overflow_scanner/probe
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ing

Browse Source
This commit is contained in:
crusader 2018-09-28 13:53:46 +09:00
parent 23ee90a233
commit ece34034bc
3 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
build.sh
View File

@ -24,5 +24,5 @@ if [ -z "${o_arch}" ]; then
exit 0 exit 0
fi fi
rm ./dist rm -R ./dist
GOOS=${o_os} GOARCH=${o_arch} CGO_ENABLED=1 go build -a --installsuffix cgo --ldflags="-s" -o ./dist/probe ./cmd/main.go GOOS=${o_os} GOARCH=${o_arch} CGO_ENABLED=1 go build -a --installsuffix cgo --ldflags="-s" -o ./dist/probe-${o_os}-${o_arch} ./cmd/main.go

4
internal/pcap/packet.go
View File

@ -128,6 +128,10 @@ func handlePacketTCP(ps *pCapScan, packet gopacket.Packet) {
layer := packet.Layer(layers.LayerTypeTCP) layer := packet.Layer(layers.LayerTypeTCP)
tcp, _ := layer.(*layers.TCP) tcp, _ := layer.(*layers.TCP)
if !tcp.SYN || !tcp.ACK {
return
}
ps.tcpListenerChanMtx.RLock() ps.tcpListenerChanMtx.RLock()
defer func() { defer func() {
ps.tcpListenerChanMtx.RUnlock() ps.tcpListenerChanMtx.RUnlock()

3
internal/pcap/pcap_scan.go
View File

@ -80,7 +80,8 @@ func (ps *pCapScan) Start() error {
} }
// set filter // set filter
// todo add tcp, udp filter // todo add tcp, udp filter
if err = h.SetBPFFilter("arp or icmp or icmp6 and src net " + ps.zone.Network + " or (((tcp[tcpflags] & (tcp-syn|tcp-ack) != 0) or (tcp[tcpflags] & (tcp-rst) != 0)) and port 60000) or udp "); nil != err { // if err = h.SetBPFFilter("arp or icmp or icmp6 and src net " + ps.zone.Network + " or (((tcp[tcpflags] & (tcp-syn|tcp-ack) != 0) or (tcp[tcpflags] & (tcp-rst) != 0)) and port 60000) or udp "); nil != err {
if err = h.SetBPFFilter("(arp or icmp or icmp6 or (((tcp[tcpflags] & (tcp-syn|tcp-ack) != 0) or (tcp[tcpflags] & (tcp-rst) != 0)) and port 60000) or udp) and src net " + ps.zone.Network); nil != err {
// if err = h.SetBPFFilter("arp or icmp or icmp6 or tcp or udp"); nil != err { // if err = h.SetBPFFilter("arp or icmp or icmp6 or tcp or udp"); nil != err {
h.Close() h.Close()
return err return err