def __init__(self, parent, funcCallbacks):
from ..core.DebugPrint import dbgPrint, Print
from ..core.structures.Tracer import IDATrace
from ..core.structures.Tracer.Config.config import ProcessConfig as ProcessConfig
super(TraceGeneratorWidget, self).__init__()
Print("[|] loading TraceGenerationWidget")
self.idaTracer = IDATrace(funcCallbacks)
self.processConfig = ProcessConfig()
self.parent = parent
self.name = "Trace Generation"
tracer_icon_path = os.path.join(self.parent.iconPath, "trace.png")
self.icon = QtGui.QIcon(tracer_icon_path)
self.QtGui = QtGui
self.QtCore = QtCore
self.central_widget = self.QtGui.QWidget()
self.setCentralWidget(self.central_widget)
self._createGui()
self.populateConfig()
def __init__(self,parent,funcCallbacks):
from ..core.DebugPrint import dbgPrint, Print
from ..core.structures.Tracer import IDATrace
from ..core.structures.Tracer.Config.config import ProcessConfig as ProcessConfig
super(TraceGeneratorWidget, self).__init__()
Print( "[|] loading TraceGenerationWidget" )
self.idaTracer = IDATrace(funcCallbacks)
self.processConfig = ProcessConfig()
self.parent = parent
self.name = "Trace Generation"
tracer_icon_path = os.path.join(self.parent.iconPath, "trace.png")
self.icon = QtGui.QIcon(tracer_icon_path)
self.QtGui = QtGui
self.QtCore = QtCore
self.central_widget = self.QtGui.QWidget()
self.setCentralWidget(self.central_widget)
self._createGui()
self.populateConfig()
class TraceGeneratorWidget(QMainWindow):
"""
This widget is the front-end for the trace generations.
"""
def __init__(self, parent, funcCallbacks):
from ..core.DebugPrint import dbgPrint, Print
from ..core.structures.Tracer import IDATrace
from ..core.structures.Tracer.Config.config import ProcessConfig as ProcessConfig
super(TraceGeneratorWidget, self).__init__()
Print("[|] loading TraceGenerationWidget")
self.idaTracer = IDATrace(funcCallbacks)
self.processConfig = ProcessConfig()
self.parent = parent
self.name = "Trace Generation"
tracer_icon_path = os.path.join(self.parent.iconPath, "trace.png")
self.icon = QtGui.QIcon(tracer_icon_path)
self.QtGui = QtGui
self.QtCore = QtCore
self.central_widget = self.QtGui.QWidget()
self.setCentralWidget(self.central_widget)
self._createGui()
self.populateConfig()
def showStatus(self, message):
"""
Displays the status bar for the TREE Tracer
@param message: The message to display
@return: None
"""
frameStyle = QtGui.QFrame.Sunken | QtGui.QFrame.Panel
self.colorLabel = QtGui.QLabel()
self.colorLabel.setFrameStyle(frameStyle)
self.colorLabel.setStyleSheet(
"font:13pt; font-weight:bold; color:green")
self.colorLabel.setText(message)
#self.colorLabel.setAutoFillBackground(True)
self.statusbar.addWidget(self.colorLabel)
self.statusbar.show()
def hideStatus(self):
"""
Hides the status bar from the TREE Tracer
"""
self.statusbar.removeWidget(self.colorLabel)
def _createGui(self):
"""
Create the main GUI with its components
"""
self.statusbar = QtGui.QStatusBar(self)
self.statusbar.setObjectName("statusbar")
self.setStatusBar(self.statusbar)
self._createToolbar()
trace_layout = QtGui.QVBoxLayout()
self.filters_qb = QtGui.QGroupBox()
self.filters_qb.setObjectName("filters_qb")
self.gridLayoutWidget_2 = QtGui.QWidget(self.filters_qb)
self.gridLayoutWidget_2.setGeometry(QtCore.QRect(10, 10, 500, 300))
self.gridLayoutWidget_2.setObjectName("gridLayoutWidget_2")
self.gridLayout_2 = QtGui.QGridLayout(self.gridLayoutWidget_2)
self.gridLayout_2.setObjectName("gridLayout_2")
self.verticalLayout_3 = QtGui.QVBoxLayout()
self.verticalLayout_3.setObjectName("verticalLayout_3")
self.filename_label = QtGui.QLabel(self.gridLayoutWidget_2)
self.filename_label.setObjectName("filename_label")
self.verticalLayout_3.addWidget(self.filename_label)
self.filters_filename_table = QtGui.QTableWidget(
self.gridLayoutWidget_2)
self.filters_filename_table.setObjectName("filters_filename_table")
self.verticalLayout_3.addWidget(self.filters_filename_table)
self.gridLayout_2.addLayout(self.verticalLayout_3, 0, 0, 1, 1)
self.verticalLayout_4 = QtGui.QVBoxLayout()
self.verticalLayout_4.setObjectName("verticalLayout_4")
self.network_port_label = QtGui.QLabel(self.gridLayoutWidget_2)
self.network_port_label.setObjectName("network_port_label")
self.verticalLayout_4.addWidget(self.network_port_label)
self.filters_network_port_table = QtGui.QTableWidget(
self.gridLayoutWidget_2)
self.filters_network_port_table.setObjectName(
"filters_network_port_table")
self.verticalLayout_4.addWidget(self.filters_network_port_table)
self.gridLayout_2.addLayout(self.verticalLayout_4, 0, 1, 1, 1)
self.process_qbox = QtGui.QGroupBox()
self.process_qbox.setObjectName("process_qbox")
self.layoutWidget = QtGui.QWidget(self.process_qbox)
self.layoutWidget.setGeometry(QtCore.QRect(10, 10, 400, 30))
self.layoutWidget.setObjectName("layoutWidget")
self.horizontalLayout_8 = QtGui.QHBoxLayout(self.layoutWidget)
self.horizontalLayout_8.setObjectName("horizontalLayout_8")
self.name_label = QtGui.QLabel(self.layoutWidget)
self.name_label.setObjectName("name_label")
self.horizontalLayout_8.addWidget(self.name_label)
self.name_label_d = QtGui.QLabel(self.layoutWidget)
self.name_label_d.setObjectName("name_label_d")
self.horizontalLayout_8.addWidget(self.name_label_d)
self.os_label = QtGui.QLabel(self.layoutWidget)
self.os_label.setObjectName("os_label")
self.horizontalLayout_8.addWidget(self.os_label)
self.os_label_d = QtGui.QLabel(self.layoutWidget)
self.os_label_d.setObjectName("os_label_d")
self.horizontalLayout_8.addWidget(self.os_label_d)
self.params_qbox = QtGui.QGroupBox()
self.params_qbox.setObjectName("params_qbox")
self.gridLayoutWidget_3 = QtGui.QWidget(self.params_qbox)
self.gridLayoutWidget_3.setGeometry(QtCore.QRect(10, 10, 500, 300))
self.gridLayoutWidget_3.setObjectName("gridLayoutWidget_3")
self.gridLayout_3 = QtGui.QGridLayout(self.gridLayoutWidget_3)
self.gridLayout_3.setObjectName("gridLayout_3")
self.horizontalLayout_6 = QtGui.QHBoxLayout()
self.horizontalLayout_6.setObjectName("horizontalLayout_6")
self.host_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.host_label.setObjectName("host_label")
self.horizontalLayout_6.addWidget(self.host_label)
self.host_label_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.host_label_edit.setInputMask("000.000.000.000;_")
self.host_label_edit.setObjectName("host_label_edit")
self.horizontalLayout_6.addWidget(self.host_label_edit)
self.password_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.password_label.setObjectName("password_label")
self.horizontalLayout_6.addWidget(self.password_label)
self.password_label_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.password_label_edit.setObjectName("password_label_edit")
self.horizontalLayout_6.addWidget(self.password_label_edit)
self.port_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.port_label.setObjectName("port_label")
self.horizontalLayout_6.addWidget(self.port_label)
self.port_label_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.port_label_edit.setInputMask("00000")
self.port_label_edit.setObjectName("port_label_edit")
self.horizontalLayout_6.addWidget(self.port_label_edit)
self.gridLayout_3.addLayout(self.horizontalLayout_6, 2, 0, 1, 1)
self.remote_cb = QtGui.QCheckBox(self.gridLayoutWidget_3)
self.remote_cb.setObjectName("remote_cb")
self.remote_cb.stateChanged.connect(self.remote_cbStateChanged)
self.pin_cb = QtGui.QCheckBox(self.gridLayoutWidget_3)
self.pin_cb.setObjectName("pin_cb")
self.pin_cb.stateChanged.connect(self.pin_cbStateChanged)
#
# Checkboxes for Remote, Pin, Pin-Remote
#
self.gridLayout_3.addWidget(self.remote_cb, 1, 0, 1, 1)
self.gridLayout_3.addWidget(self.pin_cb, 1, 1, 1, 1)
self.configParaLayout1 = QtGui.QVBoxLayout()
self.configParaLayout1.setObjectName("configParaLayout1")
self.interactiveModeLayout = QtGui.QHBoxLayout()
self.interactiveModeLayout.setObjectName("interactiveModeLayout")
self.interactive_cb = QtGui.QCheckBox(self.gridLayoutWidget_3)
self.interactive_cb.setObjectName("interactive_cb")
self.interactive_cb.stateChanged.connect(
self.interactive_cbStateChanged)
self.interactiveModeLayout.addWidget(self.interactive_cb)
self.configParaLayout1.addLayout(self.interactiveModeLayout)
self.horizontalLayout_7 = QtGui.QHBoxLayout()
self.horizontalLayout_7.setObjectName("horizontalLayout_7")
self.verticalLayout_5 = QtGui.QVBoxLayout()
self.verticalLayout_5.setObjectName("verticalLayout_5")
self.application_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.application_label.setObjectName("applicationlabel")
self.verticalLayout_5.addWidget(self.application_label)
self.path_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.path_label.setObjectName("path_label")
self.verticalLayout_5.addWidget(self.path_label)
self.arguments_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.arguments_label.setObjectName("arguments_label")
self.verticalLayout_5.addWidget(self.arguments_label)
self.horizontalLayout_7.addLayout(self.verticalLayout_5)
self.verticalLayout_6 = QtGui.QVBoxLayout()
self.verticalLayout_6.setObjectName("verticalLayout_6")
self.application_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.application_edit.setObjectName("application_edit")
self.verticalLayout_6.addWidget(self.application_edit)
self.path_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.path_edit.setObjectName("path_edit")
self.verticalLayout_6.addWidget(self.path_edit)
self.arguments_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.arguments_edit.setObjectName("arguments_edit")
self.verticalLayout_6.addWidget(self.arguments_edit)
self.horizontalLayout_7.addLayout(self.verticalLayout_6)
self.configParaLayout1.addLayout(self.horizontalLayout_7)
self.gridLayout_3.addLayout(self.configParaLayout1, 0, 0, 1, 1)
self.retranslateUi()
splitter1 = QtGui.QSplitter(QtCore.Qt.Horizontal)
splitter1.addWidget(self.params_qbox)
splitter1.addWidget(self.filters_qb)
valueList1 = [5, 95]
splitter1.setSizes(valueList1)
splitter2 = QtGui.QSplitter(QtCore.Qt.Vertical)
splitter2.addWidget(splitter1)
splitter2.addWidget(self.process_qbox)
valueList2 = [80, 20]
splitter2.setSizes(valueList2)
trace_layout.addWidget(splitter2)
self.central_widget.setLayout(trace_layout)
def retranslateUi(self):
self.filters_qb.setTitle("Filters")
self.filename_label.setText("File Name:")
self.network_port_label.setText("Network Port:")
self.process_qbox.setTitle("Process Information")
self.name_label.setText("Name:")
self.name_label_d.setText("blank")
self.application_label.setText("Application: ")
self.os_label.setText("OS:")
self.os_label_d.setText("blank")
self.params_qbox.setTitle("Configurable Parameters")
self.host_label.setText("Host: ")
self.password_label.setText("Password: "******"Port ")
self.remote_cb.setText("Remote")
self.pin_cb.setText("PIN")
self.interactive_cb.setText("Interactive Mode")
self.path_label.setText("Path:")
self.arguments_label.setText("Arguments: ")
def _createToolbar(self):
"""
Create the toolbar
"""
self._createGenerateTraceAction()
self._createProcessAttachAction()
self._createSaveConfigAction()
self.toolbar = self.addToolBar('Trace Generation Toolbar')
self.toolbar.addAction(self.saveConfigAction)
self.toolbar.addAction(self.generateTraceAction)
self.toolbar.addAction(self.processAttachAction)
def _createGenerateTraceAction(self):
"""
Create that action that performs the trace
"""
icon_path = os.path.join(self.parent.iconPath, "trace.png")
self.generateTraceAction = QtGui.QAction(QtGui.QIcon(icon_path),
"Generate the trace.", self)
self.generateTraceAction.triggered.connect(
self.onGenerateTraceButtonClicked)
def _createProcessAttachAction(self):
"""
Create that action to attach to a process
"""
Print("Create Attach Action")
icon_path = os.path.join(self.parent.iconPath, "attach.png")
self.processAttachAction = QtGui.QAction(QtGui.QIcon(icon_path),
"Attach to process.", self)
self.processAttachAction.triggered.connect(
self.onAttachProcessButtonClicked)
def checkInteractiveMode(self):
"""
Interactive Mode - This is disabled for this version
"""
if self.idaTracer.taintStart is None or self.idaTracer.taintStop is None:
idc.Warning(
"Please set the starting and stopping points before using Interactive Mode"
)
return False
else:
return True
def onAttachProcessButtonClicked(self):
"""
Attaching to an exsiting process - This is disabled for this version
"""
#start debugging
self.getConfigFromGUI()
if not self.pin_cb.isChecked():
if self.checkInteractiveMode():
self.idaTracer.attach(self.processConfig)
else:
if self.remote_cb.isChecked():
if len(self.processConfig.host) > 0:
port = int(self.processConfig.port, 10)
self.pinCommunication(self.processConfig.host, port, True)
else:
#IDA alert box
Print("Please enter a host address to debug")
else:
self.pinCommunication()
def onGenerateTraceButtonClicked(self):
"""
Button to trigger the trace generation
"""
#start debugging
self.getConfigFromGUI()
interactiveMode = self.interactive_cb.isChecked()
if interactiveMode:
if self.checkInteractiveMode():
self.idaTracer.interactive(self.processConfig)
Print("Using interactive mode.")
else:
if not self.pin_cb.isChecked():
self.idaTracer.run(self.processConfig)
else:
if self.remote_cb.isChecked():
if len(self.processConfig.host) > 0:
port = int(self.processConfig.port, 10)
self.pinCommunication(self.processConfig.host, port,
True)
else:
#IDA alert box
Print("Please enter a host address to debug")
else:
self.pinCommunication()
def _createSaveConfigAction(self):
"""
Save the current configuration to config.xml
"""
#from PySide.QtGui import QIcon
icon_path = os.path.join(self.parent.iconPath, "save.png")
self.saveConfigAction = QtGui.QAction(QtGui.QIcon(icon_path),
"Save config", self)
self.saveConfigAction.triggered.connect(self.onSaveConfigButtonClicked)
def getConfigFromGUI(self):
"""
Grabs the current configuration parameters from the GUI
"""
from ..core.DebugPrint import dbgPrint, Print
#Get all the process config data from the GUI
self.processConfig.application = str(self.application_edit.text())
self.processConfig.path = str(self.path_edit.text())
self.processConfig.args = str(self.arguments_edit.text())
self.processConfig.host = str(self.host_label_edit.text())
self.processConfig._pass = str(self.password_label_edit.text())
self.processConfig.port = str(self.port_label_edit.text())
#Hardcoded debugger until we integrate kernel trace
#self.processConfig.debugger =
if self.remote_cb.isChecked():
self.processConfig.remote = "True"
else:
self.processConfig.remote = "False"
tempFileFilter = []
for row in range(self.filters_filename_table.rowCount()):
data = self.filters_filename_table.item(row, 0).text()
#Print( "Adding file %s" % data )
tempFileFilter.append(data)
if len(tempFileFilter) > 0:
self.processConfig.fileFilter = tempFileFilter
else:
self.processConfig.fileFilter = None
tempNetworkFilter = []
for row in range(self.filters_network_port_table.rowCount()):
data = self.filters_network_port_table.item(row, 0).text()
Print("Adding port %s" % data)
tempNetworkFilter.append(data)
if len(tempNetworkFilter) > 0:
self.processConfig.networkFilter = tempNetworkFilter
else:
self.processConfig.networkFilter = None
def onSaveConfigButtonClicked(self):
"""
Save configuration button
"""
from dispatcher.core.structures.Tracer.Config.config import ProcessConfig as ProcessConfig
self.getConfigFromGUI()
self.idaTracer.setProcessConfig(self.processConfig)
def populateConfig(self):
"""
Populate the GUI with configuration parameters from config.xml
"""
from ..core.DebugPrint import dbgPrint, Print
self.processConfig = self.idaTracer.getProcessConfig()
if self.processConfig is None:
Print("Error, we need to add a new config")
Print("Should not get here!!!")
else:
self.application_edit.setText(self.processConfig.getApplication())
self.path_edit.setText(self.processConfig.getPath())
self.name_label_d.setText(self.processConfig.getName())
self.os_label_d.setText(self.processConfig.getOsType() + " " +
self.processConfig.getOsArch() + " Bit")
self.arguments_edit.setText(self.processConfig.getArgs())
#sdir = self.processConfig.getSdir()
self.host_label_edit.setText(self.processConfig.getHost())
self.password_label_edit.setText(self.processConfig.getPass())
#_debugger = self.processConfig.getDebugger()
#port = int(self.processConfig.getPort())
self.port_label_edit.setText(self.processConfig.getPort())
if self.processConfig.getRemote() == "True":
self.remote_cb.setCheckState(self.QtCore.Qt.Checked)
self.host_label_edit.setEnabled(1)
self.password_label_edit.setEnabled(1)
self.port_label_edit.setEnabled(1)
else:
self.remote_cb.setCheckState(self.QtCore.Qt.Unchecked)
self.host_label_edit.setDisabled(1)
self.password_label_edit.setDisabled(1)
self.port_label_edit.setDisabled(1)
self.filters = dict()
fileFilter = self.processConfig.getFileFilter()
if fileFilter is not None:
Print("Found %d file filters" % len(fileFilter))
self.populateFiltersTable(fileFilter,
self.filters_filename_table)
else:
Print("No file filters found")
networkFilter = self.processConfig.getNetworkFilter()
if networkFilter is not None:
Print("Found %d network filters" % len(networkFilter))
self.populateFiltersTable(networkFilter,
self.filters_network_port_table)
else:
Print("No network filters found")
def populateFiltersTable(self, _filter, filter_table):
"""
Populates the filter table with values
"""
table_header_labels = ["Value"]
filter_table.clear()
filter_table.setColumnCount(len(table_header_labels))
filter_table.setHorizontalHeaderLabels(table_header_labels)
filter_table.setRowCount(len(_filter))
filter_table.setContextMenuPolicy(self.QtCore.Qt.CustomContextMenu)
if filter_table.objectName() == "filters_filename_table":
filter_table.customContextMenuRequested.connect(
self.handleFileFilterMenu)
elif filter_table.objectName() == "filters_network_port_table":
filter_table.customContextMenuRequested.connect(
self.handleNetworkFilterMenu)
for row, node in enumerate(_filter):
tmp_item = self.QtGui.QTableWidgetItem(node)
tmp_item.setFlags(tmp_item.flags()
& ~self.QtCore.Qt.ItemIsEditable)
filter_table.setItem(row, 0, tmp_item)
filter_table.resizeRowToContents(row)
filter_table.setSelectionMode(
self.QtGui.QAbstractItemView.SingleSelection)
filter_table.resizeColumnsToContents()
filter_table.setSortingEnabled(True)
def handleFileFilterMenu(self, pos):
menu = self.QtGui.QMenu()
add = self.QtGui.QAction("Add", menu)
add.setStatusTip("Add a filter")
self.connect(add, self.QtCore.SIGNAL('triggered()'),
self.addFileFilter)
menu.addAction(add)
delete = self.QtGui.QAction("Delete", menu)
delete.setStatusTip("Delete a filter")
self.connect(delete, self.QtCore.SIGNAL('triggered()'),
self.delFileFilter)
menu.addAction(delete)
menu.exec_(self.QtGui.QCursor.pos())
def handleNetworkFilterMenu(self, pos):
menu = self.QtGui.QMenu()
add = self.QtGui.QAction("Add", menu)
add.setStatusTip("Add a filter")
self.connect(add, self.QtCore.SIGNAL('triggered()'),
self.addNetworkFilter)
menu.addAction(add)
delete = self.QtGui.QAction("Delete", menu)
delete.setStatusTip("Delete a filter")
self.connect(delete, self.QtCore.SIGNAL('triggered()'),
self.delNetworkFilter)
menu.addAction(delete)
menu.exec_(self.QtGui.QCursor.pos())
def addFileFilter(self):
self.filters_filename_table.insertRow(
self.filters_filename_table.rowCount())
self.filters_filename_table.setItem(
self.filters_filename_table.rowCount() - 1, 0,
self.QtGui.QTableWidgetItem(" "))
def delFileFilter(self):
self.filters_filename_table.removeRow(
self.filters_filename_table.currentItem().row())
def addNetworkFilter(self):
self.filters_network_port_table.insertRow(
self.filters_network_port_table.rowCount())
self.filters_network_port_table.setItem(
self.filters_network_port_table.rowCount() - 1, 0,
self.QtGui.QTableWidgetItem(" "))
def delNetworkFilter(self):
self.filters_network_port_table.removeRow(
self.filters_network_port_table.currentItem().row())
def remote_cbStateChanged(self, state):
"""
triggered when the remote debugger button changes state
"""
if state == self.QtCore.Qt.Checked:
self.host_label_edit.setEnabled(1)
self.password_label_edit.setEnabled(1)
self.port_label_edit.setEnabled(1)
else:
self.host_label_edit.setDisabled(1)
self.password_label_edit.setDisabled(1)
self.port_label_edit.setDisabled(1)
def pin_cbStateChanged(self, state):
"""
triggered when the pin button changes state
"""
if state == self.QtCore.Qt.Checked:
self.path_edit.selectAll()
def interactive_cbStateChanged(self, state):
"""
triggered when the interactive button changes state
"""
if state == self.QtCore.Qt.Checked:
self.showStatus(
"Interactive Mode: Please set the starting (shift-a) and ending (shift-z) points."
)
self.filters_qb.setDisabled(1)
else:
self.hideStatus()
self.filters_qb.setEnabled(1)
def pinCommunication(self, host="127.0.0.1", port=23966, bRemote=False):
#
# Most of this is stub code, waiting on the pin agent implementation
#
import socket
import time
HOST = host
PORT = port
ff = None
nf = None
Print("Connecting to %s:%d" % (HOST, PORT))
if self.processConfig.getFileFilter() != None:
ff = ";".join(self.processConfig.getFileFilter())
if self.processConfig.getNetworkFilter() != None:
nf = ";".join(self.processConfig.getNetworkFilter())
if (ff != None and nf != None):
packet = self.processConfig.getPath(
) + " " + self.processConfig.getArgs() + "!FF=" + ff + "!NF=" + nf
elif (ff != None):
packet = self.processConfig.getPath(
) + " " + self.processConfig.getArgs() + "!FF=" + ff
elif (nf != None):
packet = self.processConfig.getPath(
) + " " + self.processConfig.getArgs() + "!NF=" + nf
else:
packet = self.processConfig.getPath(
) + " " + self.processConfig.getArgs()
"""
Todo: Integrate this in the future, requires a patch in idaapi.py
if bRemote==False:
PID = self.idaTracer.getRunningProcesses("PinAgent.exe")
if PID == -1:
Print("Starting PinAgent ...")
os.startfile('"C:/Program Files/IDA 6.4/plugins/dispatcher/core/structures/PinAgent/PinAgent.exe"')
#idc.Exec('"C:/Program Files/IDA 6.4/plugins/dispatcher/core/structures/PinAgent/PinAgent.exe"')
time.sleep(5)
"""
#File filter
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((HOST, PORT))
s.send(packet)
data = s.recv(1024)
print data
#if data == "Trace is ready!":
# data = s.recv(1024)
s.close()
#
#while len(msg) < MSGLEN:
# chunk = s.recv(MSGLEN-len(msg))
# if chunk = '';
# raise RuneTimeError("socket connect broken")
# msg = msg + chunk
#
with open('trace.txt', 'w') as f:
f.write(data)
def createProcessConfig(self,name,osType,osArch):
import os
from dispatcher.core.structures.Tracer.Config.config import ProcessConfig as ProcessConfig
processConfig = self.config.read(name,osType,osArch)
if processConfig is None:
processConfig = ProcessConfig()
processConfig.name = name
processConfig.osType = osType
processConfig.osArch = osArch
processConfig.application = name
processConfig.path = name
processConfig.port = "0"
processConfig.remote = "False"
if osType == "macosx":
processConfig.debugger = "macosx"
elif osType == "windows":
processConfig.debugger = "win32"
elif osType == "linux":
processConfig.debugger = "linux"
if osArch == "ARM":
processConfig.debugger = "Remote ARM Linux/Android debugger"
#processConfig.debugger = "Remote GDB debugger"
self.config.write(processConfig)
Print( "Saving new process configuration" )
return processConfig
class TraceGeneratorWidget(QMainWindow):
"""
This widget is the front-end for the trace generations.
"""
def __init__(self,parent,funcCallbacks):
from ..core.DebugPrint import dbgPrint, Print
from ..core.structures.Tracer import IDATrace
from ..core.structures.Tracer.Config.config import ProcessConfig as ProcessConfig
super(TraceGeneratorWidget, self).__init__()
Print( "[|] loading TraceGenerationWidget" )
self.idaTracer = IDATrace(funcCallbacks)
self.processConfig = ProcessConfig()
self.parent = parent
self.name = "Trace Generation"
tracer_icon_path = os.path.join(self.parent.iconPath, "trace.png")
self.icon = QtGui.QIcon(tracer_icon_path)
self.QtGui = QtGui
self.QtCore = QtCore
self.central_widget = self.QtGui.QWidget()
self.setCentralWidget(self.central_widget)
self._createGui()
self.populateConfig()
def showStatus(self,message):
"""
Displays the status bar for the TREE Tracer
@param message: The message to display
@return: None
"""
frameStyle = QtGui.QFrame.Sunken | QtGui.QFrame.Panel
self.colorLabel = QtGui.QLabel()
self.colorLabel.setFrameStyle(frameStyle)
self.colorLabel.setStyleSheet("font:13pt; font-weight:bold; color:green");
self.colorLabel.setText(message)
#self.colorLabel.setAutoFillBackground(True)
self.statusbar.addWidget(self.colorLabel)
self.statusbar.show()
def hideStatus(self):
"""
Hides the status bar from the TREE Tracer
"""
self.statusbar.removeWidget(self.colorLabel)
def _createGui(self):
"""
Create the main GUI with its components
"""
self.statusbar = QtGui.QStatusBar(self)
self.statusbar.setObjectName("statusbar")
self.setStatusBar(self.statusbar)
self._createToolbar()
trace_layout = QtGui.QVBoxLayout()
self.filters_qb = QtGui.QGroupBox()
self.filters_qb.setObjectName("filters_qb")
self.gridLayoutWidget_2 = QtGui.QWidget(self.filters_qb)
self.gridLayoutWidget_2.setGeometry(QtCore.QRect(10, 10, 500, 300))
self.gridLayoutWidget_2.setObjectName("gridLayoutWidget_2")
self.gridLayout_2 = QtGui.QGridLayout(self.gridLayoutWidget_2)
self.gridLayout_2.setObjectName("gridLayout_2")
self.verticalLayout_3 = QtGui.QVBoxLayout()
self.verticalLayout_3.setObjectName("verticalLayout_3")
self.filename_label = QtGui.QLabel(self.gridLayoutWidget_2)
self.filename_label.setObjectName("filename_label")
self.verticalLayout_3.addWidget(self.filename_label)
self.filters_filename_table = QtGui.QTableWidget(self.gridLayoutWidget_2)
self.filters_filename_table.setObjectName("filters_filename_table")
self.verticalLayout_3.addWidget(self.filters_filename_table)
self.gridLayout_2.addLayout(self.verticalLayout_3, 0, 0, 1, 1)
self.verticalLayout_4 = QtGui.QVBoxLayout()
self.verticalLayout_4.setObjectName("verticalLayout_4")
self.network_port_label = QtGui.QLabel(self.gridLayoutWidget_2)
self.network_port_label.setObjectName("network_port_label")
self.verticalLayout_4.addWidget(self.network_port_label)
self.filters_network_port_table = QtGui.QTableWidget(self.gridLayoutWidget_2)
self.filters_network_port_table.setObjectName("filters_network_port_table")
self.verticalLayout_4.addWidget(self.filters_network_port_table)
self.gridLayout_2.addLayout(self.verticalLayout_4, 0, 1, 1, 1)
self.process_qbox = QtGui.QGroupBox()
self.process_qbox.setObjectName("process_qbox")
self.layoutWidget = QtGui.QWidget(self.process_qbox)
self.layoutWidget.setGeometry(QtCore.QRect(10, 10, 400, 30))
self.layoutWidget.setObjectName("layoutWidget")
self.horizontalLayout_8 = QtGui.QHBoxLayout(self.layoutWidget)
self.horizontalLayout_8.setObjectName("horizontalLayout_8")
self.name_label = QtGui.QLabel(self.layoutWidget)
self.name_label.setObjectName("name_label")
self.horizontalLayout_8.addWidget(self.name_label)
self.name_label_d = QtGui.QLabel(self.layoutWidget)
self.name_label_d.setObjectName("name_label_d")
self.horizontalLayout_8.addWidget(self.name_label_d)
self.os_label = QtGui.QLabel(self.layoutWidget)
self.os_label.setObjectName("os_label")
self.horizontalLayout_8.addWidget(self.os_label)
self.os_label_d = QtGui.QLabel(self.layoutWidget)
self.os_label_d.setObjectName("os_label_d")
self.horizontalLayout_8.addWidget(self.os_label_d)
self.params_qbox = QtGui.QGroupBox()
self.params_qbox.setObjectName("params_qbox")
self.gridLayoutWidget_3 = QtGui.QWidget(self.params_qbox)
self.gridLayoutWidget_3.setGeometry(QtCore.QRect(10, 10, 500, 300))
self.gridLayoutWidget_3.setObjectName("gridLayoutWidget_3")
self.gridLayout_3 = QtGui.QGridLayout(self.gridLayoutWidget_3)
self.gridLayout_3.setObjectName("gridLayout_3")
self.horizontalLayout_6 = QtGui.QHBoxLayout()
self.horizontalLayout_6.setObjectName("horizontalLayout_6")
self.host_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.host_label.setObjectName("host_label")
self.horizontalLayout_6.addWidget(self.host_label)
self.host_label_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.host_label_edit.setInputMask("000.000.000.000;_");
self.host_label_edit.setObjectName("host_label_edit")
self.horizontalLayout_6.addWidget(self.host_label_edit)
self.password_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.password_label.setObjectName("password_label")
self.horizontalLayout_6.addWidget(self.password_label)
self.password_label_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.password_label_edit.setObjectName("password_label_edit")
self.horizontalLayout_6.addWidget(self.password_label_edit)
self.port_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.port_label.setObjectName("port_label")
self.horizontalLayout_6.addWidget(self.port_label)
self.port_label_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.port_label_edit.setInputMask("00000");
self.port_label_edit.setObjectName("port_label_edit")
self.horizontalLayout_6.addWidget(self.port_label_edit)
self.gridLayout_3.addLayout(self.horizontalLayout_6, 2, 0, 1, 1)
self.remote_cb = QtGui.QCheckBox(self.gridLayoutWidget_3)
self.remote_cb.setObjectName("remote_cb")
self.remote_cb.stateChanged.connect(self.remote_cbStateChanged)
self.pin_cb = QtGui.QCheckBox(self.gridLayoutWidget_3)
self.pin_cb.setObjectName("pin_cb")
self.pin_cb.stateChanged.connect(self.pin_cbStateChanged)
#
# Checkboxes for Remote, Pin, Pin-Remote
#
self.gridLayout_3.addWidget(self.remote_cb, 1, 0, 1, 1)
self.gridLayout_3.addWidget(self.pin_cb, 1, 1, 1, 1)
self.configParaLayout1 = QtGui.QVBoxLayout()
self.configParaLayout1.setObjectName("configParaLayout1")
self.interactiveModeLayout = QtGui.QHBoxLayout()
self.interactiveModeLayout.setObjectName("interactiveModeLayout")
self.interactive_cb = QtGui.QCheckBox(self.gridLayoutWidget_3)
self.interactive_cb.setObjectName("interactive_cb")
self.interactive_cb.stateChanged.connect(self.interactive_cbStateChanged)
self.interactiveModeLayout.addWidget(self.interactive_cb)
self.configParaLayout1.addLayout(self.interactiveModeLayout)
self.horizontalLayout_7 = QtGui.QHBoxLayout()
self.horizontalLayout_7.setObjectName("horizontalLayout_7")
self.verticalLayout_5 = QtGui.QVBoxLayout()
self.verticalLayout_5.setObjectName("verticalLayout_5")
self.application_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.application_label.setObjectName("applicationlabel")
self.verticalLayout_5.addWidget(self.application_label)
self.path_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.path_label.setObjectName("path_label")
self.verticalLayout_5.addWidget(self.path_label)
self.arguments_label = QtGui.QLabel(self.gridLayoutWidget_3)
self.arguments_label.setObjectName("arguments_label")
self.verticalLayout_5.addWidget(self.arguments_label)
self.horizontalLayout_7.addLayout(self.verticalLayout_5)
self.verticalLayout_6 = QtGui.QVBoxLayout()
self.verticalLayout_6.setObjectName("verticalLayout_6")
self.application_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.application_edit.setObjectName("application_edit")
self.verticalLayout_6.addWidget(self.application_edit)
self.path_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.path_edit.setObjectName("path_edit")
self.verticalLayout_6.addWidget(self.path_edit)
self.arguments_edit = QtGui.QLineEdit(self.gridLayoutWidget_3)
self.arguments_edit.setObjectName("arguments_edit")
self.verticalLayout_6.addWidget(self.arguments_edit)
self.horizontalLayout_7.addLayout(self.verticalLayout_6)
self.configParaLayout1.addLayout(self.horizontalLayout_7)
self.gridLayout_3.addLayout(self.configParaLayout1, 0, 0, 1, 1)
self.retranslateUi()
splitter1 = QtGui.QSplitter(QtCore.Qt.Horizontal)
splitter1.addWidget(self.params_qbox)
splitter1.addWidget(self.filters_qb)
valueList1 = [5,95]
splitter1.setSizes(valueList1)
splitter2 = QtGui.QSplitter(QtCore.Qt.Vertical)
splitter2.addWidget(splitter1)
splitter2.addWidget(self.process_qbox)
valueList2 = [80,20]
splitter2.setSizes(valueList2)
trace_layout.addWidget(splitter2)
self.central_widget.setLayout(trace_layout)
def retranslateUi(self):
self.filters_qb.setTitle("Filters")
self.filename_label.setText("File Name:")
self.network_port_label.setText("Network Port:")
self.process_qbox.setTitle("Process Information")
self.name_label.setText("Name:")
self.name_label_d.setText("blank")
self.application_label.setText("Application: ")
self.os_label.setText("OS:")
self.os_label_d.setText("blank")
self.params_qbox.setTitle("Configurable Parameters")
self.host_label.setText("Host: ")
self.password_label.setText("Password: "******"Port ")
self.remote_cb.setText("Remote")
self.pin_cb.setText("PIN")
self.interactive_cb.setText("Interactive Mode")
self.path_label.setText("Path:")
self.arguments_label.setText("Arguments: ")
def _createToolbar(self):
"""
Create the toolbar
"""
self._createGenerateTraceAction()
self._createProcessAttachAction()
self._createSaveConfigAction()
self.toolbar = self.addToolBar('Trace Generation Toolbar')
self.toolbar.addAction(self.saveConfigAction)
self.toolbar.addAction(self.generateTraceAction)
self.toolbar.addAction(self.processAttachAction)
def _createGenerateTraceAction(self):
"""
Create that action that performs the trace
"""
icon_path = os.path.join(self.parent.iconPath,"trace.png")
self.generateTraceAction = QtGui.QAction(QtGui.QIcon(icon_path), "Generate the trace.", self)
self.generateTraceAction.triggered.connect(self.onGenerateTraceButtonClicked)
def _createProcessAttachAction(self):
"""
Create that action to attach to a process
"""
Print("Create Attach Action")
icon_path = os.path.join(self.parent.iconPath, "attach.png")
self.processAttachAction = QtGui.QAction(QtGui.QIcon(icon_path), "Attach to process.", self)
self.processAttachAction.triggered.connect(self.onAttachProcessButtonClicked)
def checkInteractiveMode(self):
"""
Interactive Mode - This is disabled for this version
"""
if self.idaTracer.taintStart is None or self.idaTracer.taintStop is None:
idc.Warning("Please set the starting and stopping points before using Interactive Mode")
return False
else:
return True
def onAttachProcessButtonClicked(self):
"""
Attaching to an exsiting process - This is disabled for this version
"""
#start debugging
self.getConfigFromGUI()
if not self.pin_cb.isChecked():
if self.checkInteractiveMode():
self.idaTracer.attach(self.processConfig)
else:
if self.remote_cb.isChecked():
if len(self.processConfig.host) > 0 :
port = int(self.processConfig.port,10)
self.pinCommunication(self.processConfig.host,port,True)
else:
#IDA alert box
Print("Please enter a host address to debug" )
else:
self.pinCommunication()
def onGenerateTraceButtonClicked(self):
"""
Button to trigger the trace generation
"""
#start debugging
self.getConfigFromGUI()
interactiveMode = self.interactive_cb.isChecked()
if interactiveMode:
if self.checkInteractiveMode():
self.idaTracer.interactive(self.processConfig)
Print("Using interactive mode.")
else:
if not self.pin_cb.isChecked():
self.idaTracer.run(self.processConfig)
else:
if self.remote_cb.isChecked():
if len(self.processConfig.host) > 0 :
port = int(self.processConfig.port,10)
self.pinCommunication(self.processConfig.host,port,True)
else:
#IDA alert box
Print("Please enter a host address to debug" )
else:
self.pinCommunication()
def _createSaveConfigAction(self):
"""
Save the current configuration to config.xml
"""
#from PySide.QtGui import QIcon
icon_path = os.path.join(self.parent.iconPath,"save.png")
self.saveConfigAction = QtGui.QAction(QtGui.QIcon(icon_path), "Save config", self)
self.saveConfigAction.triggered.connect(self.onSaveConfigButtonClicked)
def getConfigFromGUI(self):
"""
Grabs the current configuration parameters from the GUI
"""
from ..core.DebugPrint import dbgPrint, Print
#Get all the process config data from the GUI
self.processConfig.application = str(self.application_edit.text())
self.processConfig.path = str(self.path_edit.text())
self.processConfig.args = str(self.arguments_edit.text())
self.processConfig.host = str(self.host_label_edit.text())
self.processConfig._pass = str(self.password_label_edit.text())
self.processConfig.port = str(self.port_label_edit.text())
#Hardcoded debugger until we integrate kernel trace
#self.processConfig.debugger =
if self.remote_cb.isChecked():
self.processConfig.remote = "True"
else:
self.processConfig.remote = "False"
tempFileFilter = []
for row in range(self.filters_filename_table.rowCount()):
data = self.filters_filename_table.item(row, 0).text()
#Print( "Adding file %s" % data )
tempFileFilter.append(data)
if len(tempFileFilter) > 0:
self.processConfig.fileFilter = tempFileFilter
else:
self.processConfig.fileFilter = None
tempNetworkFilter = []
for row in range(self.filters_network_port_table.rowCount()):
data = self.filters_network_port_table.item(row, 0).text()
Print( "Adding port %s" % data )
tempNetworkFilter.append(data)
if len(tempNetworkFilter) > 0:
self.processConfig.networkFilter = tempNetworkFilter
else:
self.processConfig.networkFilter = None
def onSaveConfigButtonClicked(self):
"""
Save configuration button
"""
from dispatcher.core.structures.Tracer.Config.config import ProcessConfig as ProcessConfig
self.getConfigFromGUI()
self.idaTracer.setProcessConfig(self.processConfig)
def populateConfig(self):
"""
Populate the GUI with configuration parameters from config.xml
"""
from ..core.DebugPrint import dbgPrint, Print
self.processConfig = self.idaTracer.getProcessConfig()
if self.processConfig is None:
Print( "Error, we need to add a new config" )
Print( "Should not get here!!!" )
else:
self.application_edit.setText(self.processConfig.getApplication())
self.path_edit.setText(self.processConfig.getPath())
self.name_label_d.setText(self.processConfig.getName())
self.os_label_d.setText(self.processConfig.getOsType() + " " + self.processConfig.getOsArch() + " Bit")
self.arguments_edit.setText(self.processConfig.getArgs())
#sdir = self.processConfig.getSdir()
self.host_label_edit.setText(self.processConfig.getHost())
self.password_label_edit.setText(self.processConfig.getPass())
#_debugger = self.processConfig.getDebugger()
#port = int(self.processConfig.getPort())
self.port_label_edit.setText(self.processConfig.getPort())
if self.processConfig.getRemote()=="True":
self.remote_cb.setCheckState(self.QtCore.Qt.Checked)
self.host_label_edit.setEnabled(1)
self.password_label_edit.setEnabled(1)
self.port_label_edit.setEnabled(1)
else:
self.remote_cb.setCheckState(self.QtCore.Qt.Unchecked)
self.host_label_edit.setDisabled(1)
self.password_label_edit.setDisabled(1)
self.port_label_edit.setDisabled(1)
self.filters = dict()
fileFilter = self.processConfig.getFileFilter()
if fileFilter is not None:
Print( "Found %d file filters" % len(fileFilter) )
self.populateFiltersTable(fileFilter, self.filters_filename_table)
else:
Print( "No file filters found" )
networkFilter = self.processConfig.getNetworkFilter()
if networkFilter is not None:
Print( "Found %d network filters" % len(networkFilter) )
self.populateFiltersTable(networkFilter, self.filters_network_port_table)
else:
Print( "No network filters found" )
def populateFiltersTable(self, _filter, filter_table):
"""
Populates the filter table with values
"""
table_header_labels = ["Value"]
filter_table.clear()
filter_table.setColumnCount(len(table_header_labels))
filter_table.setHorizontalHeaderLabels(table_header_labels)
filter_table.setRowCount(len(_filter))
filter_table.setContextMenuPolicy(self.QtCore.Qt.CustomContextMenu)
if filter_table.objectName() == "filters_filename_table":
filter_table.customContextMenuRequested.connect(self.handleFileFilterMenu)
elif filter_table.objectName() == "filters_network_port_table":
filter_table.customContextMenuRequested.connect(self.handleNetworkFilterMenu)
for row, node in enumerate(_filter):
tmp_item = self.QtGui.QTableWidgetItem(node)
tmp_item.setFlags(tmp_item.flags() & ~self.QtCore.Qt.ItemIsEditable)
filter_table.setItem(row, 0, tmp_item)
filter_table.resizeRowToContents(row)
filter_table.setSelectionMode(self.QtGui.QAbstractItemView.SingleSelection)
filter_table.resizeColumnsToContents()
filter_table.setSortingEnabled(True)
def handleFileFilterMenu(self, pos):
menu = self.QtGui.QMenu()
add = self.QtGui.QAction("Add", menu)
add.setStatusTip("Add a filter")
self.connect(add, self.QtCore.SIGNAL('triggered()'), self.addFileFilter)
menu.addAction(add)
delete = self.QtGui.QAction("Delete", menu)
delete.setStatusTip("Delete a filter")
self.connect(delete, self.QtCore.SIGNAL('triggered()'), self.delFileFilter)
menu.addAction(delete)
menu.exec_(self.QtGui.QCursor.pos())
def handleNetworkFilterMenu(self, pos):
menu = self.QtGui.QMenu()
add = self.QtGui.QAction("Add", menu)
add.setStatusTip("Add a filter")
self.connect(add, self.QtCore.SIGNAL('triggered()'), self.addNetworkFilter)
menu.addAction(add)
delete = self.QtGui.QAction("Delete", menu)
delete.setStatusTip("Delete a filter")
self.connect(delete, self.QtCore.SIGNAL('triggered()'), self.delNetworkFilter)
menu.addAction(delete)
menu.exec_(self.QtGui.QCursor.pos())
def addFileFilter(self):
self.filters_filename_table.insertRow(self.filters_filename_table.rowCount())
self.filters_filename_table.setItem(self.filters_filename_table.rowCount()-1, 0, self.QtGui.QTableWidgetItem(" "))
def delFileFilter(self):
self.filters_filename_table.removeRow(self.filters_filename_table.currentItem().row())
def addNetworkFilter(self):
self.filters_network_port_table.insertRow(self.filters_network_port_table.rowCount())
self.filters_network_port_table.setItem(self.filters_network_port_table.rowCount()-1, 0, self.QtGui.QTableWidgetItem(" "))
def delNetworkFilter(self):
self.filters_network_port_table.removeRow(self.filters_network_port_table.currentItem().row())
def remote_cbStateChanged(self,state):
"""
triggered when the remote debugger button changes state
"""
if state == self.QtCore.Qt.Checked:
self.host_label_edit.setEnabled(1)
self.password_label_edit.setEnabled(1)
self.port_label_edit.setEnabled(1)
else:
self.host_label_edit.setDisabled(1)
self.password_label_edit.setDisabled(1)
self.port_label_edit.setDisabled(1)
def pin_cbStateChanged(self,state):
"""
triggered when the pin button changes state
"""
if state == self.QtCore.Qt.Checked:
self.path_edit.selectAll()
def interactive_cbStateChanged(self,state):
"""
triggered when the interactive button changes state
"""
if state == self.QtCore.Qt.Checked:
self.showStatus("Interactive Mode: Please set the starting (shift-a) and ending (shift-z) points.")
self.filters_qb.setDisabled(1)
else:
self.hideStatus()
self.filters_qb.setEnabled(1)
def pinCommunication(self, host="127.0.0.1",port=23966,bRemote=False):
#
# Most of this is stub code, waiting on the pin agent implementation
#
import socket
import time
HOST = host
PORT = port
ff = None
nf = None
Print("Connecting to %s:%d" % (HOST,PORT))
if self.processConfig.getFileFilter()!=None:
ff = ";".join(self.processConfig.getFileFilter())
if self.processConfig.getNetworkFilter()!=None:
nf = ";".join(self.processConfig.getNetworkFilter())
if(ff!=None and nf!=None):
packet = self.processConfig.getPath() + " " + self.processConfig.getArgs() + "!FF=" + ff + "!NF=" + nf
elif(ff!=None):
packet = self.processConfig.getPath() + " " + self.processConfig.getArgs() + "!FF=" + ff
elif(nf!=None):
packet = self.processConfig.getPath() + " " + self.processConfig.getArgs() + "!NF=" + nf
else:
packet = self.processConfig.getPath() + " " + self.processConfig.getArgs()
"""
Todo: Integrate this in the future, requires a patch in idaapi.py
if bRemote==False:
PID = self.idaTracer.getRunningProcesses("PinAgent.exe")
if PID == -1:
Print("Starting PinAgent ...")
os.startfile('"C:/Program Files/IDA 6.4/plugins/dispatcher/core/structures/PinAgent/PinAgent.exe"')
#idc.Exec('"C:/Program Files/IDA 6.4/plugins/dispatcher/core/structures/PinAgent/PinAgent.exe"')
time.sleep(5)
"""
#File filter
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((HOST, PORT))
s.send(packet)
data = s.recv(1024)
print data
#if data == "Trace is ready!":
# data = s.recv(1024)
s.close()
#
#while len(msg) < MSGLEN:
# chunk = s.recv(MSGLEN-len(msg))
# if chunk = '';
# raise RuneTimeError("socket connect broken")
# msg = msg + chunk
#
with open('trace.txt', 'w') as f:
f.write(data)