scottk/nDPId
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/nDPId.git synced 2025-11-04 04:07:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

py-flow-info: print flow src/dst packets

Browse Source 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
This commit is contained in:
Toni Uhlig
2023-07-28 13:16:29 +02:00
parent ba8236c1f7
commit 4b923bdf44
1 changed files with 24 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
examples/py-flow-info/flow-info.py
View File

@@ -131,15 +131,25 @@ class Stats:
risky, midstream, guessed, not_detected risky, midstream, guessed, not_detected
@staticmethod @staticmethod
def prettifyBytes(bytes_received): def prettifyBytes(bytes_received, is_byte_unit = True):
size_names = ['B', 'KB', 'MB', 'GB', 'TB'] if not is_byte_unit:
size_names = ['', 'K', 'M', 'G', 'T']
divisor = 1000
else:
size_names = ['B', 'KiB', 'MiB', 'GiB', 'TiB']
divisor = 1024
if bytes_received == 0: if bytes_received == 0:
i = 0 i = 0
else: else:
i = min(int(math.floor(math.log(bytes_received, 1024))), len(size_names) - 1) i = min(int(math.floor(math.log(bytes_received, divisor))), len(size_names) - 1)
p = math.pow(1024, i) p = math.pow(divisor, i)
s = round(bytes_received / p, 2) s = round(bytes_received / p, 2)
return '{:.2f} {}'.format(s, size_names[i])
if not is_byte_unit:
return '{:.0f}{}'.format(s, ' ' + size_names[i] if len(size_names[i]) > 0 else size_names[i])
else:
return '{:.2f} {}'.format(s, size_names[i])
def resetStatus(self): def resetStatus(self):
if self.statusbar_enabled is False: if self.statusbar_enabled is False:
@@ -458,7 +468,7 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data):
if args.print_hostname is True: if args.print_hostname is True:
line_suffix += '[{}]'.format(json_dict['ndpi']['hostname']) line_suffix += '[{}]'.format(json_dict['ndpi']['hostname'])
if args.print_bytes is not None: if args.print_bytes is True:
if len(ndpi_proto_categ_breed) != 0 or len(line_suffix) != 0: if len(ndpi_proto_categ_breed) != 0 or len(line_suffix) != 0:
line_suffix += ' ' line_suffix += ' '
src_color = '' src_color = ''
@@ -473,6 +483,12 @@ def onJsonLineRecvd(json_dict, instance, current_flow, global_user_data):
'[' + tot_color + Stats.prettifyBytes(json_dict['flow_src_tot_l4_payload_len'] + \ '[' + tot_color + Stats.prettifyBytes(json_dict['flow_src_tot_l4_payload_len'] + \
json_dict['flow_dst_tot_l4_payload_len']) + TermColor.END + ']' json_dict['flow_dst_tot_l4_payload_len']) + TermColor.END + ']'
if args.print_packets is True:
if len(ndpi_proto_categ_breed) != 0 or len(line_suffix) != 0:
line_suffix += ' '
line_suffix += '[' + Stats.prettifyBytes(json_dict['flow_src_packets_processed'], False) + ']' \
'[' + Stats.prettifyBytes(json_dict['flow_dst_packets_processed'], False) + ']'
if json_dict['l3_proto'] == 'ip4': if json_dict['l3_proto'] == 'ip4':
print('{}{}{}{}{}: [{:.>6}] [{}][{:.>5}] [{:.>15}]{} -> [{:.>15}]{} {}{}' \ print('{}{}{}{}{}: [{:.>6}] [{}][{:.>5}] [{:.>15}]{} -> [{:.>15}]{} {}{}' \
''.format(timestamp, first_seen, last_seen, instance_and_source, flow_event_name, ''.format(timestamp, first_seen, last_seen, instance_and_source, flow_event_name,
@@ -518,6 +534,8 @@ if __name__ == '__main__':
help='Print last seen flow time diff.') help='Print last seen flow time diff.')
argparser.add_argument('--print-bytes', action='store_true', default=False, argparser.add_argument('--print-bytes', action='store_true', default=False,
help='Print received/transmitted source/dest bytes for every flow.') help='Print received/transmitted source/dest bytes for every flow.')
argparser.add_argument('--print-packets', action='store_true', default=False,
help='Print received/transmitted source/dest packets for every flow.')
argparser.add_argument('--guessed', action='store_true', default=False, help='Print only guessed flow events.') argparser.add_argument('--guessed', action='store_true', default=False, help='Print only guessed flow events.')
argparser.add_argument('--not-detected', action='store_true', default=False, help='Print only undetected flow events.') argparser.add_argument('--not-detected', action='store_true', default=False, help='Print only undetected flow events.')
argparser.add_argument('--detected', action='store_true', default=False, help='Print only detected flow events.') argparser.add_argument('--detected', action='store_true', default=False, help='Print only detected flow events.')