109 lines
3.5 KiB
Python
109 lines
3.5 KiB
Python
|
#!/usr/bin/env python3
|
||
|
|
# -*- coding: utf-8 -*-
|
||
|
|
|
||
|
|
import subprocess as sp
|
||
|
|
from app.utils import terminate_process, read_config
|
||
|
|
from os import mkdir, path
|
||
|
|
from flask import send_file, jsonify
|
||
|
|
import datetime
|
||
|
|
import shutil
|
||
|
|
import random
|
||
|
|
import sys
|
||
|
|
import re
|
||
|
|
|
||
|
|
|
||
|
|
class Capture(object):
|
||
|
|
|
||
|
|
def __init__(self):
|
||
|
|
self.working_dir = False
|
||
|
|
self.capture_token = False
|
||
|
|
self.random_choice_alphabet = "ABCDEF1234567890"
|
||
|
|
|
||
|
|
def start_capture(self):
|
||
|
|
"""
|
||
|
|
Start a tshark capture on the created AP interface and save
|
||
|
|
it in a temporary directory under /tmp/.
|
||
|
|
|
||
|
|
:return: dict containing capture token and status.
|
||
|
|
"""
|
||
|
|
|
||
|
|
# Kill potential tshark zombies instances, if any.
|
||
|
|
terminate_process("tshark")
|
||
|
|
|
||
|
|
# Few context variable assignment
|
||
|
|
self.capture_token = "".join(
|
||
|
|
[random.choice(self.random_choice_alphabet) for i in range(8)])
|
||
|
|
self.working_dir = "/tmp/{}/".format(self.capture_token)
|
||
|
|
self.pcap = self.working_dir + "capture.pcap"
|
||
|
|
self.iface = read_config(("network", "in"))
|
||
|
|
|
||
|
|
# For packets monitoring
|
||
|
|
self.list_pkts = []
|
||
|
|
self.last_pkts = 0
|
||
|
|
|
||
|
|
# Make the capture directory
|
||
|
|
mkdir(self.working_dir)
|
||
|
|
|
||
|
|
try:
|
||
|
|
sp.Popen(
|
||
|
|
"tshark -i {} -w {} -f \"tcp or udp\" ".format(self.iface, self.pcap), shell=True)
|
||
|
|
return {"status": True,
|
||
|
|
"message": "Capture started",
|
||
|
|
"capture_token": self.capture_token}
|
||
|
|
except:
|
||
|
|
return {"status": False,
|
||
|
|
"message": "Unexpected error: %s" % sys.exc_info()[0]}
|
||
|
|
|
||
|
|
def get_capture_stats(self):
|
||
|
|
"""
|
||
|
|
Get some dirty capture statistics in order to have a sparkline
|
||
|
|
in the background of capture view.
|
||
|
|
|
||
|
|
:return: dict containing stats associated to the capture
|
||
|
|
"""
|
||
|
|
with open("/sys/class/net/{}/statistics/tx_packets".format(self.iface)) as f:
|
||
|
|
tx_pkts = int(f.read())
|
||
|
|
with open("/sys/class/net/{}/statistics/rx_packets".format(self.iface)) as f:
|
||
|
|
rx_pkts = int(f.read())
|
||
|
|
|
||
|
|
if self.last_pkts == 0:
|
||
|
|
self.last_pkts = tx_pkts + rx_pkts
|
||
|
|
return {"status": True,
|
||
|
|
"packets": [0*400]}
|
||
|
|
else:
|
||
|
|
curr_pkts = (tx_pkts + rx_pkts) - self.last_pkts
|
||
|
|
self.last_pkts = tx_pkts + rx_pkts
|
||
|
|
self.list_pkts.append(curr_pkts)
|
||
|
|
return {"status": True,
|
||
|
|
"packets": self.beautify_stats(self.list_pkts)}
|
||
|
|
|
||
|
|
@staticmethod
|
||
|
|
def beautify_stats(data):
|
||
|
|
"""
|
||
|
|
Add 0 at the end of the array if the len of the array is less
|
||
|
|
than max_len. Else, get the last 100 stats. This allows to
|
||
|
|
show a kind of "progressive chart" in the background for
|
||
|
|
the first packets.
|
||
|
|
|
||
|
|
:return: a list of integers.
|
||
|
|
"""
|
||
|
|
max_len = 400
|
||
|
|
if len(data) >= max_len:
|
||
|
|
return data[-max_len:]
|
||
|
|
else:
|
||
|
|
return data + [1] * (max_len - len(data))
|
||
|
|
|
||
|
|
def stop_capture(self):
|
||
|
|
"""
|
||
|
|
Stoping tshark if any instance present.
|
||
|
|
:return: dict as a small confirmation.
|
||
|
|
"""
|
||
|
|
|
||
|
|
# Kill instance of tshark if any.
|
||
|
|
if terminate_process("tshark"):
|
||
|
|
return {"status": True,
|
||
|
|
"message": "Capture stopped"}
|
||
|
|
else:
|
||
|
|
return {"status": False,
|
||
|
|
"message": "No active capture"}
|