package modules import ( "os" "regexp" "github.com/evilsocket/bettercap-ng/core" "github.com/evilsocket/bettercap-ng/log" "github.com/evilsocket/bettercap-ng/session" "github.com/google/gopacket/layers" "github.com/google/gopacket/pcap" "github.com/google/gopacket/pcapgo" ) type SnifferContext struct { Handle *pcap.Handle Source string DumpLocal bool Verbose bool Filter string Expression string Compiled *regexp.Regexp Output string OutputFile *os.File OutputWriter *pcapgo.Writer } func (s *Sniffer) GetContext() (error, *SnifferContext) { var err error ctx := NewSnifferContext() if err, ctx.Source = s.StringParam("net.sniff.source"); err != nil { return err, ctx } if ctx.Source == "" { if ctx.Handle, err = pcap.OpenLive(s.Session.Interface.Name(), 65536, true, pcap.BlockForever); err != nil { return err, ctx } } else { if ctx.Handle, err = pcap.OpenOffline(ctx.Source); err != nil { return err, ctx } } if err, ctx.Verbose = s.BoolParam("net.sniff.verbose"); err != nil { return err, ctx } if err, ctx.DumpLocal = s.BoolParam("net.sniff.local"); err != nil { return err, ctx } if err, ctx.Filter = s.StringParam("net.sniff.filter"); err != nil { return err, ctx } else if ctx.Filter != "" { err = ctx.Handle.SetBPFFilter(ctx.Filter) if err != nil { return err, ctx } } if err, ctx.Expression = s.StringParam("net.sniff.regexp"); err != nil { return err, ctx } else if ctx.Expression != "" { if ctx.Compiled, err = regexp.Compile(ctx.Expression); err != nil { return err, ctx } } if err, ctx.Output = s.StringParam("net.sniff.output"); err != nil { return err, ctx } else if ctx.Output != "" { if ctx.OutputFile, err = os.Create(ctx.Output); err != nil { return err, ctx } ctx.OutputWriter = pcapgo.NewWriter(ctx.OutputFile) ctx.OutputWriter.WriteFileHeader(65536, layers.LinkTypeEthernet) } return nil, ctx } func NewSnifferContext() *SnifferContext { return &SnifferContext{ Handle: nil, DumpLocal: false, Verbose: true, Filter: "", Expression: "", Compiled: nil, Output: "", OutputFile: nil, OutputWriter: nil, } } var ( no = core.Red("no") yes = core.Green("yes") yn = map[bool]string{ true: yes, false: no, } ) func (c *SnifferContext) Log(sess *session.Session) { log.Info("Skip local packets : %s", yn[c.DumpLocal]) log.Info("Verbose : %s", yn[c.Verbose]) log.Info("BPF Filter : '%s'", core.Yellow(c.Filter)) log.Info("Regular expression : '%s'", core.Yellow(c.Expression)) log.Info("File output : '%s'", core.Yellow(c.Output)) } func (c *SnifferContext) Close() { if c.Handle != nil { c.Handle.Close() c.Handle = nil } if c.OutputFile != nil { c.OutputFile.Close() c.OutputFile = nil } }