Click here to Skip to main content
15,891,033 members
Search within:


Articles / Programming Languages / C#
 

Packet Capture and Analayzer

Rate me:
Please Sign up or sign in to vote.
4.88/5 (119 votes)
23 Sep 2003CPOL8 min read 1.5M   36.1K   437  
Packet capture and analyzer program. With this program you can capture, display, analyze, save packets or load a saved packet file. It works like Etheral does.
 
using System;
using System.Windows.Forms;

namespace MyClasses
{

	public class PacketSMBMAILSLOT
	{

		public struct PACKET_SMB_MAIL_SLOT
		{
			public ushort OpCode;
			public ushort Priority;
			public ushort Class;
			public string ClassStr;
			public ushort Size;
			public string MailSlotName;
		}



		public PacketSMBMAILSLOT()
		{

		}


		public static string GetOpCodeString( ushort cmd )
		{
			string Tmp = "";

			switch( cmd )
			{
				case	1	: Tmp = "Write Mail Slot"; break;
				default : Tmp = "Unknown"; break;
			}

			return Tmp;
		}


		public static string GetClassString( ushort cmd )
		{
			string Tmp = "";

			switch( cmd )
			{
				case	1	: Tmp = "Reliable"; break;
				case	2	: Tmp = "Unreliable & Broadcast"; break;
				default : Tmp = "Unknown"; break;
			}

			return Tmp;
		}


		public static bool Parser( ref TreeNodeCollection mNode, 
			byte [] PacketData , 
			ref int Index , 
			ref ListViewItem LItem ,
			bool IsRequest,
			string MailSlotName )
		{
			TreeNode mNodex;
			PACKET_SMB_MAIL_SLOT PSmbMailSlot;
			string Tmp = "";
			int k = 0 , kk = 0 , kkk = 0;
			byte SubCmd = 0;

			mNodex = new TreeNode();
			mNodex.Text = "SMB Mail Slot ( SMB Mail Slot Protocol )";
			kk = Index;

			try
			{
				if( Index == PacketData.Length )
				{
					Tmp = "Interim Reply";
					mNodex.Nodes.Add( Tmp );
				}
				else
				{
					SubCmd = Const.MAILSLOT_UNKNOWN;

					if( IsRequest )
					{
						if( MailSlotName != "" )
						{
							if( MailSlotName.Substring( 0 , 6 ) ==  "BROWSE" )
							{
								SubCmd = Const.MAILSLOT_BROWSE;
							} 
							else if( MailSlotName.Substring( 0 , 6 ) ==  "LANMAN" ) 
							{
								SubCmd = Const.MAILSLOT_LANMAN;
							} 
							else if( MailSlotName.Substring( 0 , 3 ) ==  "NET" )
							{
								SubCmd = Const.MAILSLOT_NET;
							} 
							else if( MailSlotName.Substring( 0 , 13 ) ==  "TEMP\\NETLOGON" )
							{
								SubCmd = Const.MAILSLOT_TEMP_NETLOGON;
							} 
							else if( MailSlotName.Substring( 0 , 4 ) ==  "MSSP" )
							{
								SubCmd = Const.MAILSLOT_MSSP;
							}
						}
					} 

					PSmbMailSlot.OpCode = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					Tmp = "OpCode :" + Function.ReFormatString( PSmbMailSlot.OpCode , GetOpCodeString( PSmbMailSlot.OpCode ) );
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , Index - 2 , 2 , false );

					PSmbMailSlot.Priority = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					Tmp = "Priority :" + Function.ReFormatString( PSmbMailSlot.Priority , null );
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , Index - 2 , 2 , false );

					PSmbMailSlot.Class = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					Tmp = "Class :" + Function.ReFormatString( PSmbMailSlot.Class , GetClassString( PSmbMailSlot.Class ) );
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , Index - 2 , 2 , false );

					PSmbMailSlot.Size = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					Tmp = "Size :" + Function.ReFormatString( PSmbMailSlot.Size , null );
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , Index - 2 , 2 , false );

					k = Index;
					PSmbMailSlot.MailSlotName = "";
					while( PacketData[ Index ] != 0 )
						PSmbMailSlot.MailSlotName += (char) PacketData[ Index ++ ];

					Tmp = "Mail Slot Name :" + PSmbMailSlot.MailSlotName;
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , k , Index - k , false );

					mNode.Add( mNodex );
					Function.SetPosition( ref mNodex , kk , Index - kk , false );
				}

				mNode.Add( mNodex );
				Function.SetPosition( ref mNodex , kkk , Index - kkk , true );

				LItem.SubItems[ Const.LIST_VIEW_PROTOCOL_INDEX ].Text = "SMB MAIL SLOT";
				LItem.SubItems[ Const.LIST_VIEW_INFO_INDEX ].Text = "SMB Mail Slot Protocol";

				switch( SubCmd )
				{
					case Const.MAILSLOT_BROWSE:
						//PacketMSWBROWSER( ref mNode , PacketData , ref Index , ref LItem );
						break;

					case Const.MAILSLOT_LANMAN:
						//PacketLANMAN( ref mNode , PacketData , ref Index , ref LItem );
						break;

					case Const.MAILSLOT_NET:
					case Const.MAILSLOT_TEMP_NETLOGON:
					case Const.MAILSLOT_MSSP:
						//PacketMSWLOGON( ref mNode , PacketData , ref Index , ref LItem );
						break;
				}


			}
			catch( Exception Ex )
			{
				mNode.Add( mNodex );
				Tmp = "[ Malformed SMB Mail Slot packet. Remaining bytes don't fit an SMB Mail Slot packet. Possibly due to bad decoding ]";
				mNode.Add( Tmp );
				Tmp = "[ Exception raised is <" + Ex.GetType().ToString() + "> at packet index <" + Index.ToString() + "> ]";
				mNode.Add( Tmp );
				LItem.SubItems[ Const.LIST_VIEW_INFO_INDEX ].Text = Tmp;

				return false;
			}

			return true;

		}


		public static bool Parser( ref TreeNode mNode, 
			ref TreeNode mNodeSubNode,
			byte [] PacketData , 
			ref int Index , 
			ref ListViewItem LItem ,
			bool IsRequest,
			string MailSlotName )
		{
			TreeNode mNodex;
			PACKET_SMB_MAIL_SLOT PSmbMailSlot;
			string Tmp = "";
			int k = 0 , kk = 0 , kkk = 0;
			byte SubCmd = 0;

			mNodex = new TreeNode();
			mNodex.Text = "SMB Mail Slot ( SMB Mail Slot Protocol )";
			kk = Index;

			try
			{
				if( Index == PacketData.Length )
				{
					Tmp = "Interim Reply";
					mNodex.Nodes.Add( Tmp );
				}
				else
				{
					SubCmd = Const.MAILSLOT_UNKNOWN;

					if( IsRequest )
					{
						if( MailSlotName != "" )
						{
							if( MailSlotName.Substring( 0 , 6 ) ==  "BROWSE" )
							{
								SubCmd = Const.MAILSLOT_BROWSE;
							} 
							else if( MailSlotName.Substring( 0 , 6 ) ==  "LANMAN" ) 
							{
								SubCmd = Const.MAILSLOT_LANMAN;
							} 
							else if( MailSlotName.Substring( 0 , 3 ) ==  "NET" )
							{
								SubCmd = Const.MAILSLOT_NET;
							} 
							else if( MailSlotName.Substring( 0 , 13 ) ==  "TEMP\\NETLOGON" )
							{
								SubCmd = Const.MAILSLOT_TEMP_NETLOGON;
							} 
							else if( MailSlotName.Substring( 0 , 4 ) ==  "MSSP" )
							{
								SubCmd = Const.MAILSLOT_MSSP;
							}
						}
					} 

					PSmbMailSlot.OpCode = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					Tmp = "OpCode :" + Function.ReFormatString( PSmbMailSlot.OpCode , GetOpCodeString( PSmbMailSlot.OpCode ) );
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , Index - 2 , 2 , false );

					PSmbMailSlot.Priority = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					Tmp = "Priority :" + Function.ReFormatString( PSmbMailSlot.Priority , null );
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , Index - 2 , 2 , false );

					PSmbMailSlot.Class = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					Tmp = "Class :" + Function.ReFormatString( PSmbMailSlot.Class , GetClassString( PSmbMailSlot.Class ) );
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , Index - 2 , 2 , false );

					PSmbMailSlot.Size = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					Tmp = "Size :" + Function.ReFormatString( PSmbMailSlot.Size , null );
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , Index - 2 , 2 , false );

					k = Index;
					PSmbMailSlot.MailSlotName = "";
					while( PacketData[ Index ] != 0 )
						PSmbMailSlot.MailSlotName += (char) PacketData[ Index ++ ];

					Tmp = "Mail Slot Name :" + PSmbMailSlot.MailSlotName;
					mNodex.Nodes.Add( Tmp );
					Function.SetPosition( ref mNodex , k , Index - k , false );

					//mNode.Add( mNodex );
					//Function.SetPosition( ref mNodex , kk , Index - kk , false );
				}

				mNode = mNodex;
				Function.SetPosition( ref mNode , kkk , Index - kkk , true );

				LItem.SubItems[ Const.LIST_VIEW_PROTOCOL_INDEX ].Text = "SMB MAIL SLOT";
				LItem.SubItems[ Const.LIST_VIEW_INFO_INDEX ].Text = "SMB Mail Slot protocol";

				switch( SubCmd )
				{
					case Const.MAILSLOT_BROWSE:
						//PacketMSWBROWSER( ref mNodeSubNode , PacketData , ref Index , ref LItem );
						break;

					case Const.MAILSLOT_LANMAN:
						//PacketLANMAN( ref mNodeSubNode , PacketData , ref Index , ref LItem );
						break;

					case Const.MAILSLOT_NET:
					case Const.MAILSLOT_TEMP_NETLOGON:
					case Const.MAILSLOT_MSSP:
						//PacketMSWLOGON( ref mNodeSubNode , PacketData , ref Index , ref LItem );
						break;
				}


			}
			catch( Exception Ex )
			{
				mNode = mNodex;
				Tmp = "[ Malformed SMB Mail Slot packet. Remaining bytes don't fit an SMB Mail Slot packet. Possibly due to bad decoding ]";
				mNode.Nodes.Add( Tmp );
				Tmp = "[ Exception raised is <" + Ex.GetType().ToString() + "> at packet index <" + Index.ToString() + "> ]";
				mNode.Nodes.Add( Tmp );
				LItem.SubItems[ Const.LIST_VIEW_INFO_INDEX ].Text = Tmp;

				return false;
			}

			return true;

		}

		public static bool Parser( byte [] PacketData , 
			ref int Index , 
			ref ListViewItem LItem ,
			bool IsRequest,
			string MailSlotName )
		{
			PACKET_SMB_MAIL_SLOT PSmbMailSlot;
			string Tmp = "";
			byte SubCmd = 0;

			try
			{
				if( Index == PacketData.Length )
				{
				}
				else
				{
					SubCmd = Const.MAILSLOT_UNKNOWN;

					if( IsRequest )
					{
						if( MailSlotName != "" )
						{
							if( MailSlotName.Substring( 0 , 6 ) ==  "BROWSE" )
							{
								SubCmd = Const.MAILSLOT_BROWSE;
							} 
							else if( MailSlotName.Substring( 0 , 6 ) ==  "LANMAN" ) 
							{
								SubCmd = Const.MAILSLOT_LANMAN;
							} 
							else if( MailSlotName.Substring( 0 , 3 ) ==  "NET" )
							{
								SubCmd = Const.MAILSLOT_NET;
							} 
							else if( MailSlotName.Substring( 0 , 13 ) ==  "TEMP\\NETLOGON" )
							{
								SubCmd = Const.MAILSLOT_TEMP_NETLOGON;
							} 
							else if( MailSlotName.Substring( 0 , 4 ) ==  "MSSP" )
							{
								SubCmd = Const.MAILSLOT_MSSP;
							}
						}
					} 

					PSmbMailSlot.OpCode = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					PSmbMailSlot.Priority = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					PSmbMailSlot.Class = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					PSmbMailSlot.Size = Function.Get2Bytes( PacketData , ref Index , Const.VALUE );
					PSmbMailSlot.MailSlotName = "";
					while( PacketData[ Index ] != 0 )
						PSmbMailSlot.MailSlotName += (char) PacketData[ Index ++ ];

				}

				LItem.SubItems[ Const.LIST_VIEW_PROTOCOL_INDEX ].Text = "SMB MAIL SLOT";
				LItem.SubItems[ Const.LIST_VIEW_INFO_INDEX ].Text = "SMB Mail Slot protocol";

				switch( SubCmd )
				{
					case Const.MAILSLOT_BROWSE:
						//PacketMSWBROWSER( PacketData , ref Index , ref LItem );
						break;

					case Const.MAILSLOT_LANMAN:
						//PacketLANMAN( PacketData , ref Index , ref LItem );
						break;

					case Const.MAILSLOT_NET:
					case Const.MAILSLOT_TEMP_NETLOGON:
					case Const.MAILSLOT_MSSP:
						//PacketMSWLOGON( PacketData , ref Index , ref LItem );
						break;
				}


			}
			catch
			{
				Tmp = "[ Malformed SMB Mail Slot packet. Remaining bytes don't fit an SMB Mail Slot packet. Possibly due to bad decoding ]";
				LItem.SubItems[ Const.LIST_VIEW_INFO_INDEX ].Text = Tmp;

				return false;
			}

			return true;

		}




	}
}

By viewing downloads associated with this article you agree to the Terms of Service and the article's licence.

If a file you wish to view isn't highlighted, and is a text file (not binary), please let us know and we'll add colourisation support for it.

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)


Written By
firat kocak
Web Developer
Turkey Turkey
Hi to all...
I am an alone programmer. i am not a specialist on programming but i love it. anyone who supports source code sharing is definetely my friend.
Because i am so poor on writing about myself, anyone who wants to learn more about me can feel free to contact me...

Comments and Discussions

Permalink
Advertise
Privacy
Cookies
Terms of Use
Layout: fixed | fluid

Posted 22 May 2003

Article Copyright 2003 by firat kocak
Everything else Copyright © CodeProject, 1999-2024

Web04 2.8:2024-04-02:1