xbase-util 0.6.3__tar.gz → 0.6.5__tar.gz
Sign up to get free protection for your applications and to get access to all the features.
- {xbase_util-0.6.3 → xbase_util-0.6.5}/PKG-INFO +1 -1
- {xbase_util-0.6.3 → xbase_util-0.6.5}/setup.py +1 -1
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/packet_util.py +7 -19
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/PKG-INFO +1 -1
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/SOURCES.txt +0 -1
- xbase_util-0.6.3/test/test.py +0 -9
- {xbase_util-0.6.3 → xbase_util-0.6.5}/README.md +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/setup.cfg +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/__init__.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/add_column_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/dangerous_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/__init__.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/ConfigBean.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/CurrentConfigBean.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/FlowBean.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/TaskTemplateBean.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/bean/__init__.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/ConfigDao.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/CurrentConfigDao.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/FlowDao.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/TaskTemplateDao.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/dao/__init__.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/db/initsqlite3.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/es_db_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/esreq.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/geo_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/handle_features_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/pcap_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/xbase_constant.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util/xbase_util.py +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/dependency_links.txt +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/not-zip-safe +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util.egg-info/top_level.txt +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util_assets/GeoLite2-City.mmdb +0 -0
- {xbase_util-0.6.3 → xbase_util-0.6.5}/xbase_util_assets/arkimeparse.js +0 -0
@@ -96,22 +96,10 @@ def get_all_packets_by_reg(packets):
|
|
96
96
|
return packet_list
|
97
97
|
|
98
98
|
|
99
|
-
def get_body(packet
|
99
|
+
def get_body(packet):
|
100
100
|
try:
|
101
|
-
|
102
|
-
|
103
|
-
a = packet['req_text']
|
104
|
-
print(f"req_text类型:{a}")
|
105
|
-
return "".join([item for item in f"{a}".split("\r\n\r\n") if "HTTP/" not in item])
|
106
|
-
elif is_req is False and 'res_text' in packet:
|
107
|
-
a = packet['res_text']
|
108
|
-
print(f"res_text类型:{a}")
|
109
|
-
return "".join([item for item in f"{a}".split("\r\n\r\n") if "HTTP/" not in item])
|
110
|
-
else:
|
111
|
-
print("里面没有")
|
112
|
-
return ""
|
113
|
-
except Exception as e:
|
114
|
-
print("-" * 30)
|
101
|
+
return "".join([item for item in packet.split("\r\n\r\n") if "HTTP/" not in item])
|
102
|
+
except Exception:
|
115
103
|
traceback.print_exc()
|
116
104
|
return ""
|
117
105
|
|
@@ -133,8 +121,8 @@ def get_detail_by_package(packets_from_pcap, publicField, use_regx):
|
|
133
121
|
"""
|
134
122
|
res_field = publicField.copy()
|
135
123
|
if use_regx:
|
136
|
-
req = packets_from_pcap['
|
137
|
-
res = packets_from_pcap['
|
124
|
+
req = packets_from_pcap['req_body']
|
125
|
+
res = packets_from_pcap['res_body']
|
138
126
|
else:
|
139
127
|
res = packets_from_pcap["response"]
|
140
128
|
req = packets_from_pcap["request"]
|
@@ -160,9 +148,9 @@ def get_detail_by_package(packets_from_pcap, publicField, use_regx):
|
|
160
148
|
res_field['plain_body_src'] = ""
|
161
149
|
res_field['plain_body_dst'] = ""
|
162
150
|
if content_type_is_plain(req):
|
163
|
-
res_field['plain_body_src'] = get_body(req
|
151
|
+
res_field['plain_body_src'] = get_body(req)
|
164
152
|
if content_type_is_plain(res):
|
165
|
-
res_field['plain_body_dst'] = get_body(res
|
153
|
+
res_field['plain_body_dst'] = get_body(res)
|
166
154
|
|
167
155
|
response_lines = res.strip().split("\n")
|
168
156
|
http_response_lines = [item for item in response_lines if "HTTP" in item]
|
xbase_util-0.6.3/test/test.py
DELETED
@@ -1,9 +0,0 @@
|
|
1
|
-
from scapy.utils import rdpcap
|
2
|
-
|
3
|
-
from xbase_util.packet_util import get_all_packets_by_reg, get_body
|
4
|
-
|
5
|
-
if __name__ == '__main__':
|
6
|
-
p = get_all_packets_by_reg(rdpcap("t1.pcap"))
|
7
|
-
for packet in p:
|
8
|
-
print( packet['req_text'])
|
9
|
-
print(get_body(packet,is_req=True))
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|
File without changes
|