Application Layer Covert Channel Analysis and ... - Bill Buchanan

Z. Kwecka, BSc (Hons) Network Computing, 2006 131//// Required for Windows Form Designer support//InitializeComponent();}/// /// Clean up any resources being used./// protected override void Dispose( bool disposing ){if( disposing ){if(mcStop.Enabled == true)sw.Close();if (components != null){components.Dispose();}}base.Dispose( disposing );}/// /// The main entry point for the application./// [STAThread]static void Main(){Application.Run(new HTTPAnalyser_Form1());}/// /// Form_Load - Sets up ListViews and checks for working network adapters/// /// /// private void HTTPAnalyser_Form1_Load(object sender, System.EventArgs e){headerSyncArray = ArrayList.Synchronized(headerArray);sigSyncArray = ArrayList.Synchronized(sigArray);}//lvCon columnsif(lvCon.Width/5 > 20)lvCon.Columns.Add("Connection", lvCon.Width /5-20 , HorizontalAlignment.Left);elselvCon.Columns.Add("Connection", lvCon.Width /5 , HorizontalAlignment.Left);lvCon.Columns.Add("ClientIP", lvCon.Width /5 , HorizontalAlignment.Left);lvCon.Columns.Add("ServerIP", lvCon.Width /5 , HorizontalAlignment.Left);lvCon.Columns.Add("ClientPort", lvCon.Width /5 , HorizontalAlignment.Left);lvCon.Columns.Add("ServerPort", lvCon.Width /5 , HorizontalAlignment.Left);//set menu itemsmcStop.Enabled = false;mcStart.Enabled = false;//Adaptersc collectiongetNetConnections = SharpPcap.GetAllDevices();for (int i = 0; i < getNetConnections.Count ; i++){cbAdapters.Items.Add("(" + (i) + ") " + getNetConnections[i].PcapDescription);}cbAdapters.Invalidate();/// /// Capture Menu Start Click - starts reading from the selected adapter/// /// /// private void mcStart_Click(object sender, System.EventArgs e){lbHeaders.Items.Clear();if(cbChip.Checked){device.PcapOpen(false,1000);