src/main/java/in/ac/bits/protocolanalyzer/analyzer/link/EthernetAnalyzer.java
package in.ac.bits.protocolanalyzer.analyzer.link;
import com.google.common.eventbus.EventBus;
import com.google.common.eventbus.Subscribe;
import in.ac.bits.protocolanalyzer.analyzer.CustomAnalyzer;
import in.ac.bits.protocolanalyzer.analyzer.PacketWrapper;
import in.ac.bits.protocolanalyzer.analyzer.event.PacketTypeDetectionEvent;
import in.ac.bits.protocolanalyzer.persistence.entity.EthernetEntity;
import in.ac.bits.protocolanalyzer.persistence.repository.AnalysisRepository;
import in.ac.bits.protocolanalyzer.protocol.Protocol;
import in.ac.bits.protocolanalyzer.utils.Beautify;
import in.ac.bits.protocolanalyzer.utils.BitOperator;
import java.lang.String;
import java.util.Arrays;
import org.pcap4j.packet.Packet;
import org.springframework.context.annotation.Scope;
import org.springframework.data.elasticsearch.core.query.IndexQuery;
import org.springframework.data.elasticsearch.core.query.IndexQueryBuilder;
import org.springframework.stereotype.Component;
@Component
@Scope("prototype")
public class EthernetAnalyzer implements CustomAnalyzer {
private byte[] ethernetHeader;
private String indexName;
private AnalysisRepository repository;
private int startByte;
private int endByte;
private EventBus eventBus;
public void configure(EventBus eventBus, AnalysisRepository repository, String sessionName) {
this.eventBus = eventBus;
this.eventBus.register(this);
this.repository = repository;
this.indexName = "protocol_" + sessionName;
}
private void setEthernetHeader(PacketWrapper packetWrapper) {
Packet packet = packetWrapper.getPacket();
int startByte = packetWrapper.getStartByte();
byte[] rawPacket = packet.getRawData();
this.ethernetHeader = Arrays.copyOfRange(rawPacket, startByte, startByte + EthernetHeader.TOTAL_HEADER_LENGTH);
}
public void setStartByte(PacketWrapper packetWrapper) {
this.startByte = packetWrapper.getStartByte() + EthernetHeader.TOTAL_HEADER_LENGTH;
}
public void setEndByte(PacketWrapper packetWrapper) {
this.endByte = packetWrapper.getEndByte();
}
public void publishTypeDetectionEvent(String nextPacketType, int startByte, int endByte) {
this.eventBus.post(new PacketTypeDetectionEvent(nextPacketType, startByte, endByte));
}
public String getDst_addr(byte[] ethernetHeader) {
byte[] dst_addr = BitOperator.parse(ethernetHeader, EthernetHeader.DST_ADDR_START_BIT, EthernetHeader.DST_ADDR_END_BIT);
return Beautify.beautify(dst_addr, "hex2");
}
public String getSrc_addr(byte[] ethernetHeader) {
byte[] src_addr = BitOperator.parse(ethernetHeader, EthernetHeader.SRC_ADDR_START_BIT, EthernetHeader.SRC_ADDR_END_BIT);
return Beautify.beautify(src_addr, "hex2");
}
public String getEthertype(byte[] ethernetHeader) {
byte[] ethertype = BitOperator.parse(ethernetHeader, EthernetHeader.ETHERTYPE_START_BIT, EthernetHeader.ETHERTYPE_END_BIT);
return Beautify.beautify(ethertype, "hex");
}
@Subscribe
public void analyze(PacketWrapper packetWrapper) {
if (Protocol.get("ETHERNET").equalsIgnoreCase(packetWrapper.getPacketType())) {
setEthernetHeader(packetWrapper);
String nextPacketType = setNextProtocolType();
setStartByte(packetWrapper);
setEndByte(packetWrapper);
publishTypeDetectionEvent(nextPacketType, startByte, endByte);
EthernetEntity entity = new EthernetEntity();
entity.setPacketId(packetWrapper.getPacketId());
entity.setEthertype(getEthertype(ethernetHeader));
entity.setDst_addr(getDst_addr(ethernetHeader));
entity.setSrc_addr(getSrc_addr(ethernetHeader));
IndexQueryBuilder builder = new IndexQueryBuilder();
IndexQuery query = builder.withIndexName(this.indexName).withType("ethernet").withId(String.valueOf(packetWrapper.getPacketId())).withObject(entity).build();
repository.save(query);
}
}
public String setNextProtocolType() {
String nextHeaderType = getEthertype(this.ethernetHeader);
switch(nextHeaderType) {
case "86dd": return Protocol.get("IPV6");
case "0800": return Protocol.get("IPV4");
default: return Protocol.get("END_PROTOCOL");
}
}
}