
166
154
|
|
167
155
|
response_lines = res.strip().split("\n")
|
168
156
|
http_response_lines = [item for item in response_lines if "HTTP" in item]
|
xbase_util-0.6.3/test/test.py
DELETED
@@ -1,9 +0,0 @@
|
|
1
|
-
from scapy.utils import rdpcap
|
2
|
-
|
3
|
-
from xbase_util.packet_util import get_all_packets_by_reg, get_body
|
4
|
-
|
5
|
-
if __name__ == '__main__':
|
6
|
-
p = get_all_packets_by_reg(rdpcap("t1.pcap"))
|
7
|
-
for packet in p:
|
8
|
-
print( packet['req_text'])
|
9
|
-
print(get_body(packet,is_req=True))
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|