1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
|
#!/usr/bin/perl -w
#
# Copyright (C) 2001 by USC/ISI
# All rights reserved.
#
# Redistribution and use in source and binary forms are permitted
# provided that the above copyright notice and this paragraph are
# duplicated in all such forms and that any documentation, advertising
# materials, and other materials related to such distribution and use
# acknowledge that the software was developed by the University of
# Southern California, Information Sciences Institute. The name of the
# University may not be used to endorse or promote products derived from
# this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
#
# An perl script that seperate inbound and outbound traffic of ISI domain,
# used by SAMAN ModelGen
#
# This work is supported by DARPA through SAMAN Project
# (http://www.isi.edu/saman/), administered by the Space and Naval
# Warfare System Center San Diego under Contract No. N66001-00-C-8066
#
sub usage {
print STDERR <<END;
usage: $0 [-w FilenameExtention]
Options:
-w string specify the filename extention
END
exit 1;
}
BEGIN {
$dblibdir = "./";
push(@INC, $dblibdir);
}
use DbGetopt;
require "dblib.pl";
my(@orig_argv) = @ARGV;
&usage if ($#ARGV < 0);
my($prog) = &progname;
my($dbopts) = new DbGetopt("w:?", \@ARGV);
my($ch);
while ($dbopts->getopt) {
$ch = $dbopts->opt;
if ($ch eq 'w') {
$fext = $dbopts->optarg;
} else {
&usage;
};
};
$fsession=join(".",$fext,"session");
$farrivef=join(".",$fext,"arrive");
$sizef=join(".",$fext,"size");
$filef=join(".",$fext,"fileno");
open(FSESSION,"> $fsession") || die("cannot open $fsession\n");
open(FFARRIVE,"> $farrivef") || die("cannot open $farrivef\n");
open(FSIZE,"> $sizef") || die("cannot open $sizef\n");
open(FFILE,"> $filef") || die("cannot open $filef\n");
$fileno=0;
$fsize=0;
$oldsrc="";
$olddst="";
$oldsrcP="";
$olddstP="";
while (<>) {
($ip11,$ip12,$ip13,$ip14,$srcPort,$ip21,$ip22,$ip23,$ip24,$dstPort,$dummy,$time1,$time2,$flag,$seqb,$seqe,$size,$size1) = split(/[.:() ]/,$_);
$time=join(".",$time1,$time2);
if (!defined($size)) {
$size=0;
} else {
if (($flag eq "") && ($seqb eq "") && defined($size1)) {
$size=$size1;
}
}
if (!defined($flag)) {
$flag="";
}
$dummy="";
$seqe="";
#not modelig FTP control channel
if (($srcPort ne "21") && ($dstPort ne "21")) {
$srcP=join(".",$ip11,$ip12,$ip13,$ip14,$srcPort);
$dstP=join(".",$ip21,$ip22,$ip23,$ip24,$dstPort);
$src=join(".",$ip11,$ip12,$ip13,$ip14);
$dst=join(".",$ip21,$ip22,$ip23,$ip24);
if ($flag eq "S") {
$ssrcP=$srcP;
$sdstP=$dstP;
$ssrc=$src;
$sdst=$dst;
$stime=$time;
}
if (($src eq $oldsrc) && ($dst eq $olddst)) {
if (($srcP eq $oldsrcP) && ($dstP eq $olddstP)) {
$fsize=$fsize+$size;
if ((($flag eq "F") || ($flag eq "FP")) &&
($ssrcP eq $srcP) && ($sdstP eq $dstP)) {
$fileno++;
if ($fsize != 0) {
# print FSIZE "$srcP $dstP $fsize\n";
print FSIZE "$fsize\n";
}
$fsize=0;
print FFARRIVE "$ssrc $sdst $stime\n";
}
}
} else {
if (($oldsrc ne "") && ($olddst ne "")) {
if ($fileno != 0) {
# print FFILE "$oldsrc $olddst $fileno\n";
print FSESSION "$oldtime\n";
print FFILE "$fileno\n";
}
}
$fileno=0;
$oldtime=$time;
}
$oldsrc=$src;
$olddst=$dst;
$oldsrcP=$srcP;
$olddstP=$dstP;
}
}
#print the last FTP session
print FFILE "$fileno\n";
close(FFARRIVE);
close(FSIZE);
close(FFILE);
|
