Application Layer Covert Channel Analysis and ... - Bill Buchanan

More documents

Recommendations

Info

Z. Kwecka, BSc (Hons) Network Computing, 2006 94private System.ComponentModel.Container components = null;/// /// Default constructor/// public HTTPAnalyser_Form1(){//// Required for Windows Form Designer support//InitializeComponent();}/// /// Clean up any resources being used./// protected override void Dispose( bool disposing ){if( disposing ){if (components != null){components.Dispose();}}base.Dispose( disposing );}/// /// The main entry point for the application./// [STAThread]static void Main(){Application.Run(new HTTPAnalyser_Form1());}/// /// Form_Load - Sets up ListViews and checks for working network adapters/// /// /// private void HTTPAnalyser_Form1_Load(object sender, System.EventArgs e){headerSyncArray = ArrayList.Synchronized(headerArray);sigSyncArray = ArrayList.Synchronized(sigArray);//lvCon columnsif(lvCon.Width/5 > 20)lvCon.Columns.Add("Connection", lvCon.Width /5-20 ,HorizontalAlignment.Left);elselvCon.Columns.Add("Connection", lvCon.Width /5 , HorizontalAlignment.Left);lvCon.Columns.Add("ClientIP", lvCon.Width /5 , HorizontalAlignment.Left);lvCon.Columns.Add("ServerIP", lvCon.Width /5 , HorizontalAlignment.Left);lvCon.Columns.Add("ClientPort", lvCon.Width /5 , HorizontalAlignment.Left);lvCon.Columns.Add("ServerPort", lvCon.Width /5 , HorizontalAlignment.Left);//lvPackets columnslvPackets.Columns.Add("No", 30 , HorizontalAlignment.Left);if(lvPackets.Width/6 > 53)lvPackets.Columns.Add("Port", lvPackets.Width /6 - 53 , HorizontalAlignment.Left);elselvPackets.Columns.Add("Port", lvPackets.Width /6 , HorizontalAlignment.Left);lvPackets.Columns.Add("Flags", lvPackets.Width /6 , HorizontalAlignment.Left);lvPackets.Columns.Add("Size (Data Size)", lvPackets.Width /6 ,HorizontalAlignment.Left);lvPackets.Columns.Add("Date", lvPackets.Width /6 , HorizontalAlignment.Left);lvPackets.Columns.Add("SEQ", lvPackets.Width /6 , HorizontalAlignment.Left);lvPackets.Columns.Add("ACK", lvPackets.Width /6 , HorizontalAlignment.Left);lvPackets.View = View.Details;//set menu itemsmcStop.Enabled = false;mcStart.Enabled = false;
Z. Kwecka, BSc (Hons) Network Computing, 2006 95}//Adaptersc collectiongetNetConnections = SharpPcap.GetAllDevices();for (int i = 0; i < getNetConnections.Count ; i++){cbAdapters.Items.Add("(" + (i) + ") " + getNetConnections[i].PcapDescription);}cbAdapters.Invalidate();/// /// Capture Menu Start Click - starts reading from the selected adapter/// /// /// private void mcStart_Click(object sender, System.EventArgs e){lvPackets.Items.Clear();lbHeaders.Items.Clear();//conArray.Clear();//sigArray.Clear();//vnCounter = 0;//axPacketXCtrl1.Start();if(cbChip.Checked){device.PcapOpen(false,1000);}else{device.PcapOpen(true,1000);}device.PcapSetFilter("port 80");device.PcapStartCapture();mcStart.Enabled = false;mcStop.Enabled = true;gbAdapter.Enabled = false;if(cbDump.Checked && dumpFile != ""){device.PcapDumpOpen(dumpFile);}else if(cbDump.Checked){MessageBox.Show("Could not open Dump File");}}/// /// Capture Menu Stop Click - stops reading/// /// /// private void mcStop_Click(object sender, System.EventArgs e){device.PcapStopCapture();device.PcapClose();cbAdapters.SelectedIndex = -1;mcStart.Enabled = false;mcStop.Enabled = false;gbAdapter.Enabled = true;}/// /// OnPacket event handler - builds collection of "conversations" and displays it inlvCon/// /// /// private void device_PcapOnPacketArrival(object sender, Packet aPacket){if(aPacket is TCPPacket){TCPPacket tcp = (TCPPacket)aPacket;if(tcp.DestinationPort == 80 || tcp.SourcePort == 80)//herefor the offline dumphandling
Page 1 and 2:
Application Layer Covert ChannelAna
Page 3 and 4:
Z. Kwecka, BSc (Hons) Network Compu
Page 5 and 6:
Page 7 and 8:
Page 9 and 10:
Page 11:
Page 14:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25:
Page 28 and 29:
Page 30 and 31:
Page 32 and 33:
Page 34 and 35:
Page 36 and 37:
Page 38 and 39:
Page 40 and 41:
Page 42 and 43:
Page 44 and 45: Z. Kwecka, BSc (Hons) Network Compu
Page 56: Z. Kwecka, BSc (Hons) Network Compu
show all

Application Layer Covert Channel Analysis and ... - Bill Buchanan

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?