def __str__(self, arrow='>'):
p = net.proto_ntoa(self.p)
if self.dport is not None:
if self.sport is None: # XXX - ICMP
return '%s %s %s %s:%s' % (p, self.src, arrow, self.dst, self.dport)
return '%s %s:%s %s %s:%s' % \
(p, self.src, self.sport, arrow, self.dst, self.dport)
return '%s %s %s %s' % (p, self.src, arrow, self.dst)
def __str__(self, arrow='>'):
p = net.proto_ntoa(self.p)
if self.dport is not None:
if self.sport is None: # XXX - ICMP
return '%s %s %s %s:%s' % (p, self.src, arrow, self.dst,
self.dport)
return '%s %s:%s %s %s:%s' % \
(p, self.src, self.sport, arrow, self.dst, self.dport)
return '%s %s %s %s' % (p, self.src, arrow, self.dst)
def __event_to_fcaps(self, event):
if event in _services:
return [_services[event]]
svcs = net.serv_aton(event)
l = []
for p in (1, 6, 17):
ports = [str(svc[1]) for svc in svcs if svc[0] == p]
if ports:
l.append('%s and dst port %s' %
(net.proto_ntoa(p), ' or '.join(ports)))
return l
def __event_to_fcaps(self, event):
if event in _services:
return [ _services[event] ]
svcs = net.serv_aton(event)
l = []
for p in (1, 6, 17):
ports = [ str(svc[1]) for svc in svcs if svc[0] == p ]
if ports:
l.append('%s and dst port %s' %
(net.proto_ntoa(p), ' or '.join(ports)))
return l