network_service_matcher/netbios/netbios.go

package netbios

import (
	"bytes"
	"encoding/binary"

	cnsm "git.loafle.net/commons_go/network_service_matcher"
)

const (
	NBSS_SESSION_REQUEST           uint8  = 0x81
	NBSS_POSITIVE_SESSION_RESPONSE uint8  = 0x82
	NBSS_NEGATIVE_SESSION_RESPONSE uint8  = 0x83
	ADDR                           string = "192.168.1.202:139"
)

type netBios struct {
	MsgType        uint8
	Flags          uint8 //0-6 : Reserved, must be zero. 7 : Length extension.
	Length         uint16
	CalledNameLen  uint8
	CalledName     [16]uint16
	_              uint8
	CallingNameLen uint8
	CallingName    [16]uint16
	_              uint8
}

type NetBiosMatcher struct {
	cnsm.Matchers
}

func (t *NetBiosMatcher) ServiceName() string {
	return "NBSS"
}

func (t *NetBiosMatcher) String() string {
	return "NBSS"
}

func (t *NetBiosMatcher) IsPrePacket() bool {
	return false
}

func (t *NetBiosMatcher) HasResponse(index int) bool {
	return true
}

func (t *NetBiosMatcher) IsError(info cnsm.MatchInfo, index int, packet *cnsm.Packet) bool {
	return false
}

func (t *NetBiosMatcher) Match(info cnsm.MatchInfo, index int, packet *cnsm.Packet) bool {

	if packet == nil {
		return false
	}

	reader := new(bytes.Buffer)
	reader.Write(packet.Buffer)

	n := netBios{}
	if err := binary.Read(reader, binary.LittleEndian, &n); err != nil {
		return false
	}

	if NBSS_NEGATIVE_SESSION_RESPONSE != n.MsgType {
		return false
	}

	return true

}

func NewMatcher() cnsm.Matcher {

	m := &NetBiosMatcher{}

	tempBuf := new(bytes.Buffer)
	binary.Write(tempBuf, binary.BigEndian, netBios{})

	query := netBios{
		MsgType:        NBSS_SESSION_REQUEST,
		Flags:          0x00,
		Length:         0x4400,
		CalledNameLen:  0x20,
		CallingNameLen: 0x20,
	}

	query.CalledName[0] = 0x4D45 // L
	query.CalledName[1] = 0x4745 // F

	query.CallingName[0] = 0x4D45
	query.CallingName[1] = 0x4745

	for i := 2; i < 16; i++ {
		query.CalledName[i] = 0x4143 //Space
		query.CallingName[i] = 0x4143
	}
	writer := new(bytes.Buffer)
	binary.Write(writer, binary.LittleEndian, query)

	m.AddPacket(cnsm.NewPacket(writer.Bytes(), writer.Len()))

	return m
}