protocols

README

应用层协议处理

Documentation

Index

• func CheckHttpByRequest(data []byte) bool
• func CheckHttpByResponse(data []byte) bool
• func GenerateSessionId(srcIP, dstIP, srcPort, dstPort, protocol string) string
• type Device
  • func ParseMDNS(data []byte, srcIP, srcMac string) Device
• type HTTPData
• type HTTPHandler
  • func (HTTPHandler) HandleData(data []byte, sr StreamReaderInterface) (int, bool)
• type ProtocolHandler
• type ProtocolType
  • func IdentifyProtocol(buffer []byte, srcPort, dstPort string) ProtocolType
• type StreamReaderInterface
• type TLSHandler
  • func (TLSHandler) HandleData(data []byte, reader StreamReaderInterface) (int, bool)

Functions

func CheckHttpByRequest

func CheckHttpByRequest(data []byte) bool

CheckHttpByRequest check 是否是http请求

func CheckHttpByResponse

func CheckHttpByResponse(data []byte) bool

CheckHttpByResponse check 是否是http响应

func GenerateSessionId

func GenerateSessionId(srcIP, dstIP, srcPort, dstPort, protocol string) string

GenerateSessionId 生成五元祖hash

Types

type Device

type Device struct {
	Name        string
	Type        string
	IPv4        string
	IPv6        string
	MAC         string
	Services    string
	Description string // 服务描述（来自 TXT 记录）
}

func ParseMDNS

func ParseMDNS(data []byte, srcIP, srcMac string) Device

ParseMDNS 解析 mDNS 数据包

type HTTPData

type HTTPData struct {
	Method string `bson:"method"`
	URL    string `bson:"url"`
	Host   string `bson:"host"`
}

type HTTPHandler

type HTTPHandler struct {
}

func (HTTPHandler) HandleData

func (HTTPHandler) HandleData(data []byte, sr StreamReaderInterface) (int, bool)

type ProtocolHandler

type ProtocolHandler interface {
	HandleData(data []byte, reader StreamReaderInterface) (int, bool)
}

type ProtocolType

type ProtocolType string

const (
	HTTP    ProtocolType = "http"
	TLS     ProtocolType = "tls"
	DNS     ProtocolType = "dns"
	UNKNOWN ProtocolType = "unknown"
)

func IdentifyProtocol

func IdentifyProtocol(buffer []byte, srcPort, dstPort string) ProtocolType

IdentifyProtocol 识别协议

type StreamReaderInterface

type StreamReaderInterface interface {
	GetIdentifier([]byte) ProtocolType
	GetIdent() bool
	SetUrls(urls string)
	GetUrls() []string
	LockParent()
	UnLockParent()
	SetHttpInfo(host, userAgent, contentType, upgrade string)
	SetTlsInfo(sni, version, cipherSuite string)
	SetApplicationProtocol(applicationProtocol ProtocolType)
}

StreamReaderInterface 流Reader接口

type TLSHandler

type TLSHandler struct{}

func (TLSHandler) HandleData

func (TLSHandler) HandleData(data []byte, reader StreamReaderInterface) (int, bool)