2018-07-23 10:44:30 -06:00
|
|
|
package netshovel
|
2018-07-22 22:25:34 -06:00
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
|
|
|
"io"
|
|
|
|
"log"
|
|
|
|
"strings"
|
|
|
|
"time"
|
|
|
|
"github.com/dirtbags/netshovel/gapstring"
|
|
|
|
"github.com/google/gopacket"
|
|
|
|
"github.com/google/gopacket/tcpassembly"
|
|
|
|
)
|
|
|
|
|
|
|
|
type WriteAtCloser interface {
|
|
|
|
io.WriterAt
|
|
|
|
io.WriteCloser
|
|
|
|
}
|
|
|
|
|
|
|
|
type Utterance struct {
|
|
|
|
When time.Time
|
|
|
|
Data gapstring.GapString
|
|
|
|
}
|
|
|
|
|
|
|
|
type Stream struct {
|
|
|
|
Net, Transport gopacket.Flow
|
|
|
|
conversation chan Utterance
|
|
|
|
pending Utterance
|
|
|
|
}
|
|
|
|
|
2018-07-23 15:34:22 -06:00
|
|
|
func NewStream(net, transport gopacket.Flow) Stream {
|
|
|
|
return Stream{
|
2018-07-22 22:25:34 -06:00
|
|
|
Net: net,
|
|
|
|
Transport: transport,
|
|
|
|
conversation: make(chan Utterance, 100),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func (stream *Stream) Reassembled(rs []tcpassembly.Reassembly) {
|
|
|
|
// XXX: How do we send timestamps?
|
|
|
|
ret := Utterance{
|
|
|
|
When: rs[0].Seen,
|
|
|
|
}
|
|
|
|
for _, r := range rs {
|
|
|
|
if r.Skip > 0 {
|
|
|
|
ret.Data = ret.Data.AppendGap(r.Skip)
|
|
|
|
}
|
|
|
|
ret.Data = ret.Data.AppendBytes(r.Bytes)
|
|
|
|
}
|
|
|
|
|
|
|
|
// Throw away utterances with no data (SYN, ACK, FIN, &c)
|
|
|
|
if ret.Data.Length() > 0 {
|
|
|
|
stream.conversation <- ret
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func (stream *Stream) ReassemblyComplete() {
|
|
|
|
close(stream.conversation)
|
|
|
|
}
|
|
|
|
|
|
|
|
func (stream *Stream) Read(length int) (Utterance, error) {
|
|
|
|
if length > 0x100000 {
|
|
|
|
log.Fatalf("FATAL: Trying to read 0x%x octets", length)
|
|
|
|
}
|
|
|
|
|
|
|
|
// Special case: length=-1 means "give me the next utterance"
|
|
|
|
if length == -1 {
|
|
|
|
if stream.pending.Data.Length() > 0 {
|
|
|
|
ret := stream.pending
|
|
|
|
stream.pending.Data = gapstring.GapString{}
|
|
|
|
return ret, nil
|
|
|
|
} else {
|
|
|
|
ret, more := <- stream.conversation
|
|
|
|
if ! more {
|
|
|
|
return ret, io.EOF
|
|
|
|
}
|
|
|
|
return ret, nil
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Pull in utterances until we have enough data.
|
|
|
|
// .When will always be the timestamp on the last received utterance
|
|
|
|
for stream.pending.Data.Length() < length {
|
|
|
|
u, more := <- stream.conversation
|
|
|
|
if ! more {
|
|
|
|
break
|
|
|
|
}
|
|
|
|
stream.pending.Data = stream.pending.Data.Append(u.Data)
|
|
|
|
stream.pending.When = u.When
|
|
|
|
}
|
|
|
|
|
|
|
|
// If we got nothing, it's the end of the stream
|
|
|
|
if stream.pending.Data.Length() == 0 {
|
|
|
|
return Utterance{}, io.EOF
|
|
|
|
}
|
|
|
|
|
|
|
|
ret := Utterance{
|
|
|
|
Data: stream.pending.Data.Slice(0, length),
|
|
|
|
When: stream.pending.When,
|
|
|
|
}
|
|
|
|
stream.pending.Data = stream.pending.Data.Slice(length, stream.pending.Data.Length())
|
|
|
|
return ret, nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func (stream *Stream) Describe(pkt Packet) string {
|
|
|
|
out := new(strings.Builder)
|
|
|
|
|
2018-07-23 09:58:31 -06:00
|
|
|
fmt.Fprintf(out, "%v:%v → %v:%v\n",
|
|
|
|
stream.Net.Src().String(), stream.Transport.Src().String(),
|
2018-07-23 10:44:30 -06:00
|
|
|
stream.Net.Dst().String(), stream.Transport.Dst().String(),
|
2018-07-23 09:58:31 -06:00
|
|
|
)
|
2018-07-23 10:44:30 -06:00
|
|
|
out.WriteString(pkt.Describe())
|
2018-07-22 22:25:34 -06:00
|
|
|
return out.String()
|
|
|
|
}
|