package netbios import ( "bytes" "encoding/binary" "git.loafle.net/overflow/overflow_discovery/service/matcher" ) const ( NBSS_SESSION_REQUEST uint8 = 0x81 NBSS_POSITIVE_SESSION_RESPONSE uint8 = 0x82 NBSS_NEGATIVE_SESSION_RESPONSE uint8 = 0x83 ADDR string = "192.168.1.202:139" ) type netBios struct { MsgType uint8 Flags uint8 //0-6 : Reserved, must be zero. 7 : Length extension. Length uint16 CalledNameLen uint8 CalledName [16]uint16 _ uint8 CallingNameLen uint8 CallingName [16]uint16 _ uint8 } type NetBiosMatcher struct { matcher.Matchers } func (t *NetBiosMatcher) ServiceName() string { return "NBSS" } func (t *NetBiosMatcher) IsPrePacket() bool { return false } func (t *NetBiosMatcher) HasResponse(index int) bool { return true } func (t *NetBiosMatcher) IsError(info matcher.MatchInfo, index int, packet *matcher.Packet) bool { return false } func (t *NetBiosMatcher) Match(info matcher.MatchInfo, index int, packet *matcher.Packet) bool { if packet == nil { return false } reader := new(bytes.Buffer) reader.Write(packet.Buffer) n := netBios{} if err := binary.Read(reader, binary.LittleEndian, &n); err != nil { return false } if NBSS_NEGATIVE_SESSION_RESPONSE != n.MsgType { return false } return true } func NewMatcher() matcher.Matcher { m := &NetBiosMatcher{} tempBuf := new(bytes.Buffer) binary.Write(tempBuf, binary.BigEndian, netBios{}) query := netBios{ MsgType: NBSS_SESSION_REQUEST, Flags: 0x00, Length: 0x4400, CalledNameLen: 0x20, CallingNameLen: 0x20, } query.CalledName[0] = 0x4D45 // L query.CalledName[1] = 0x4745 // F query.CallingName[0] = 0x4D45 query.CallingName[1] = 0x4745 for i := 2; i < 16; i++ { query.CalledName[i] = 0x4143 //Space query.CallingName[i] = 0x4143 } writer := new(bytes.Buffer) binary.Write(writer, binary.LittleEndian, query) m.AddPacket(matcher.NewPacket(writer.Bytes(), writer.Len())) return m }