xbase-util 0.6.9__tar.gz → 0.7.1__tar.gz

Sign up to get free protection for your applications and to get access to all the features.
Files changed (35) hide show
  1. {xbase_util-0.6.9 → xbase_util-0.7.1}/PKG-INFO +1 -1
  2. {xbase_util-0.6.9 → xbase_util-0.7.1}/setup.py +1 -1
  3. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/packet_util.py +31 -30
  4. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/xbase_constant.py +2 -2
  5. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util.egg-info/PKG-INFO +1 -1
  6. {xbase_util-0.6.9 → xbase_util-0.7.1}/README.md +0 -0
  7. {xbase_util-0.6.9 → xbase_util-0.7.1}/setup.cfg +0 -0
  8. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/__init__.py +0 -0
  9. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/add_column_util.py +0 -0
  10. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/dangerous_util.py +0 -0
  11. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/__init__.py +0 -0
  12. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/bean/ConfigBean.py +0 -0
  13. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/bean/CurrentConfigBean.py +0 -0
  14. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/bean/FlowBean.py +0 -0
  15. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/bean/TaskTemplateBean.py +0 -0
  16. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/bean/__init__.py +0 -0
  17. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/dao/ConfigDao.py +0 -0
  18. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/dao/CurrentConfigDao.py +0 -0
  19. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/dao/FlowDao.py +0 -0
  20. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/dao/TaskTemplateDao.py +0 -0
  21. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/dao/__init__.py +0 -0
  22. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/db/initsqlite3.py +0 -0
  23. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/es_db_util.py +0 -0
  24. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/esreq.py +0 -0
  25. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/geo_util.py +0 -0
  26. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/handle_features_util.py +0 -0
  27. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/pcap_util.py +0 -0
  28. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/segment.py +0 -0
  29. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util/xbase_util.py +0 -0
  30. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util.egg-info/SOURCES.txt +0 -0
  31. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util.egg-info/dependency_links.txt +0 -0
  32. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util.egg-info/not-zip-safe +0 -0
  33. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util.egg-info/top_level.txt +0 -0
  34. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util_assets/GeoLite2-City.mmdb +0 -0
  35. {xbase_util-0.6.9 → xbase_util-0.7.1}/xbase_util_assets/arkimeparse.js +0 -0
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: xbase_util
3
- Version: 0.6.9
3
+ Version: 0.7.1
4
4
  Summary: 网络安全基础工具
5
5
  Home-page: https://gitee.com/jimonik/xbase_util.git
6
6
  Author: xyt
@@ -3,7 +3,7 @@ from distutils.core import setup
3
3
  from setuptools import find_packages
4
4
 
5
5
  setup(name="xbase_util",
6
- version="0.6.9",
6
+ version="0.7.1",
7
7
  description="网络安全基础工具",
8
8
  long_description="包含提取,预测,训练的基础工具",
9
9
  author="xyt",
@@ -22,6 +22,7 @@ def content_type_is_plain(packet):
22
22
  if ":" not in item:
23
23
  continue
24
24
  content_type = item.split(":")[1].replace("\r", "").strip()
25
+ print(content_type)
25
26
  return content_type in plain_content_type_columns
26
27
  return False
27
28
 
@@ -71,34 +72,34 @@ http_req_path = re.compile(r"(?:GET|POST|HEAD|PUT|DELETE|OPTIONS|PATCH)\s+(\/[^\
71
72
  res_status_code_pattern = re.compile(r"HTTP\/\d\.\d\s+(\d{3})\s+.*")
72
73
 
73
74
 
74
- def get_all_packets_by_reg(packets):
75
- http_Req_Raw = {}
76
- http_methods = ("POST /", "PUT /", "OPTIONS /", "DELETE /", "GET /")
77
- for packet in packets:
78
- if TCP in packet and Raw in packet:
79
- data = packet[Raw].load
80
- ack = packet[TCP].ack
81
- next_ack = packet[TCP].seq + len(data)
82
- if ack not in http_Req_Raw:
83
- http_Req_Raw[ack] = {"time": [float(packet.time)], "data": data, "next_ack": next_ack}
84
- else:
85
- http_Req_Raw[ack]["time"].append(float(packet.time))
86
- http_Req_Raw[ack]["data"] += data
87
- http_Req_Raw[ack]["next_ack"] = next_ack
88
- packet_list = [
89
- {
90
- 'req_data': item['data'],
91
- 'res_data': http_Req_Raw[item['next_ack']]['data'],
92
- 'req_text': filter_visible_chars(item['data']),
93
- 'res_text': filter_visible_chars(http_Req_Raw[item['next_ack']]['data']),
94
- 'req_time': item['time'],
95
- 'res_time': http_Req_Raw[item['next_ack']]['time']
96
- }
97
- for ack, item in http_Req_Raw.items()
98
- if item['next_ack'] in http_Req_Raw # 检查 next_ack 是否存在
99
- and any(method in filter_visible_chars(item['data']) for method in http_methods)
100
- ]
101
- return packet_list
75
+ # def get_all_packets_by_reg(packets):
76
+ # http_Req_Raw = {}
77
+ # http_methods = ("POST /", "PUT /", "OPTIONS /", "DELETE /", "GET /")
78
+ # for packet in packets:
79
+ # if TCP in packet and Raw in packet:
80
+ # data = packet[Raw].load
81
+ # ack = packet[TCP].ack
82
+ # next_ack = packet[TCP].seq + len(data)
83
+ # if ack not in http_Req_Raw:
84
+ # http_Req_Raw[ack] = {"time": [float(packet.time)], "data": data, "next_ack": next_ack}
85
+ # else:
86
+ # http_Req_Raw[ack]["time"].append(float(packet.time))
87
+ # http_Req_Raw[ack]["data"] += data
88
+ # http_Req_Raw[ack]["next_ack"] = next_ack
89
+ # packet_list = [
90
+ # {
91
+ # 'req_data': item['data'],
92
+ # 'res_data': http_Req_Raw[item['next_ack']]['data'],
93
+ # 'req_text': filter_visible_chars(item['data']),
94
+ # 'res_text': filter_visible_chars(http_Req_Raw[item['next_ack']]['data']),
95
+ # 'req_time': item['time'],
96
+ # 'res_time': http_Req_Raw[item['next_ack']]['time']
97
+ # }
98
+ # for ack, item in http_Req_Raw.items()
99
+ # if item['next_ack'] in http_Req_Raw # 检查 next_ack 是否存在
100
+ # and any(method in filter_visible_chars(item['data']) for method in http_methods)
101
+ # ]
102
+ # return packet_list
102
103
 
103
104
 
104
105
  def get_header_value(header_set, value):
@@ -139,9 +140,9 @@ def get_detail_by_package(publicField, req_header, req_body, res_header, res_bod
139
140
  res_field['plain_body_src'] = ""
140
141
  res_field['plain_body_dst'] = ""
141
142
  if content_type_is_plain(req_header):
142
- res_field['plain_body_src'] = req_body
143
+ res_field['plain_body_src'] = f"{req_body}"
143
144
  if content_type_is_plain(res_header):
144
- res_field['plain_body_dst'] = res_body
145
+ res_field['plain_body_dst'] = f"{res_body}"
145
146
 
146
147
  http_server_version_res = http_version.findall(res_header)
147
148
  res_field['http.serverVersion'] = http_server_version_res[0] if len(http_server_version_res) > 0 else ""
@@ -223,14 +223,14 @@ regex_patterns = {
223
223
  re.IGNORECASE)
224
224
  }
225
225
  # 可见的content-type值
226
- plain_content_type_columns = ['text/json;charset=gbk',
226
+ plain_content_type_columns = ['text/json;charset=gbk','text/javascript','text/css','text/html;charset=gb2312',
227
227
  'application/xml;charset=gbk', 'application/xml;charset=utf_8', 'application/tlt_notify',
228
228
  'application/json;charset=gbk', 'text/xml;charset=utf_8', 'application/json',
229
229
  'text/csv;charset=utf_8', 'application/json;charse=utf_8',
230
230
  'application/soap+xml;charset=utf_8;action="urn:dopricetaxseparated"',
231
231
  'text/xml;charset=gbk', 'text/xml', 'application/x_cm_json;charset=utf_8',
232
232
  'application/xml;tz=utc', 'text/xml;charset="utf_8"', 'application/x_java_archive',
233
- 'application/msword', 'image/png', 'application/xml',
233
+ 'application/msword', 'application/xml',
234
234
  'application/x_stapler_method_invocation;charset=utf_8', 'text/plain;charset=iso_8859_1',
235
235
  'application/x_www_form_urlencoded;charset=utf_8', 'text/plain;charset=gbk',
236
236
  'application/octet_stream;charset=utf_8', 'application/x_tika_ooxml',
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: xbase-util
3
- Version: 0.6.9
3
+ Version: 0.7.1
4
4
  Summary: 网络安全基础工具
5
5
  Home-page: https://gitee.com/jimonik/xbase_util.git
6
6
  Author: xyt
File without changes
File without changes