Net::Analysis::Packet - wrapper for our own view of a packet.


Net-Analysis documentation Contained in the Net-Analysis distribution.

Index


Code Index:

NAME

Top

Net::Analysis::Packet - wrapper for our own view of a packet.

SYNOPSIS

Top

  use Net::Analysis::Packet qw(:pktslots :func);

  my $p = [...]; # See code in Net::Analysis::EventLoop
  pkt_init($p);

  my $packet_data = $p->[PKT_SLOT_DATA];

  print "My packet:-\n".pkt_as_string($p);
  print "Pretty hex dump of payload:-\n".pkt_as_string($p,'verbose');

  my $net_analysis_time = pkt_time($pkt);

DESCRIPTION

Top

Internal module for abstracting the underlying packet representation.

It is just an array, not an object; there is no OO magic at all. You can use the following constants to exctract these fields from the array:

 PKT_SLOT_TO         - ip:port (e.g. "192.0.0.200:8080")
 PKT_SLOT_FROM       - ip:port (e.g. "10.0.0.1:13211")
 PKT_SLOT_FLAGS      - byte of TCP flags (see Net::Analysis::Constants)
 PKT_SLOT_DATA       - packet payload (may be empty)
 PKT_SLOT_SEQNUM     - the SEQ number of the packet
 PKT_SLOT_ACKNUM     - the ACK number of the packet
 PKT_SLOT_PKT_NUMBER - packets are numbered from zero as we read them in
 PKT_SLOT_SOCKETPAIR_KEY -  the unique key for the TCP session

FUNCTIONS

Top

pkt_init ($p)

Does some setup on the bare data passed in; mostly creating a time object.

pkt_time ($p)

Returns the Net::Analysis::Time object associated with the packet.

SEE ALSO

Top

Net::Analysis, Net::Analysis::EventLoop, Net::Analysis::Time, Net::Analysis::Constants.

AUTHOR

Top

Adam B. Worrall, <worrall@cpan.org>

COPYRIGHT AND LICENSE

Top


Net-Analysis documentation Contained in the Net-Analysis distribution.

package Net::Analysis::Packet;

use 5.008000;
our $VERSION = '0.03';
use strict;
use warnings;
use Carp qw(carp cluck);
use POSIX qw(strftime);

# {{{ Exported boilerplate

require Exporter;

our @ISA = qw(Exporter);

our @PKT_SLOT_CONSTS = qw(PKT_SLOT_TO
                          PKT_SLOT_FROM
                          PKT_SLOT_FLAGS
                          PKT_SLOT_DATA
                          PKT_SLOT_SEQNUM
                          PKT_SLOT_ACKNUM
                          PKT_SLOT_PKT_NUMBER
                          PKT_SLOT_TV_SEC
                          PKT_SLOT_TV_USEC
                          PKT_SLOT_SOCKETPAIR_KEY
                          PKT_SLOT_CLASS
                          );

our @PKT_FUNCTIONS = qw(pkt_time pkt_init pkt_as_string pkt_class);

our @EXPORT    = ();
our @EXPORT_OK = (@PKT_SLOT_CONSTS, @PKT_FUNCTIONS);
our %EXPORT_TAGS = (all      => [ @EXPORT, @EXPORT_OK ],
                    pktslots => [ @PKT_SLOT_CONSTS ],
                    func     => [ @PKT_FUNCTIONS],
                   );

# }}}

use Net::Analysis::Constants qw(:tcpflags :packetclasses);
use Net::Analysis::Time;

use Data::Dumper;

use constant {
    PKT_SLOT_TO              => 0,
    PKT_SLOT_FROM            => 1,
    PKT_SLOT_FLAGS           => 2,
    PKT_SLOT_DATA            => 3,
    PKT_SLOT_SEQNUM          => 4,
    PKT_SLOT_ACKNUM          => 5,
    PKT_SLOT_PKT_NUMBER      => 6,
    PKT_SLOT_TV_SEC          => 7,
    PKT_SLOT_TV_USEC         => 8,
    PKT_SLOT_TIME            => 9,
    PKT_SLOT_SOCKETPAIR_KEY  => 10,
    PKT_SLOT_CLASS           => 11,
};

#### Public methods
#
# {{{ pkt_time

sub pkt_time {
    my $pkt = shift;
    return $pkt->[PKT_SLOT_TIME];
}

# }}}
# {{{ pkt_init

sub pkt_init {
    my $pkt = shift;
    $pkt->[PKT_SLOT_CLASS] = PKT_NOCLASS;
    $pkt->[PKT_SLOT_SOCKETPAIR_KEY] = join('-', sort
                                           ($pkt->[PKT_SLOT_FROM],
                                            $pkt->[PKT_SLOT_TO]));

    $pkt->[PKT_SLOT_TIME] = Net::Analysis::Time->new
        ($pkt->[PKT_SLOT_TV_SEC], $pkt->[PKT_SLOT_TV_USEC]);

    return $pkt;
}

# }}}
# {{{ pkt_class

sub pkt_class {
    my ($self, $new) = @_;

    $self->[PKT_SLOT_CLASS] = $new if (defined $new);

    return $self->[PKT_SLOT_CLASS];
}

# }}}
# {{{ pkt_as_string

sub pkt_as_string {
    my ($self, $v) = @_;

    #cluck ("I was invoked :(");
    #exit;

    carp "bad pkt !\n" if (!exists $self->[PKT_SLOT_PKT_NUMBER]);

    my $flags = '';
    $flags .= 'F' if ($self->[PKT_SLOT_FLAGS] & FIN);
    $flags .= 'S' if ($self->[PKT_SLOT_FLAGS] & SYN);
    $flags .= 'A' if ($self->[PKT_SLOT_FLAGS] & ACK);
    $flags .= 'R' if ($self->[PKT_SLOT_FLAGS] & RST);
    $flags .= 'P' if ($self->[PKT_SLOT_FLAGS] & PSH);
    $flags .= 'U' if ($self->[PKT_SLOT_FLAGS] & URG);
    $flags .= '.' if ($flags eq '');

    my $p_time = pkt_time($self);

    my $time = ($p_time) ? $p_time->as_string('time') : "--";

    my $str = sprintf ("(% 3d $time %s-%s) ",
                       $self->[PKT_SLOT_PKT_NUMBER],
                       $self->[PKT_SLOT_FROM],
                       $self->[PKT_SLOT_TO]);

    # Show which class we have assigned to the packet
    $str .= {PKT_NOCLASS,     '-',
             PKT_NONDATA,     '_',
             PKT_DATA,        '*',
             PKT_DUP_DATA,    'p',
             PKT_FUTURE_DATA, 'f'}->{$self->[PKT_SLOT_CLASS]} || '?';

    $str .= sprintf ("%-6s ", "$flags");

    $str .= "SEQ:".$self->[PKT_SLOT_SEQNUM]." ACK:".$self->[PKT_SLOT_ACKNUM].
        " ".length($self->[PKT_SLOT_DATA])."b";

    if ($v) { # Get all verbose
        $str .= "\n"._hex_dump ($self->[PKT_SLOT_DATA]);
    }

    return $str;
}

# }}}

#### Private helpers
#
# {{{ _hex_dump

sub _hex_dump {
    my ($binary, $prefix) = @_;

    $prefix ||= '';
    my $hex = $prefix.unpack("H*", $binary);

    $hex =~ s {([0-9a-f]{2}(?! ))}     { $1}mg;

    $hex =~ s {(( [0-9a-f]{2}){16})}
                            {"$1   ".safe_raw_line($1)."\n"}emg;

    # Unfinished last line
    $hex =~ s {(( [0-9a-f]{2})*)$}
                            {sprintf("%-47.47s    ",$1) .safe_raw_line($1)."\n"}es;

    chomp($hex);
    return $hex."\n";
}

sub safe_raw_line {
    my ($s) = @_;
    $s =~ s {\s+} {}mg;

    my $raw = pack("H*", $s);
    $raw =~ s {([^\x20-\x7e])} {.}g;
    return "{$raw}";
}

# }}}

1;
__END__
# {{{ POD

# }}}

# {{{ -------------------------={ E N D }=----------------------------------

# Local variables:
# folded-file: t
# end:

# }}}