Application Layer Covert Channel Analysis and ... - Bill Buchanan

Z. Kwecka, BSc (Hons) Network Computing, 2006 92}}}//ret += "Covert-Channel: Covert Data going out\r\n";foreach(string str in keys){ret += str;}ret += "\r\n";if (m_HttpPost != null)ret += m_HttpPost;}return ret;}///Returns text information about this HttpClient object.///A string representing this HttpClient object.public override string ToString(){return ToString(false);}///Returns text information about this HttpClient object.///A string representing this HttpClient object.///Specifies whether or not to include information about therequested URL.public string ToString(bool WithUrl){string Ret;try{if (DestinationSocket == null || DestinationSocket.RemoteEndPoint == null)Ret = "Incoming HTTP connection from " +((IPEndPoint)ClientSocket.RemoteEndPoint).Address.ToString();elseRet = "HTTP connection from " +((IPEndPoint)ClientSocket.RemoteEndPoint).Address.ToString() + " to " +((IPEndPoint)DestinationSocket.RemoteEndPoint).Address.ToString() + " on port" + ((IPEndPoint)DestinationSocket.RemoteEndPoint).Port.ToString();if (HeaderFields != null && HeaderFields.ContainsKey("Host") && RequestedPath !=null)Ret += "\r\n" + " requested URL: http://" + HeaderFields["Host"] + RequestedPath;}catch{Ret = "HTTP Connection";}return Ret;}// private variables/// Holds the value of the HttpQuery property.private string m_HttpQuery = "";/// Holds the value of the RequestedPath property.private string m_RequestedPath = null;/// Holds the value of the HeaderFields property.private StringDictionary m_HeaderFields = null;/// Holds the value of the HeaderFieldsSignature property.private StringDictionary m_HeaderFieldsSignature = null;/// Holds the value of the HttpVersion property.private string m_HttpVersion = "";/// Holds the value of the HttpRequestType property.private string m_HttpRequestType = "";/// Holds the POST dataprivate string m_HttpPost = null;}