C# 클래스 SessionViewer.PacketReconstructor

Attempt to try and reconstruct the data portion of a TCP session. We will try and handle duplicates, TCP fragments, and out of order packets in a smart way.
상속: IDisposable
파일 보기 프로젝트 열기: woanware/SessionViewer 1 사용 예제들

공개 메소드들

메소드 설명
AddPacketProcessor ( InterfacePacketParser processor ) : void

Dispose ( ) : void

PacketReconstructor ( string outputPath, long maxSize ) : System

ReassemblePacket ( PcapDotNet packet ) : void

The main function of the class receives a tcp packet and reconstructs the stream

SetPacketParsers ( List parsers ) : void

비공개 메소드들

메소드 설명
CheckFragments ( long net_src, long net_dst, uint srcport, uint dstport, int index, System.DateTime timestamp, uint acknowledged ) : bool

Search through all the frag we have collected to see if one fits

ReassembleTcp ( ulong sequence, uint acknowledgement, ulong length, byte data, ulong data_length, bool synflag, long net_src, long net_dst, uint srcport, uint dstport, System.DateTime timestamp ) : void

Reconstructs the tcp session

ReassembleUdp ( ulong length, byte data, ulong data_length, long net_src, long net_dst, uint srcport, uint dstport, System.DateTime timestamp ) : int

Reconstructs the tcp session

Reset ( ) : void

Cleans the linked list

SavePacketData ( long net_src, long net_dst, uint srcport, uint dstport, int index, byte data, System.DateTime timestamp ) : void

Writes the payload data to the database

메소드 상세

AddPacketProcessor() 공개 메소드

public AddPacketProcessor ( InterfacePacketParser processor ) : void
processor InterfacePacketParser
리턴 void

Dispose() 공개 메소드

public Dispose ( ) : void
리턴 void

PacketReconstructor() 공개 메소드

public PacketReconstructor ( string outputPath, long maxSize ) : System
outputPath string
maxSize long
리턴 System

ReassemblePacket() 공개 메소드

The main function of the class receives a tcp packet and reconstructs the stream
public ReassemblePacket ( PcapDotNet packet ) : void
packet PcapDotNet
리턴 void

SetPacketParsers() 공개 메소드

public SetPacketParsers ( List parsers ) : void
parsers List
리턴 void