-
Notifications
You must be signed in to change notification settings - Fork 29
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
2、整体代码优化
- Loading branch information
Showing
21 changed files
with
329 additions
and
338 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,34 @@ | ||
| using System.Windows.Forms; | ||
|
|
||
| namespace YgAndroidQQSniffer.Component | ||
| { | ||
| public class PacketLogLVI | ||
| { | ||
| public string Index { get; set; } | ||
| public string Orientation { get; set; } | ||
| public string SrcIp { get; set; } | ||
| public string DstIp { get; set; } | ||
| public string CaptureTime { get; set; } | ||
| public string PayloadLen { get; set; } | ||
| public string PayloadData { get; set; } | ||
| public object Tag { get; set; } | ||
|
|
||
| public ListViewItem BuildLVI() | ||
| { | ||
| return new ListViewItem() | ||
| { | ||
| Text = Index, | ||
| SubItems = | ||
| { | ||
| Orientation, | ||
| SrcIp, | ||
| DstIp, | ||
| CaptureTime, | ||
| PayloadLen, | ||
| PayloadData | ||
| }, | ||
| Tag = Tag | ||
| }; | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,164 @@ | ||
| using DotNetty.Buffers; | ||
| using DotNetty.Common.Utilities; | ||
| using NLog; | ||
| using PacketDotNet; | ||
| using System; | ||
| using System.Collections; | ||
| using System.Drawing; | ||
| using System.Net; | ||
| using System.Threading; | ||
| using System.Windows.Forms; | ||
| using static System.Collections.StructuralComparisons; | ||
|
|
||
| namespace YgAndroidQQSniffer.Component | ||
| { | ||
| public class RealTimePacketsAnalyzer | ||
| { | ||
| public string MatchedSrcIp { get; private set; } | ||
| public string MatchedDstIp { get; private set; } | ||
| public string MatchedSrcPort { get; private set; } | ||
| public string MatchedDstPort { get; private set; } | ||
| private IByteBuffer MatchedPayloadBuf { get; set; } | ||
|
|
||
| private readonly byte[] ZERO_BYTES = { 0 }; | ||
| private static FormMain Frm => FormMain.Form; | ||
| private static Logger Logger { get; } = LogManager.GetCurrentClassLogger(); | ||
|
|
||
| public void ProcessPackets(TcpPacket tcpPacket) | ||
| { | ||
| IPPacket ipPacket = (IPPacket)tcpPacket.ParentPacket; | ||
| IPAddress srcIp = ipPacket.SourceAddress; | ||
| IPAddress dstIp = ipPacket.DestinationAddress; | ||
| int srcPort = tcpPacket.SourcePort; | ||
| int dstPort = tcpPacket.DestinationPort; | ||
|
|
||
| if (tcpPacket.PayloadData.Length == 0 || tcpPacket.PayloadData == ZERO_BYTES) return; | ||
|
|
||
| if (MatchedDstIp == null) | ||
| { | ||
| //首次捕获 | ||
| IByteBuffer buf = Unpooled.WrappedBuffer(tcpPacket.PayloadData); | ||
| try | ||
| { | ||
| if (IsAndroidQQProtocol(buf)) | ||
| { | ||
| MatchedPayloadBuf.WriteBytes(tcpPacket.PayloadData); | ||
| MatchedSrcIp = srcIp.ToString(); | ||
| MatchedDstIp = dstIp.ToString(); | ||
| MatchedSrcPort = srcPort.ToString(); | ||
| MatchedDstPort = dstPort.ToString(); | ||
| } | ||
| } | ||
| finally | ||
| { | ||
| buf.SafeRelease(); | ||
| } | ||
| } | ||
| else | ||
| { | ||
| if (srcIp.ToString() == MatchedDstIp || dstIp.ToString() == MatchedDstIp) | ||
| { | ||
| MatchedPayloadBuf.WriteBytes(tcpPacket.PayloadData); | ||
| } | ||
| } | ||
| } | ||
|
|
||
| public void StartAnalysisThread() | ||
| { | ||
| MatchedPayloadBuf = Unpooled.Buffer(); | ||
| new Thread(() => | ||
| { | ||
| while (Frm.Device.Started) | ||
| { | ||
| try | ||
| { | ||
| while (MatchedPayloadBuf.IsReadable()) | ||
| { | ||
| if (IsAndroidQQProtocol(MatchedPayloadBuf)) | ||
| { | ||
| string orientation = (MatchedPayloadBuf.GetInt(MatchedPayloadBuf.ReaderIndex + 9) == 0) ? "Recv" : "Send"; | ||
| int pkg_len = MatchedPayloadBuf.GetInt(MatchedPayloadBuf.ReaderIndex); | ||
| byte[] pkg_payload = new byte[pkg_len]; | ||
| if (MatchedPayloadBuf.ReadableBytes >= pkg_payload.Length) | ||
| { | ||
| MatchedPayloadBuf.ReadBytes(pkg_payload, 0, pkg_payload.Length); | ||
| AppendPacketLogItems(orientation, pkg_payload); | ||
| MatchedPayloadBuf.DiscardReadBytes(); | ||
| } | ||
| } | ||
| else if (MatchedPayloadBuf.ReadableBytes >= 9) | ||
| { | ||
| MatchedPayloadBuf.ReadBytes(9); | ||
| } | ||
| else | ||
| { | ||
| Thread.Sleep(1000); | ||
| } | ||
| } | ||
| } | ||
| catch (Exception ex) | ||
| { | ||
| Logger.Error(ex, ex.Message); | ||
| } | ||
| Thread.Sleep(1000); | ||
| } | ||
| Logger.Info("The analysis thread has stopped."); | ||
| MatchedSrcIp = null; | ||
| MatchedDstIp = null; | ||
| MatchedSrcPort = null; | ||
| MatchedDstPort = null; | ||
| MatchedPayloadBuf.SafeRelease(); | ||
| }).Start(); | ||
| } | ||
|
|
||
| private void AppendPacketLogItems(string orientation, byte[] payload) | ||
| { | ||
| PacketLogLVI pl = new PacketLogLVI() | ||
| { | ||
| Index = (Frm.lv_packet_log.Items.Count + 1).ToString(), | ||
| Orientation = orientation, | ||
|
|
||
| CaptureTime = DateTime.Now.ToString(), | ||
| PayloadLen = payload.Length.ToString(), | ||
| PayloadData = payload.HexDump(), | ||
| Tag = new PacketAnalyzer() { HexPayload = payload.HexDump() } | ||
| }; | ||
| if (orientation == "Send") | ||
| { | ||
| pl.SrcIp = $"{MatchedSrcIp}:{MatchedSrcPort}"; | ||
| pl.DstIp = $"{MatchedDstIp}:{MatchedDstPort}"; | ||
| } | ||
| else | ||
| { | ||
| pl.SrcIp = $"{MatchedDstIp}:{MatchedDstPort}"; | ||
| pl.DstIp = $"{MatchedSrcIp}:{MatchedSrcPort}"; | ||
| } | ||
|
|
||
| Frm.ThreadSafeUpdate(() => | ||
| { | ||
| ListViewItem lv = pl.BuildLVI(); | ||
| lv.ForeColor = orientation == "Send" ? Color.Red : Color.Blue; | ||
| Frm.lv_packet_log.Items.Add(lv); | ||
| }); | ||
| } | ||
|
|
||
| private readonly byte[] ANDROIDQQ_PROTOCOL_MARK1 = { 0x00, 0x00, 0x00, 0x0A, 0x00 }; | ||
| private readonly byte[] ANDROIDQQ_PROTOCOL_MARK2 = { 0x00, 0x00, 0x00, 0x0A, 0x01 }; | ||
| private readonly byte[] ANDROIDQQ_PROTOCOL_MARK3 = { 0x00, 0x00, 0x00, 0x0A, 0x02 }; | ||
| private readonly byte[] ANDROIDQQ_PROTOCOL_MARK4 = { 0x00, 0x00, 0x00, 0x0B, 0x00 }; | ||
| private readonly byte[] ANDROIDQQ_PROTOCOL_MARK5 = { 0x00, 0x00, 0x00, 0x0B, 0x01 }; | ||
| private readonly byte[] ANDROIDQQ_PROTOCOL_MARK6 = { 0x00, 0x00, 0x00, 0x0B, 0x02 }; | ||
| private bool IsAndroidQQProtocol(IByteBuffer buffer) | ||
| { | ||
| if (buffer.ReadableBytes < 9) return false; | ||
| byte[] tag = new byte[5]; | ||
| buffer.GetBytes(buffer.ReaderIndex + 4, tag, 0, 5); | ||
| return ((IStructuralEquatable)tag).Equals(ANDROIDQQ_PROTOCOL_MARK1, StructuralEqualityComparer) || | ||
| ((IStructuralEquatable)tag).Equals(ANDROIDQQ_PROTOCOL_MARK2, StructuralEqualityComparer) || | ||
| ((IStructuralEquatable)tag).Equals(ANDROIDQQ_PROTOCOL_MARK3, StructuralEqualityComparer) || | ||
| ((IStructuralEquatable)tag).Equals(ANDROIDQQ_PROTOCOL_MARK4, StructuralEqualityComparer) || | ||
| ((IStructuralEquatable)tag).Equals(ANDROIDQQ_PROTOCOL_MARK5, StructuralEqualityComparer) || | ||
| ((IStructuralEquatable)tag).Equals(ANDROIDQQ_PROTOCOL_MARK6, StructuralEqualityComparer); | ||
| } | ||
| } | ||
| } |
Oops, something went wrong.