Changeset 150 for trunk/tool/renetcolRC.py

Timestamp:

01/12/11 17:55:54 (12 years ago)

Author:

andreu

Message:

DoS detection update

Files:

• trunk/tool/renetcolRC.py (modified) (8 diffs)

trunk/tool/renetcolRC.py

@@ -48 +48 @@
 collectorPort = 52571  # if you change this port number, apply the
                        # modification on the renetcolSender.h file
-                       # and you'll need a new compilation of the colllector 
+                       # and you'll need a new compilation of the collector 
 ##############################################################################
 
@@ -113 +113 @@
                 ]
 flowCpt = 0
+flowCptW = 0
 mask = [ 0,0,0 ]
 spaceSep = " "
@@ -126 +127 @@
 os_type = 0
 oldTpl = 0
+oldTplW = 0
 fromRouter = ""
 myTimer = None
 myCPT = 1
+rrt = 3600
 
 class InputControl(threading.Thread):
@@ -283 +286 @@
                     strFlow += "\t"
         if (printValue[69]):
-            strFlow += fromRouter
+            strFlow += fromRouter+"\t"+time.strftime("%Y/%m/%d %H:%M", time.gmtime())
         print strFlow
         oldTpl = self.flow[0]
@@ -289 +292 @@
 # flow record
     def write_flow2(self):
-        global printValue, record_file, tpl_def
+        global printValue, record_file, tpl_def, flowCptW, fieldsName, oldTplW, os_type, fromRouter
         myliste = []
+        myTpl = []
+        strFlow = ""
+        strField = ""
+        underscore_line = ""
+        flowCptW+=1
+        if (flowCptW%6 == 0 or oldTplW != self.flow[0]):
+##        if (flowCpt%100 == 0): 
+            flowCptW = 0
+            for i in range (0, len(tpl_def[self.flow[0]])):
+                f = tpl_def[self.flow[0]][i][0]
+                if printValue[f]:
+                    if ( f==27 or f==28 or f==62 or f==63 ):
+                        strField += str(fieldsName[f])
+                        l = len(str(fieldsName[f]))
+                        if ((40-l)%8 == 0):
+                            tabNb = int((40-l)/8)
+                        else:
+                            tabNb = int((40-l)/8) + 1
+                        for j in range (0, tabNb): 
+                            strField += ";"
+                        for k in range (0, 40):
+                            underscore_line += "-"
+                    elif ( f==8 or f==15 or f==12 or f==18 or f==47 ):
+                        strField += str(fieldsName[f])
+                        l = len(str(fieldsName[f]))
+                        if ((16-l)%8 == 0):
+                            tabNb = int((16-l)/8)
+                        else:
+                            tabNb = int((16-l)/8) + 1
+                        for j in range (0, tabNb): 
+                            strField += ";"
+                        for k in range (0, 16):
+                            underscore_line += "-"
+                    else:
+                        strField += str(fieldsName[f])
+                        strField += ";"
+                        for k in range (0, 8):
+                            underscore_line += "-"
+            if (oldTplW != self.flow[0]):
+                record_file.write("")
+            if (os_type == 0):
+                esc = '\x1b['
+                sep = ';'
+                end = 'm'
+                if (printValue[69]):
+                    rt = str(fieldsName[69])
+                    toprint = esc+"37"+sep+"44"+end+strField+rt+esc+"0"+end+"\n"
+                else:
+                    toprint = esc+"37"+sep+"44"+end+strField+esc+"0"+end+"\n"
+                record_file.write(toprint)
+            else:
+                if (printValue[69]):
+                    strField += str(fieldsName[69])
+                if (record_file!=None):
+                    record_file.write(strField)
+                    record_file.write("\n")
+                    record_file.write(underscore_line)
+                    record_file.write("\n")
         for i in range (0, len(tpl_def[self.flow[0]])):
             f = tpl_def[self.flow[0]][i][0]
@@ -300 +361 @@
                 else:
                     myliste += [str(self.flow[1][i])]
-        theflow = string.join(myliste, "\t")+"\t"+fromRouter+"\n"
+        theflow = string.join(myliste, ";")+";"+fromRouter+";"+time.strftime("%Y%m%d%H%M", time.gmtime())+"\n"
         if (record_file!=None):
             record_file.write(theflow)
+            oldTplW = self.flow[0]
         
 class FlowInput:
@@ -483 +545 @@
 
 def timer_action():
-    global record_file, record_file_name, myTimer, myCPT
+    global record_file, record_file_name, myTimer, myCPT, rrt
     myCPT+=1
     myTimer.cancel()
-    my_new_file_name = "%s_%s_%d" % (record_file_name,time.strftime("%Y%m%d", time.gmtime()),myCPT)
+    my_new_file_name = "%s_%s.txt" % (record_file_name,time.strftime("%Y%m%d%H%M", time.gmtime()))
     ##my_new_file_name = "%s_%d" % (record_file_name,myCPT)
     print my_new_file_name
-    new_record_file = file(my_new_file_name, 'w')
+    new_record_file = file(my_new_file_name, 'a+')
     old_record_file = record_file
     record_file = new_record_file
     old_record_file.close()
     now2 = time.time()
-    reste = 300-(operator.mod(now2,300))
-    myTimer = threading.Timer(300.0,timer_action)
+    reste = rrt-(operator.mod(now2,rrt))
+    myTimer = threading.Timer(rrt,timer_action)
     myTimer.start()
 
-def callback_RotRec(widget, data=None):
-    global record, myTimer
-    if ((record == 0) and (widget.get_active() == 1)):
-        info_dialog(widget, None, "You must before activated the record ! ")
-        widget.set_active(0)
-    else:
-        if widget.get_active() == 1:
-            print "STARTING RECORD ROTATION"
-            now2 = time.time()
-            reste = 300-(operator.mod(now2,300))
-            myTimer = threading.Timer(300,timer_action)
-            myTimer.start()
-        if widget.get_active() == 0:
-            myTimer.cancel()
-            print "STOPPING RECORD ROTATION"
+def RotRec():
+    global record, myTimer, rrt
 
 if __name__ == "__main__":
     global comboRouter, os_type, printShit
     global localAddr, localPort
+    global rrt, record, record_file_name
+
+    print ""
+    print ""
+    print ""
+ 
+    print "----------------------------------------------------------------------------"
+    print " renetcolRC is part of renetcol "
+    print " This module writed in python is a remote client which can received flows "
+    print " information from renetcol. It was built from renetcolGUI source without "
+    print " the gtk interface and without the interaction with renetcol."
+    print " To receive flows from renetcol the filter with the field number 69 MUST be"
+    print " actived on renetcol (in your file rules.txt)"
+    print "----------------------------------------------------------------------------"
     
     if (os.name =="nt"):
@@ -525 +588 @@
         os_type = 3
 
+    parser = OptionParser()
+    parser.add_option("-o", "--output", dest="out", help ="Output filename prefix, ex: \"/tmp/myrecord\", timestamp will be add to the filename")
+    parser.add_option("-t", "--time", dest="tim", help ="Round robin interval (in seconde), default is \"3600\" for 1h")
+    (options, args) = parser.parse_args()
+    outputFileName = options.out
+    rrt = int(options.tim)
+
+    if (outputFileName!=None):
+        record = 1
+        record_file_name = outputFileName
+        record_file = file(record_file_name, 'a+')
+        RotRec()
+    else:
+        record = 0
+
+    print ""
+    print ""
+    print ""
+    print " ---------------------------------------"
+    print "  STARTING RECORD ROTATION"
+    print "  with following parameters:"
+    print "  output filename prefix :",outputFileName
+    print "  interval: ",rrt, " seconds"
+    print " ---------------------------------------"
+    now2 = time.time()
+    reste = rrt-(operator.mod(now2,rrt))
+    myTimer = threading.Timer(rrt,timer_action)
+    myTimer.start()
+    ##myTimer.cancel()
+    ##print "STOPPING RECORD ROTATION"
+
     myInputControlThread = InputControl(localAddr, localPort)
     myInputControlThread.start()
         
-    print "---------------------------------------------------------------"
-    print " renetcolRC is part of renetcol "
-    print " this module is a remote client which can recieved flow \ "
-    print " information from renetcol. "
-    print "----------------------------------------------------------------"