Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/emulate/__pycache__/traffic.cpython-36.pyc
Ðазад
3 �I�d�S � � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZm Z d dl m Z m Z m Z mZ d dlmZ d dlmZ d dlmZ d dlZd dlmZ d dlmZ d d lmZmZm Z d d lm Z d d l m Z d d lm Z d d lm!Z! d dl"m#Z# d dl$Z$d dl%m&Z&m'Z'm(Z( d dl)m*Z* d dl+m,Z,m-Z-m.Z.m/Z/ d dl0m1Z1 d dl2m3Z3 d dl2m4Z4 d dl5m6Z6 d dl7m8Z8 d dl9Z9dZ:dZ;dZ<dZ=�d d �d d �d!d �d"d �d#d �d$d �d%d �d&d �d'd i Z>�d(d �d)d �d*d �d+d �d,d �d-d �d.d �d/d iZ?d d-d.d/hZ@d0ZAd eA ZB�d2ZCd ZDe8eEd3�ZFd4d5� ZGd6d7� ZHd8d9� ZIG d:d;� d;eJ�ZKG d<d=� d=eL�ZMd>d?� ZNd@dA� ZOG dBdC� dCeL�ZPG dDdE� dEeL�ZQG dFdG� dGeL�ZRG dHdI� dIeR�ZS�d3dKdL�ZTdMdN� ZUdOdP� ZVdQdR� ZWG dSdT� dTeL�ZX�d4dVdW�ZYd$dXdXdXdXdXd$dXdXdXdXdXd$d$dXd$dY�ZZ�d5d[�d6d]�d7d_�d8da�d9dc�d:de�d;df�d<dg�d=dh�d>di�d?dj�d@dk�dAdl�dBdm�dCdo�dDdp�dEdq�dFdr�dGdt�dHdu�dIdv�dJdw�dKdx�dLdy�dMdz�dNd|�dOd~�dPd�dQd��dRd��dSdf�dTd��dUdg�dVd��dWd��dXd��dYd��dZd��d[d��d\d��d]d��d^dq�d_dr�d`d��dad��dbd��dcd��ddd��ded��dfd��dgd��dhd��did��djd��dkd��dld��dmd��dnd��dod��dpd��dqd��drd��dsd��dtd��dud��dvd��dwd��dxd��dyd��dzd��d{d��d|dd}dÐd~dŐddǐd�dɐd�dːd�d̐d�d͐d�dΐd�dϐd�dАd�dѐd�dҐd�dӐd�dԐd�dՐd�d��d�dd�dؐd�dڐd�dܐd�d�i]Z[d�d߄ Z\d�d� Z]�d�d�d�Z^�d�d�d�Z_�d�d�d�Z`d�d� Zad�d� Zbd�d� Zced�d��Zdd�d�� Ze�d�d�d��Zfd�d�� Zgd�d�� Zhd�d�� Zi�d��d�d�Zj�d�d� Zk�d��d�d�Zl�d��d�d�Zm�d �d � Zn�d �d � Zo�d �d� Zp�d��d�d�ZqG �d�d� �deL�Zr�d�d� Zs�d�d� Zt�d�d� Zu�d�d� Zv�d�d � Zw�d �d � ZxdS (� � N)�ECHILD�ESRCH)� OrderedDict�Counter� defaultdict� namedtuple)�query)�traffic_packets)�SamDB)�LdbError)�ClientConnection)�security�drsuapi�lsa)�netlogon)�netr_Authenticator)�srvsvc)�samr)� drs_DsBind)� Credentials�DONT_USE_KERBEROS�MUST_USE_KERBEROS)�system_session)�UF_NORMAL_ACCOUNT�UF_SERVER_TRUST_ACCOUNT�UF_TRUSTED_FOR_DELEGATION� UF_WORKSTATION_TRUST_ACCOUNT)� SEC_CHAN_BDC)�gensec)�sd_utils)� get_string)�get_samba_logger� ga2U0*�3?�-�dns�0� �?�smb�0x72�ldap�3�2�cldap�dcerpc�11�14�nbns�1�4�5�12�13�15�smb2�browser� smb_netlogong $@� � )�namec G s6 | t kr2|s t|tjd� nt|t|� tjd� dS )a� Print a formatted debug message to standard error. :param level: The debug level, message will be printed if it is <= the currently set debug level. The debug level can be set with the -d option. :param msg: The message to be logged, can contain C-Style format specifiers :param args: The parameters required by the format specifiers )�fileN)� DEBUG_LEVEL�print�sys�stderr�tuple)�level�msg�args� rF � /usr/lib64/python3.6/traffic.py�debuge s rH c G sj t jdd�}td|d d |d d f dtjd� x| D ]}t|tjd� q:W ttjd� tjj� d S ) zL Print an unformatted log message to stderr, containing the line number r" )�limitz %s:[01;33m%s [00mr � � )�endr= )r= N)� traceback� extract_stackr? r@ rA �flush)rE �tb�arF rF rG � debug_linenow s rR c sT | rHd}x$| D ] }|d7 }||9 }|d; }qW dd| � � fdd�}ndd� }|S )z�Return a function that prints a coloured line to stderr. The colour of the line depends on a sort of hash of the integer arguments.�� � z [38;5;%dm� c s0 t dkr,x"| D ]}td� |f tjd� qW d S )Nr z %s%s[00m)r= )r> r? r@ rA )rE rQ )�prefixrF rG �p� s z random_colour_print.<locals>.pc W s( t dkr$x| D ]}t|tjd� qW d S )Nr )r= )r> r? r@ rA )rE rQ rF rF rG rW � s rF )Zseeds�s�xrW rF )rV rG �random_colour_print� s rZ c @ s e Zd ZdS )�FakePacketErrorN)�__name__� __module__� __qualname__rF rF rF rG r[ � s r[ c @ st e Zd ZdZd$Zd d � Zedd� �Zd%dd�Zdd� Z dd� Z dd� Z dd� Z dd � Z d d � Zd d � Zd&d"d#�Zd!S )'�PacketzDetails of a network packet� timestamp� ip_protocol� stream_number�src�dest�protocol�opcode�desc�extra� endpointsc C sd || _ || _|| _|| _|| _|| _|| _|| _| | _| j| jk rR| j| jf| _ n| j| jf| _ d S )N) r` ra rb rc rd re rf rg rh ri ) �selfr` ra rb rc rd re rf rg rh rF rF rG �__init__� s zPacket.__init__c C sh |j d�jd�}|d d� \}}}}}}} } |dd � } t|�}t|�}t|�}| ||||||| | | � S )N� � � )�rstrip�split�float�int) �cls�line�fieldsr` ra rb rc rd re rf rg rh rF rF rG � from_line� s zPacket.from_line� c C sF dj | j�}| j| }|d|| j| jp(d| j| j| j| j| j |f fS )z5Format the packet as a traffic_summary line. rm z%f %s %s %d %d %s %s %s %s� ) �joinrh r` ra rb rc rd re rf rg )rj Z time_offsetrh �trF rF rG � as_summary� s zPacket.as_summaryc C sH d| j | j| j| jpd| j| j| j| j| jr@ddj | j� d ndf S )Nz:%.3f: %d -> %d; ip %s; strm %s; prot %s; op %s; desc %s %sr# � «rK � »rx ) r` rc rd ra rb re rf rg rh ry )rj rF rF rG �__str__� s zPacket.__str__c C s d| S )Nz <Packet @%s>rF )rj rF rF rG �__repr__� s zPacket.__repr__c C s, | j | j| j| j| j| j| j| j| j| j � S )N) � __class__r` ra rb rc rd re rf rg rh )rj rF rF rG �copy� s z Packet.copyc C s d| j | jf }|S )Nz%s:%s)re rf )rj rz rF rF rG �as_packet_type� s zPacket.as_packet_typec C s2 | j | jf}|tkr t| S |tkr.t| S dS )z�A positive number means we think it is a client; a negative number means we think it is a server. Zero means no idea. range: -1 to 1. g )re rf � CLIENT_CLUES� SERVER_CLUES)rj �keyrF rF rG � client_score� s zPacket.client_scorec " C s d| j | jf }ytt|�}W n8 tk rV } z td|j|f tjd� dS d}~X nX | j dkrvt dd|j|f � t j � }y<|| ||�r�t j � }|| }td||j| j | j|f � W nR t k �r } z4t j � }|| }td ||j| j | j||f � W Y dd}~X nX dS ) z�Send the packet over the network, if required. Some packets are ignored, i.e. for protocols not handled, server response messages, or messages that are generated by the protocol layer associated with other packets. z packet_%s_%sz#Conversation(%s) Missing handler %s)r= N�kerberosr" z#Conversation(%s) Calling handler %sz%f %s %s %s %f True z%f %s %s %s %f False %s) re rf �getattrr �AttributeErrorr? �conversation_idr@ rA rH �time� Exception) rj � conversation�context�fn_name�fn�e�startrL �durationrF rF rG �play s2 z Packet.playc C s | j |j S )N)r` )rj �otherrF rF rG �__cmp__+ s zPacket.__cmp__Nc C s t | j| j�S )N)�is_a_real_packetre rf )rj Zmissing_packet_statsrF rF rG �is_really_a_packet. s zPacket.is_really_a_packet) r` ra rb rc rd re rf rg rh ri )rw )N)r\ r] r^ �__doc__� __slots__rk � classmethodrv r{ r~ r r� r� r� r� r� r� rF rF rF rG r_ � s, (r_ c C sj | t kr dS | dkr |dkr dS d| |f }tt|d�}|dkrXtjd| tjd� dS |tjkrfdS dS ) zdIs the packet one that can be ignored? If so removing it will have no effect on the replay Fr) rx z packet_%s_%sNzmissing packet %s)r= T)�SKIPPED_PROTOCOLSr� r �LOGGERrH r@ rA Z null_packet)re rf r� r� rF rF rG r� 2 s r� c C s& | dkr dS | |fdkr dS t | |�S )z�Return true if a packet generates traffic in its own right. Some of these will generate traffic in certain contexts (e.g. ldap unbind after a bind) but not if the conversation consists only of these packets. �waitFr� rx r) r+ r- r6 �16�r� rx �r) r+ �r- r6 �r- r� )r� r� r� r� )r� )re rf rF rF rG � is_a_traffic_generating_packetH s r� c @ s� e Zd ZdZddddddddddejjd�ddf dd�Zdd� Zdd � Z d d � Z d d � Z dd� Z dd� Z d+dd�Zd,dd�Zd-dd�Zd.dd�Zd/dd �Zd0d d �Zd1d d �Zd2d!d"�Zd#d$� Zd%d&� Zd'd(� Zd)d*� ZdS )3� ReplayContextaW State/Context for a conversation between an simulated client and a server. Some of the context is shared amongst all conversations and should be generated before the fork, while other context is specific to a particular conversation and should be generated *after* the fork, in generate_process_local_config(). NZDOMAINc C s� || _ d | _|| _|| _|r$t| _nt| _| | _| | _| | _ || _ || _ | | _ |j d�| _| | _|| _d| _d| _d| _d| _d| _d| _d| _d| _|| _| j� d S )N�realmF)�server�netlogon_connection�creds�lpr �kerberos_stater �ou�base_dn�domain�statsdir�global_tempdir� domain_sid�getr� � instance_id�badpassword_frequency�last_lsarpc_bad�last_lsarpc_named_bad�last_simple_bind_bad� last_bind_bad�last_srvsvc_bad�last_drsuapi_bad�last_netlogon_badZlast_samlogon_bad�total_conversations�generate_ldap_search_tables)rj r� r� r� r� r� Zprefer_kerberos�tempdirr� r� r� r� r� r� rF rF rG rk a s4 zReplayContext.__init__c C s t � }td| j || j| jd�}|j|j� tjdgdgd�}i }dg i}xb|D ]Z}t |j �}dj dd � |j d�D ��j � }|j|g �} | j|� |jd �rN|d j|� qNW x�t|j� �D ]�} | d!d � d kr�q�| d d"� } x"| d#d � d k� r�| d d$� } q�W xTtd �D ]H} | d 7 } | | k�rD| |k�rDtd| | f tjd� �q || || < �q W q�W || _|| _i | _|j|j� tjdgdd�}dj dd � |D ��} dj| �| jd< d}x"d%D ]}|dj||j� �7 }�q�W dj|�| jd< d| jd< |jdtjd gd �}d j|d d �| jd < d S )&Nz ldap://%s)�url� session_info� credentialsr� zpaged_results:1:1000�dn)�scopeZcontrols�attrsZ invocationId�,c s s | ]}|j � d d� V qd S )Nr" )�lstrip)�.0rY rF rF rG � <genexpr>� s z<ReplayContext.generate_ldap_search_tables.<locals>.<genexpr>zCN=NTDS Settings,r; z,DC� zdn_map collision %s %s)r= z"(objectclass=groupPolicyContainer))r� r� � expressionrx c s s | ]}d j |d �V qdS )z(distinguishedName={0})r� N)�format)r� rD rF rF rG r� � s z(|{0})ZgPCFileSysPath�Domain Controllers,�traffic_replay,z(distinguishedName={0}{1})ZgpLinkz'(objectCategory=pKICertificateTemplate)ZpKIExtendedKeyUsageZhighestCommittedUSN)r� r� z(usnChanged>={0})r Z usnChanged���r� r� r� )r� r� rx ) r r r� r� r� �search� domain_dn�ldbZ SCOPE_SUBTREE�strr� ry rp �upper� setdefault�append� startswith�list�keys�ranger? r@ rA �dn_map�attribute_clue_map�search_filtersr� Z SCOPE_BASE)rj �session�db�resr� r� �rr� �patternr$ �krW �iZ gpos_by_dnZou_strr� rF rF rG r� � sZ z)ReplayContext.generate_ldap_search_tablesc C sT x$| j j� D ]}||kr | j | S q W |dkrPtj� | j }t| j|�}d| S dS )NzDC,DCz((&(sAMAccountName=%s)(objectClass=user))z(objectClass=*))r� r� �randomr� � user_namer� )rj r� Zdn_sigr� r� Zrandom_user_idZ account_namerF rF rG �guess_search_filter� s z!ReplayContext.guess_search_filterc C s� g | _ g | _g | _g | _g | _g | _g | _|j| _|j| _|j | _ |j | _ t | j d|j �| _| jjd| j� | jjd| j� | jjd| j� | jjdd� d| _d| j| jf | _d| j | jf | _| j� | j� d S ) Nzconversation-%dz private dirzlock dirzstate directoryztls verify peerZno_checkz/root/ncalrpc_as_systemzcn=%s,%s)�ldap_connections�dcerpc_connections�lsarpc_connections�lsarpc_connections_named�drsuapi_connections�srvsvc_connections� samr_contexts� netbios_name� machinepass�username�userpass� mk_masked_dirr� r� r� r� �setZ remoteAddressr� Z samlogon_dn�user_dn�generate_machine_creds�generate_user_creds)rj �accountr� rF rF rG � generate_process_local_config� s2 z+ReplayContext.generate_process_local_configc C sT |sD| j r@tj� | j k r@y ||� W n tk r8 Y nX d}nd}||�}||fS )a Execute the supplied logon function, randomly choosing the bad credentials. Based on the frequency in badpassword_frequency randomly perform the function with the supplied bad credentials. If run with bad credentials, the function is re-run with the good credentials. failed_last_time is used to prevent consecutive bad credential attempts. So the over all bad credential frequency will be lower than that requested, but not significantly. TF)r� r� r� )rj �fZgoodZbadZfailed_last_time�resultrF rF rG �with_random_bad_credentials s z)ReplayContext.with_random_bad_credentialsc C s� t � | _| jj| j� | jj| j� | jj| j� | jj| j � | jj | j � | jj | j � t � | _| jj| j� | jj| j� | jj| jdd� � | jj| j � | jj | j � t � | _| jj| j� | jj| j� | jj| j� | jj| j � | jj| jj� tjB � | jj | j � | jj| j� t � | _| jj| j� | jj| j� | jj| jdd� � | jj| j � | jj| jj� tjB � | jj | j � | jj| j� dS )a; Generate the conversation specific user Credentials. Each Conversation has an associated user account used to simulate any non Administrative user traffic. Generates user credentials with good and bad passwords and ldap simple bind credentials with good and bad passwords. N� ���r� )r � user_creds�guessr� �set_workstationr� � set_passwordr� � set_usernamer� � set_domainr� �set_kerberos_stater� �user_creds_bad�simple_bind_credsZset_gensec_featuresZget_gensec_featuresr Z FEATURE_SEALZ set_bind_dnr� �simple_bind_creds_bad)rj rF rF rG r� 1 s@ z!ReplayContext.generate_user_credsc C s� t � | _| jj| j� | jj| j� | jjt� | jj| j � | jj | jd � | jj | j � | jj | j� t � | _| jj| j� | jj| j� | jjt� | jj| j dd� � | jj | jd � | jj | j� dS )z�Generate the conversation specific machine Credentials. Each Conversation has an associated machine account. Generates machine credentials with good and bad passwords. �$Nr� r� )r � machine_credsr� r� r r� Zset_secure_channel_typer r r� r r r� r r� �machine_creds_bad)rj rF rF rG r� _ s z$ReplayContext.generate_machine_credsc C sX | j j|�}|rtj|�S |j� }x.|rP|| jkrBtj| j| �S |dd � }q$W | jS )Nr; )r� r� r� �choicer� r� r� )rj r� Z attributesZ attr_cluerF rF rG �get_matching_dnx s z ReplayContext.get_matching_dnFc C sB d}| j r| r| j d S td| j |df| j�}| j j|� |S )Nz$12345678-1234-abcd-ef00-01234567cffbrJ zncacn_ip_tcp:%s���)r� r r� r� r� )rj �newZguid�crF rF rG �get_dcerpc_connection� s z#ReplayContext.get_dcerpc_connectionc sN � j r| r� j d S � fdd�}� j|� j� j� j�\}� _� j j|� |S )NrJ c s t j d� j � j| �S )Nz ncacn_np:%s)r r� r� )r� )rj rF rG �connect� s z4ReplayContext.get_srvsvc_connection.<locals>.connectr )r� r� r� r r� r� )rj r r r rF )rj rG �get_srvsvc_connection� s z#ReplayContext.get_srvsvc_connectionc sN � j r| r� j d S � fdd�}� j|� j� j� j�\}� _� j j|� |S )NrJ c s d}t jd� j|f � j| �S )Nzschannel,seal,signzncacn_ip_tcp:%s[%s])r �lsarpcr� r� )r� �binding_options)rj rF rG r � s z4ReplayContext.get_lsarpc_connection.<locals>.connectr )r� r� r r r� r� )rj r r r rF )rj rG �get_lsarpc_connection� s z#ReplayContext.get_lsarpc_connectionc sN � j r| r� j d S � fdd�}� j|� j� j� j�\}� _� j j|� |S )NrJ c s t jd� j � j| �S )Nz ncacn_np:%s)r r r� r� )r� )rj rF rG r � s z?ReplayContext.get_lsarpc_named_pipe_connection.<locals>.connectr )r� r� r r r� r� )rj r r r rF )rj rG � get_lsarpc_named_pipe_connection� s z.ReplayContext.get_lsarpc_named_pipe_connectionc sf � j r| r� j d }|S � fdd�}� j|� j� j� j�\}� _t|�\}}||f}� j j|� |S )z get a (drs, drs_handle) tuplerJ c s" d}d� j |f }tj|� j| �S )NZsealzncacn_ip_tcp:%s[%s])r� r r� )r� r Zbinding_string)rj rF rG r � s z:ReplayContext.get_drsuapi_connection_pair.<locals>.connectr )r� r� r� r r� r r� )rj r Zunbindr r ZdrsZ drs_handleZsupported_extensionsrF )rj rG �get_drsuapi_connection_pair� s z)ReplayContext.get_drsuapi_connection_pairc s| � j r| r� j d S � fdd�}� fdd�}|rP� j|� j� j� j�\}� _n � j|� j� j� j�\}� _� j j|� |S )NrJ c s t d� j | � jd�S )a$ To run simple bind against Windows, we need to run following commands in PowerShell: Install-windowsfeature ADCS-Cert-Authority Install-AdcsCertificationAuthority -CAType EnterpriseRootCA Restart-Computer z ldaps://%s)r� r� )r r� r� )r� )rj rF rG � simple_bind� s z6ReplayContext.get_ldap_connection.<locals>.simple_bindc s t d� j | � jd�S )Nz ldap://%s)r� r� )r r� r� )r� )rj rF rG � sasl_bind� s z4ReplayContext.get_ldap_connection.<locals>.sasl_bindr ) r� r� r r r� r� r r� r� )rj r Zsimpler r ZsamdbrF )rj rG �get_ldap_connection� s z!ReplayContext.get_ldap_connectionc C s2 | j s |r(| j jt| j| j| jd�� | j d S )N)r� r� rJ r )r� r� � SamrContextr� r� r� )rj r rF rF rG �get_samr_context s z ReplayContext.get_samr_contextc s> � j r � j S � fdd�}� j|� j� j� j�\}� _|� _ |S )Nc s t j d� j � j| �S )Nz ncacn_ip_tcp:%s[schannel,seal])r r� r� )r� )rj rF rG r s z6ReplayContext.get_netlogon_connection.<locals>.connect)r� r� r r r� )rj r r rF )rj rG �get_netlogon_connection s z%ReplayContext.get_netlogon_connectionc C s | j dfS )N�A)r� )rj rF rF rG �guess_a_dns_lookup$ s z ReplayContext.guess_a_dns_lookupc C s> | j j� }t� }dd� |d D �|j_|d |_t� }||fS )Nc S s" g | ]}t |t�r|nt|��qS rF )� isinstancerr �ord)r� rY rF rF rG � <listcomp>* s z3ReplayContext.get_authenticator.<locals>.<listcomp>Z credentialr` )r Znew_client_authenticatorr Zcred�datar` )rj ZauthZcurrentZ subsequentrF rF rG �get_authenticator' s z ReplayContext.get_authenticatorc K sP t jj| j|�}t|d�}x(|j� D ] \}}td||f |d� q$W |j� dS )z�Write arbitrary key/value pairs to a file in our stats directory in order for them to be picked up later by another process working out statistics.�wz%s: %s)r= N)�os�pathry r� �open�itemsr? �close)rj �filename�kwargsr� r� �vrF rF rG � write_stats1 s zReplayContext.write_stats)N)F)F)F)F)FF)FF)F)r\ r] r^ r� r& �environr� rk r� r� r� r� r� r� r r r r r r r r r r r$ r. rF rF rF rG r� Z s@ W . & r� c @ s* e Zd ZdZd dd�Zdd� Zdd� ZdS ) r z5State/Context associated with a samr connection. Nc C s@ d | _ d | _d | _d | _d | _d | _d | _|| _|| _|| _ d S )N) � connection�handleZ domain_handler� Z group_handleZ user_handleZridsr� r� r� )rj r� r� r� rF rF rG rk ? s zSamrContext.__init__c C s( | j s"tjd| j | j| jd�| _ | j S )Nzncacn_ip_tcp:%s[seal])Zlp_ctxr� )r0 r r� r� r� )rj rF rF rG �get_connectionK s zSamrContext.get_connectionc C s$ | j s | j� }|jd tj�| _ | j S )N)r1 r2 ZConnect2r ZSEC_FLAG_MAXIMUM_ALLOWED)rj r rF rF rG � get_handleT s zSamrContext.get_handle)NN)r\ r] r^ r� rk r2 r3 rF rF rF rG r < s r c @ s� e Zd ZdZddf dfdd�Zdd� Zdd� Zd d d �Zd d � ZeZ dd� Z dd� Z dd� Z dd� Z d dd�Zd dd�Zdd� Zd d � ZdS )!� ConversationzADetails of a converation between a simulated client and a server.Nc C sD || _ || _g | _t|�| _d| _|| _x|D ]}| j|� q.W d S )Ng )� start_timeri �packetsrZ rD �client_balancer� �add_short_packet)rj r5 ri �seqr� rW rF rF rG rk ] s zConversation.__init__c C s6 | j d kr |j d krdS dS |j d kr*dS | j |j S )Nr rJ r )r5 )rj r� rF rF rG r� h s zConversation.__cmp__c C s� |j � }| jdkr|j| _| jdkr,|j| _|j| jkrLtd| j|jf ��| j| j8 _|j|jd kr�| j|j� 8 _n| j|j� 7 _|j� r�| j j |� dS )zmAdd a packet object to this conversation, making a local copy with a conversation-relative timestamp.Nz8Conversation endpoints %s don't matchpacket endpoints %sr ) r� r5 r` ri r[ rc r7 r� r� r6 r� )rj �packetrW rF rF rG � add_packetq s zConversation.add_packetTc C s� |rt ||� rdS | j� \}}|s.|| }}||f} tj| d�} tj|d�} t|| j | d||||| |� } | j| jd kr�| j | j � 8 _ n| j | j � 7 _ | j � r�| j j | � dS )z�Create a packet from a timestamp, and 'protocol:opcode' pair, and a (possibly empty) list of extra data. If client is True, assume this packet is from the client to the server. Nrx �06r )r� �guess_client_server�OP_DESCRIPTIONSr� � IP_PROTOCOLSr_ r5 rc ri r7 r� r� r6 r� ) rj r` re rf rh �clientZskip_unused_packetsrc rd r� rg ra r: rF rF rG r8 � s z Conversation.add_short_packetc C s d| j | j| jt| j�f S )Nz-<Conversation %s %s starting %.3f %d packets>)r� ri r5 �lenr6 )rj rF rF rG r~ � s zConversation.__str__c C s t | j�S )N)�iterr6 )rj rF rF rG �__iter__� s zConversation.__iter__c C s t | j�S )N)rA r6 )rj rF rF rG �__len__� s zConversation.__len__c C s* t | j�dk rdS | jd j| jd j S )Nr" r rJ r )rA r6 r` )rj rF rF rG � get_duration� s zConversation.get_durationc s � fdd�� j D �S )Nc s g | ]}|j � j��qS rF )r{ r5 )r� rW )rj rF rG r" � s z8Conversation.replay_as_summary_lines.<locals>.<listcomp>)r6 )rj rF )rj rG �replay_as_summary_lines� s z$Conversation.replay_as_summary_linesc C s� | j }tj� | }|| }|t }|dkr4tj|� tj� | | }| jd| |f � d} d} tj� } x�| jD ]z} tj� | }|| j }|| kr�|} |dk r�| t }|dkr�tj|� tj� | }|| j | kr�|| j } | j| |� qnW | || fS )zMReplay the conversation at the right time. (We're already in a fork).r zstarting %s [miss %.3f]g )r5 r� �SLEEP_OVERHEAD�sleeprD r6 r` r� ) rj r� r� r� rz �now�gap� sleep_timeZmissZmax_gap�max_sleep_missZp_startrW rF rF rG �replay_with_delay� s2 z Conversation.replay_with_delayc C s> | j \}}| jdk r ||fS | jdkr6||kr6||fS ||fS )zhHave a go at deciding who is the server and who is the client. returns (client, server) r )ri r7 )rj Z server_cluerQ �brF rF rG r= � s z Conversation.guess_client_serverc s4 � �fdd�| j D �| _ | j r*| j d jnd| _dS )z�Prune any packets outside the time window we're interested in :param s: start of the window :param e: end of the window c s* g | ]"}�|j ko � kn r|�qS rF )r` )r� rW )r� rX rF rG r" � s z>Conversation.forget_packets_outside_window.<locals>.<listcomp>r N)r6 r` r5 )rj rX r� rF )r� rX rG � forget_packets_outside_window� s z*Conversation.forget_packets_outside_windowc C s: x | j D ]}| j|8 _qW | jdk r6| j|8 _dS )z=Adjust the packet start times relative to the new start time.N)r6 r` r5 )rj r5 rW rF rF rG �renormalise_times� s z Conversation.renormalise_times)TT)NN)N)r\ r] r^ r� rk r� r; r8 r~ r rC rD rE rF rM r= rO rP rF rF rF rG r4 [ s # r4 c @ s6 e Zd ZdZd dd�Zdd� Zd dd�Zd d d �ZdS )� DnsHammerzOA lightweight conversation that generates a lot of dns:0 packets on the flyNc sR t |� �}� fdd�t|�D �| _| jj� || _� | _d| _| j|d�| _d S )Nc s g | ]}t jd � ��qS )r )r� �uniform)r� r� )r� rF rG r" s z&DnsHammer.__init__.<locals>.<listcomp>r )� query_file) rr r� �times�sort�rater� r5 �_get_query_choices� query_choices)rj �dns_rater� rS �nrF )r� rG rk s zDnsHammer.__init__c C s dt | j�| j| jf S )Nz-<DnsHammer %d packets over %.1fs (rate %.2f)>)rA rT r� rV )rj rF rF rG r~ s zDnsHammer.__str__c C s� |rxt |d��}|j� }W dQ R X g }xL|j� D ]@}|j� }|r0|jd� r0|jd�}t|�dksft�|j|� q0W |S dddd d d d d d!d"g S dS )#z� Read dns query choices from a file, or return default rname may contain format string like `{realm}` realm can be fetched from context.realm r� N�#r� r� r �{realm}r �yesrJ �NSr" � *.{realm}�nor; r: �_msdcs.{realm}� � � nx.realm.com� � �*.nx.realm.com� )r r\ r r] )rJ r\ r^ r] )r" r_ r r` )r; r_ r^ r` )r: ra r r] )rb ra r^ r] )rc rd r r` )re rd r^ r` )rf rg r r` )rh rg r^ r` ) r( �read� splitlines�stripr� rp rA �AssertionErrorr� )rj rS r� �text�choicesrt rE rF rF rG rW s* z DnsHammer._get_query_choicesc C s� |st �|jst �tj� }x�| jD ]�}tj� | }|| }|t }|dkrTtj|� tj| j�\}}} } |j |jd�}d} tj� } zBy$t || �} | dkr�t | � r�d} W n t k r� d} Y nX W d tj� }|| }t d|||| f � X q"W d S )Nr )r� Tr] Fz%f DNS dns %s %f %s )rl r� r� rT rG rH r� r rX r� � dns_queryrA r� r? )rj r� r� rz rI rJ rK rf ZrnameZrtypeZexist�successZ packet_startZanswersrL r� rF rF rG �replay4 s, zDnsHammer.replay)N)N)N)r\ r] r^ r� rk r~ rW rq rF rF rF rG rQ s !rQ �countc C s� t t�}g }x�| D ]|}t|t�r(t|�}td|jf tjd� xF|D ]>}t j |�}|j dkrx|dkrx||j d7 < qD|j |� qDW |j� qW |s�g dfS tdd� |D ��}td d� |D ��}td tjd� t� } xZt|�D ]N\} }| j|8 _| j|j�} | d k�r$t| d d �} | | |j< | j|� q�W g } x*| j� D ] } t| �dk�r@| j | � �q@W t|| �} t| �| }| || |fS )zLLoad a summary traffic summary file and generated Converations from it. z Ingesting %s)r= r$ �includerJ r c s s | ] }|j V qd S )N)r` )r� rW rF rF rG r� f s z#ingest_summaries.<locals>.<genexpr>c s s | ] }|j V qd S )N)r` )r� rW rF rF rG r� g s z$gathering packets into conversationsNr" )r� )r rr r r� r( r? r< r@ rA r_ rv re rf r� r* �min�maxr � enumerater` r� ri r4 r; �valuesrA rq )�filesZdns_modeZ dns_countsr6 r� rt rW r5 Z last_packet� conversationsr� r Zconversation_listr� Z mean_intervalrF rF rG �ingest_summariesP s@ rz c C s6 t � }x| D ]}|j|j� q W |r2|jd�d S d S )NrJ r )r �updateri � most_common)ry Z addressesr rF rF rG �guess_server_address� s r} c C s0 i }x&| j � D ]\}}dj|�}|||< qW |S )Nrm )r) ry )rY �yr� r- Zk2rF rF rG �stringify_keys� s r c C s8 i }x.| j � D ]"\}}tt|�jd��}|||< qW |S )Nrm )r) rB r� rp )rY r~ r� r- rz rF rF rG �unstringify_keys� s r� c @ sT e Zd Zddd�Zddd�Zdd� Zd d � Zddd�Zdd� Zdd� Z ddd�Z dS )� TrafficModelr; c C s0 i | _ i | _|| _tt�| _d| _ddg| _d S )Ng r rJ )�ngrams� query_detailsrZ r rr � dns_opcounts�cumulative_duration� packet_rate)rj rZ rF rF rG rk � s zTrafficModel.__init__Nc C s� |d kr i }d}d}t f| jd }t|�}x&|j� D ]\}}| j| |7 < q6W t|�dkr�|d j} d} | d } x*|D ]"} | t| �7 } t| | jd j �} q|W | | j d< | | | j d< x�|D ]�} | j |�\} }|| j � 7 }t f| jd }x�| D ]�}|j | k�rq�|j | }|j }|tk�r^dtjtd|t �� }| jj|g �j|� |dd � |f }|j� }| jj|g �jt|j�� | jj|g �j|� |dd � |f }q�W q�W | j|7 _| jj|g �jt � d S )Ng rJ r g�������?zwait:%dg �?r )� NON_PACKETrZ r} r) r� rA r5 ru r6 r` r� r= rE rc �WAIT_THRESHOLD�math�log� WAIT_SCALEr� r� r� r� r� rB rh r� )rj ry r� �prevZ cum_durationr� r� r� r- �first�total�lastr r@ rW �elapsedr� Zshort_prF rF rG �learn� sL zTrafficModel.learnc C s� i }x0| j j� D ]"\}}dj|�}tt|��||< qW i }x0| jj� D ]"\}}ttdd� |D ���||< qFW ||| j| jtd�}| j |d< t |t �r�t |d�}t j||dd� d S ) Nrm c s s | ]}|rd j |�ndV qdS )rm r# N)ry )r� rY rF rF rG r� � s z$TrafficModel.save.<locals>.<genexpr>)r� r� r� r� �versionr$ r% r" )�indent)r� r) ry �dictr r� r� r� �CURRENT_MODEL_VERSIONr� r r� r( �json�dump)rj r� r� r� r- r� �drF rF rG �save� s" zTrafficModel.savec C s� t |t�rt|�}tj|�}y$|d }|tk r>td|tf ��W n tk r` tdt ��Y nX xj|d j� D ]Z\}}t t|�j d��}| j j |g �}x(|j� D ] \}}|j t|�g| � q�W |j� qpW x�|d j� D ]t\}}| jj t|�g �}xP|j� D ]D\}}|dk�r$|j f g| � n |j t t|�j d��g| � �q W |j� q�W d|k�r�x,|d j� D ] \}}| j| |7 < �qlW |d | _|d | _d S ) Nr� z4the model file is version %d; version %d is requiredz=the model file lacks a version number; version %d is requiredr� rm r� r# r$ r� r� )r r� r( r� �load�REQUIRED_MODEL_VERSION� ValueError�KeyErrorr) rB rp r� r� �extendrU r� r� r� r� ) rj r� r� r� r� r- rw rW rr rF rF rG r� � s: $ zTrafficModel.load� rJ r c C s� g }t f| jd }|dkr$|d }�xrtj| jj|t f��}|t kr�||k rPP tj� |krttd||f tjd� P dtj dd� }td| tjd� || j kr�tj| j | �} ng } |j d d�\} } | d kr�t | �tj� } t j| �t| } || 7 }nRtjt� }t j|�| } || 7 }|dk �r0||k�r0P ||k�rL|j|| | | f� |dd� |f }|d dd� d kr(|d dd� d kr(t f| jd }q(W |S )zUConstruct an individual conversation packet sequence from the model. rJ Nz"ending after %s (persistence %.1f))r= zwait:%dr� � ztrying %s instead of end�:r� r" zwait:���r )r� rZ r� r r� r� r? r@ rA Z randranger� rp rr r� Zexpr� rR �NO_WAIT_LOG_TIME_RANGEr� )rj r` � hard_stop� replay_speed� ignore_before� persistencer r� rW rh re rf Z log_wait_timer� Zlog_waitrF rF rG � construct_conversation_sequence sD (z,TrafficModel.construct_conversation_sequencec C s | j \}}|| | S )N)r� )rj �scale�rate_n�rate_trF rF rG �scale_to_packet_rateP s z!TrafficModel.scale_to_packet_ratec C s | j \}}|| | S )N)r� )rj Zppsr� r� rF rF rG �packet_rate_to_scaleT s z!TrafficModel.packet_rate_to_scalec C s� d| }t || �}g }d}xh||k r�tj| |�} | j| ||d|d�} x"| D ]\} } } }t| | �rNP qNW q |j| � |t| �7 }q W | j|�}td||t|�||f t j d� |j � |S )z<Generate a list of conversation descriptions from the model.� r )r� r� r� r� zGwe have %d packets (target %d) in %d conversations at %.1f/s (scale %f))r= ) rr r� rR r� r� r� rA r� r? r@ rA rU )rj r� r� r� r� Zlead_inZtarget_packetsry Z n_packetsr� r r` re rf rh r� rF rF rG � generate_conversation_sequencesX s0 z,TrafficModel.generate_conversation_sequences)r; )N)r� NrJ r r )rJ r ) r\ r] r^ rk r� r� r� r� r� r� r� rF rF rF rG r� � s 2( 2 r� rJ c C sD g }x:| D ]2}|r t |d d ||f|�}|d7 }|j|� q W |S )Nr rJ )r4 r� )r9 r� r@ ry rX r rF rF rG �seq_to_conversations� s r� r< )r$ � rpc_netlogonr� r' r7 r) r, r r r- �epmr r8 r9 r r0 �0x01zHost Announcement (0x01)�0x02zRequest Announcement (0x02)�0x08z Browser Election Request (0x08)�0x09z Get Backup List Request (0x09)�0x0cz$Domain/Workgroup Announcement (0x0c)�0x0fz Local Master Announcement (0x0f)Z searchRequestZ searchResDoneZRequestZBindZBind_ackZBind_nakZ Alter_contextZAlter_context_respr� ZAUTH3ZResponser Zresponser ZDsBindZ DsCrackNamesZDsWriteAccountSpnZDsUnbindZ DsReplicaSyncZDsGetNCChangesZDsReplicaUpdateRefsr� ZMapr� rx Z bindRequestZ bindResponseZ unbindRequestZsearchResEntryz*** Unknown ***r Zlsa_LookupNamesZlsa_LookupSids�39Z lsa_QueryTrustedDomainInfoBySid�40Zlsa_SetTrustedDomainInfo�6Zlsa_OpenPolicy�76Zlsa_LookupSids3�77Zlsa_LookupNames4r� �21ZNetrLogonDummyRoutine1�26ZNetrServerAuthenticate3�29ZNetrLogonGetDomainInfo�30ZNetrServerPasswordSet2ZNetrLogonSamLogonExZDsrEnumerateDomainTrusts�45ZNetrLogonSamLogonWithFlagsZNetrServerReqChallenger ZConnectZGetAliasMembership�17Z LookupNames�18Z LookupRids�19Z OpenGroupZClose�25ZQueryGroupMember�34ZOpenUser�36Z QueryUserInfoZGetGroupsForUserZ QuerySecurityZ LookupDomain�64ZConnect5Z EnumDomains�7Z OpenDomain�8ZQueryDomainInfo�0x04z Close (0x04)�0x24zLocking AndX (0x24)�0x2ezRead AndX (0x2e)�0x32z Trans2 (0x32)�0x71zTree Disconnect (0x71)zNegotiate Protocol (0x72)�0x73zSession Setup AndX (0x73)�0x74zLogoff AndX (0x74)�0x75zTree Connect AndX (0x75)�0xa2zNT Create AndX (0xa2)ZNegotiateProtocolZIoctlZFindZGetInfoZBreakZ SessionSetupZ SessionLogoffZ TreeConnectZTreeDisconnectZCreateZRead�0x12z$SAM LOGON request from client (0x12)�0x17z3SAM Active Directory Response - user unknown (0x17)r ZNetShareGetInfoZ NetSrvGetInfoc C sT | j dd�\}}tj||fd�}tj|d�}||d|||||g} | j|� dj| �S )Nr� rJ rx r< rm )rp r> r� r? r� ry ) rW r` rc rd rh re rf rg ra rt rF rF rG �expand_short_packet� s r� c C s" t jj� t jj� tjd� dS )z�Signal handler closes standard out and error. Triggered by a sigterm, ensures that the log messages are flushed to disk and not lost. r N)r@ rA r* �stdoutr& �_exit)�signal�framerF rF rG �flushing_signal_handler s r� c C s� |d t jdd� }tjj� tjj� tj� }|dkr<|S �z��y>t j|� ||f}d} | d d } t | || |d�} t j t j t � |j || � tjj� tjd� tjj|jd| j �} t| d�} ytjj� tjd� W n2 tk �r } ztjd| � W Y d d }~X nX | t_tj� | }| | }|t }|dk�rFtj|� | j||d �\}}}t d | � t d | � t d | � W nJ t k �r� d} t dtj � | f tjd� t j tj� tjj� Y nX W d tjj� tjj� tj!| � X d S )z8Fork a new process and replay the conversation sequence.i� r i� )r9 r� zstats-conversation-%dr% rJ z stdout closing failed with %sN)r� r� zMaximum lag: %fz Start lag: %fzMax sleep miss: %fz*EXCEPTION in child PID %d, conversation %s)r= )"r� Zrandintr@ r� rO rA r& �fork�seedr4 r� �SIGTERMr� r� �stdinr* r' ry r� r� r( �IOErrorr� �infor� rG rH rM r? r� �getpidrM � print_excr� )�csr� r� r� � client_idZ server_idr� �pidri �statusrz r r+ r� r� rI rJ rK Zmax_lagZ start_lagrL rF rF rG �replay_seq_in_fork sX r� c C s: t jj� t jj� tj� }|dkr(|S t jj� tjd� yt jj� tjd� W n0 tk r� } zt j d| � W Y d d }~X nX tj j |j d�}t|d�t _zry0d}tjtjt� t| ||d�}|j|d� W n< tk �r d}tdtj� t jd � tjt j� Y nX W d t jj� t jj� tj|� X d S ) Nr rJ z stdout closing failed with %sz stats-dnsr% )rS )r� z)EXCEPTION in child PID %d, the DNS hammer)r= )r@ r� rO rA r& r� r� r* r� r� �warnr' ry r� r( r� r� r� rQ rq r� r? r� rM r� r� ) rY r� r� rS r� r� r+ r� ZhammerrF rF rG �dnshammer_in_forkS s6 r� Fc $ K sd t f |||t| �d�| ��} t|�t| �k rDtdt|�t| �f ��tj� t| �d } tj� | } |d kr�| d d! d | }td| tjd� td|| tjd� td | tjd� | | d }t j d t| �|f � | j d t| �t d d� | D ��d� i }�z|�yH|�r(t ||| |d�}d||< x>t| �D ]2\}}|| }|d }t|| | ||�}|||< �q2W tj� }td|| | || f tjd� x�tj� |k �rL|�rLtjd� ytjd"tj�\}}W n4 tk �r� } z|jtk�r� P W Y d d }~X nX |�r�|j|d �}tdk�r6td||t|�f tjd� | �r�|dk�r�P �q�W W n, tk �r| tdtjd� tj� Y nX W d | j dt|�d� �xtd#D �]j}tdt|�|f tjd� xR|D ]J}ytj||� W n2 tk �r } z|jt k�r�� W Y d d }~X nX �q�W tjd� tj� d }x�|�r�ytjd$tj�\}}W n2 tk �rv } z|jtk�rf� W Y d d }~X nX |dk�r�|j|d �}|d k�r�td | � tjj � tj j � tj d� td ||t|�f tjd� tj� |k�r(P �q(W |�s�P tjd� �q�W |�r(td t|� tjd� ytj dd� W n$ t!k �r\ td tjd� Y nX X d S )%N)r� r� r� r� z(we have %d accounts but %d conversationsg{�G�z�?rJ r z We will start in %.1f seconds)r= z We will stop after %.1f secondszruntime %.1f secondsg �?z6Replaying traffic for %u conversations over %d secondsZ intentionsc s s | ]}t |�V qd S )N)rA )r� rY rF rF rG r� � s zreplay.<locals>.<genexpr>)�Planned_conversations�Planned_packets)rS r" z,all forks done in %.1f seconds, waiting %.1fg�~j�t�h?z-process %d finished conversation %d; %d to gozEXCEPTION in parentZ unfinished)�Unfinished_conversations� r� z killing %d children with -%dg �?z children is %s, no pid foundz)kill -%d %d KILLED conversation; %d to goz%d children are missingzignoring fake ^Cr r r )r� r� r� r )"r� rA r� r& �setpgrpr� r? r@ rA r� r� r. �sumr� rv r� rH �waitpid�WNOHANG�OSError�errnor �popr> r� rM r� �killr rO r� r� �killpg�KeyboardInterrupt)Zconversation_seq�hostr� r� �accountsrY Zdns_query_filer� Zlatency_timeoutZstop_on_any_errorr, r� Zdelayr� rL Zchildrenr� r� r� r� r� rz r� r� r rX rF rF rG rq u s� rq c C s" t � }td| |dg||d�}|S )Nz ldap://%szmodules:paged_searches)r� r� Zoptionsr� r� )r r )r� r� r� r� r� rF rF rG �openLdb s r� c C s d|| j � f S )z(Generate an ou name from the instance idz#ou=instance-%d,ou=traffic_replay,%s)r� )r� r� rF rF rG �ou_name s r� c C s� t | |�}y | j|jdd�d dd�� W n6 tk r` } z|j\}}|dkrP� W Y dd}~X nX y| j|dd�� W n6 tk r� } z|j\}}|dkr�� W Y dd}~X nX |S )z�Create an ou, all created user and machine accounts will belong to it. This allows all the created resources to be cleaned up easily. r� rJ Zorganizationalunit)r� � objectclass�D N)r� �addrp r rE )r� r� r� r� r� �_rF rF rG � create_ou s r �ConversationAccountsr� r� r� r� c C sL g }xBt d|d �D ]0}t||�}t||�}t||||�}|j|� qW |S )z;Generate a series of unique machine and user account names.rJ )r� � machine_namer� r r� ) r� r� �number�passwordr� r� r� r� r� rF rF rG �generate_replay_accounts< s r Tc C s` t | |�}d||f }dt|� jd�}|r:tttB �}ntt�}| j|dd| ||d�� dS )z"Create a machine account via ldap.zcn=%s,%sz"%s"z utf-16-le�computerz%s$)r� r� �sAMAccountName�userAccountControl� unicodePwdN)r� r �encoder� r r r r ) r� r� r� r� �traffic_accountr� r� �utf16pwZaccount_controlsrF rF rG �create_machine_accountJ s r c C s\ t | |�}d||f }dt|� jd�}| j|d|tt�|d�� tj| �}|j|d� dS )z Create a user account via ldap.zcn=%s,%sz"%s"z utf-16-le�user)r� r� r r r z (A;;WP;;;PS)N) r� r r r r� r r ZSDUtilsZ dacl_add_ace)r� r� r� r� r� r� r ZsdutilsrF rF rG �create_user_accountc s r c C s, t | |�}d||f }| j|d|d�� dS )zCreate a group via ldap.zcn=%s,%s�group)r� r� r N)r� r )r� r� r< r� r� rF rF rG � create_groupu s r c C s d| |f S )z-Generate a user name based in the instance idz STGU-%d-%drF )r� r� rF rF rG r� � s r� r r c s( | j dj|�� gd�}� fdd�|D �S )z(Search objectclass, return attr in a setz(objectClass={}))r� r� c s h | ]}t |� ��qS rF )r� )r� �obj)�attrrF rG � <setcomp>� s z%search_objectclass.<locals>.<setcomp>)r� r� )r� r� r ZobjsrF )r rG �search_objectclass� s r c C sp t | dd�}d}xZt|dd�D ]J}t||�}||kr t| |||� |d7 }|d dkr tjd||f � q W |S )zAdd users to the serverr )r� r rJ �2 zCreated %u/%u usersr )r r� r� r r� r� )r� r� r r �existing_objectsZusersr� r< rF rF rG �generate_users� s r c C s |rd| |f S d| |f S dS )z1Generate a machine account name from instance id.z STGM-%d-%dzPC-%d-%dNrF )r� r� r rF rF rG r � s r c C sx t | dd�}d}xbt|dd�D ]R}t|||�}|d |kr t| ||||� |d7 }|d dkr tjd||f � q W |S ) z"Add machine accounts to the serverr )r� r rJ r r z Created %u/%u machine accountsr )r r� r r r� r� ) r� r� r r r r �addedr� r< rF rF rG �generate_machine_accounts� s r c C s d| |f S )z'Generate a group name from instance id.z STGG-%d-%drF )r� r� rF rF rG � group_name� s r c C sn t | dd�}d}xXt|dd�D ]H}t||�}||kr t| ||� |d7 }|d dkr tjd||f � q W |S )z3Create the required number of groups on the server.r )r� r rJ i� zCreated %u/%u groupsr )r r� r r r� r� )r� r� r r �groupsr� r< rF rF rG �generate_groups� s r c C sX t | |�}y| j|dg� W n6 tk rR } z|j\}}|dkrB� W Y dd}~X nX dS )z7Remove the created accounts and groups from the server.z tree_delete:1� N)r� �deleter rE )r� r� r� r� r� r rF rF rG �clean_up_accounts� s r" c C s� d} d} d} t | |� tjd� t| |||�} tjd� t| ||||�} |dkrftjd� t| ||�} |dkr�tjd� t|| || ||�} tjd� t| || � | j� } | dkr�| dkr�|| kr�tj d� tjd| | | | f � d S ) zTGenerate the required users and groups, allocating the users to those groups.r z Generating dummy user accountsz!Generating dummy machine accountszGenerating dummy groupszAssigning users to groupszAdding users to groupsz(The added groups will contain no membersz:Added %d users (%d machines), %d groups and %d membershipsN) r r� r� r r r �GroupAssignments�add_users_to_groupsr� Zwarning)r� r� r �number_of_users�number_of_groups�group_memberships� max_membersZmachine_accountsZtraffic_accountsZmemberships_added� groups_addedZcomputers_added� users_added� assignmentsrF rF rG �generate_users_and_groups� s< r, c @ sd e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dd� Z dS )r# c C sB d| _ | j|� | j||� || _tt�| _| j|||||� d S )Nr )rr �generate_group_distribution�generate_user_distributionr( r r� r+ � assign_groups)rj r& r) r% r* r' r( rF rF rG rk s zGroupAssignments.__init__c C sD g }t |�}|dkrd S d}x"|D ]}||7 }|j|| � q"W |S )Nr g )r� r� )rj �weightsZdistr� Z cumulativeZ probabilityrF rF rG �cumulative_distribution s z(GroupAssignments.cumulative_distributionc C sn |dkrd}n |dkr d}n|dkr*d}nd}g }x*t d|d �D ]}tj|�}|j|� qBW | j|�| _d S ) zAProbability distribution of a user belonging to a group. i@KL g @i�� g @i� g @g �?rJ N)r� r� Z paretovariater� r1 � user_dist)rj Z num_usersZnum_memberships�shaper0 rY rW rF rF rG r. ( s z+GroupAssignments.generate_user_distributionc C sH g }x,t d|d �D ]}d|d }|j|� qW || _| j|�| _dS )z6Probability distribution of a group containing a user.rJ g�������?N)r� r� � group_weightsr1 � group_dist)rj rZ r0 rY rW rF rF rG r- B s z,GroupAssignments.generate_group_distributionc C s, t j | jtj� �}t j | jtj� �}||fS )z2Returns a randomly generated user-group membership)�bisectr2 r� r5 )rj r r rF rF rG �generate_random_membershipP s z+GroupAssignments.generate_random_membershipc C s | j | S )N)r+ )rj r rF rF rG �users_in_group\ s z GroupAssignments.users_in_groupc C s | j j� S )N)r+ r� )rj rF rF rG � get_groups_ s zGroupAssignments.get_groupsc C sL t | j| �}||krHtjdj||�� d| j|d < | j| j�}|| _dS )z?Prevent the group's membership from exceeding the max specifiedzGroup {0} has {1} membersr rJ N)rA r+ r� r� r� r4 r1 r5 )rj r r( Z num_membersZnew_distrF rF rG �cap_group_membershipb s z%GroupAssignments.cap_group_membershipc C sD || j | kr,| j | j|� | jd7 _| jr@| j|| j� d S )NrJ )r+ r� rr r( r: )rj r r rF rF rG �add_assignmentn s z GroupAssignments.add_assignmentc C s� |dkr dS t jt|�t|�t|� �}| jr@t|| j| �}|| d }|| d }x@| j� |k r�| j� \}} | |ks�||krZ| j|d | d � qZW dS )a Allocate users to groups. The intention is to have a few users that belong to most groups, while the majority of users belong to a few groups. A few groups will contain most users, with the remaining only having a few users. r NrJ )r� �ceilrq r( rt r� r7 r; ) rj r& r) r% r* r' Zexisting_usersZexisting_groupsr r rF rF rG r/ z s z GroupAssignments.assign_groupsc C s | j S )N)rr )rj rF rF rG r� � s zGroupAssignments.totalN)r\ r] r^ rk r1 r. r- r7 r8 r9 r: r; r/ r� rF rF rF rG r# s !r# c C s� |j � }d}d}x�|j� D ]�}|j|�}t|�dkr6qxhtdt|�d�D ]T}|||d � } t| ||| � |t| �7 }|d7 }|d dkrHtjd||f � qHW qW dS )zDTakes the assignments of users to groups and applies them to the DB.r i� rJ r zAdded %u/%u membershipsN)r� r9 r8 rA r� �add_group_membersr� r� ) r� r� r+ r� rr r r r8 �chunkZchunk_of_usersrF rF rG r$ � s r$ c s� t | |�� � fdd�}|t||��}tj� }tj| |�|_x:|D ]2}|t||��}dt|� } tj|tj d�|| < q@W | j |� dS )z(Adds the given users to group specified.c s d| � f S )Nzcn=%s,%srF )r< )r� rF rG �build_dn� s z#add_group_members.<locals>.build_dnzmember-�memberN) r� r r� ZMessageZDnr� r� r� ZMessageElementZ FLAG_MOD_ADDZmodify) r� r� r r8 r? Zgroup_dn�mr r� �idxrF )r� rG r= � s r= c * C s� t jj}d}d}d}i }t� }t� }|dk r4|j} ndd� } | d� dddd�} dddd�} �x�tj| �D �]�} tjj | | �} t | d���h}�x^|D �]T}y�|j d �j d �}|d }|d }|d }t |d �}t |d �}t|| |�}t||�}||f}|j|g �j|� |d dk�r&|d 7 }n|d 7 }|| d 7 < |j|� | |� W q� ttfk �r� d|k�r�|j dd �\}}|| k�r�tt |�| | �| |< n0|| k�r�tt|�| | �| |< nt|t jd� nt|t jd� Y q�X q�W W dQ R X qjW || }|dk�rd}n|| }|dk�r,d}n|| }t|�} td| � td||f � td||f � x6t| j� �D ]&\}}td|jdd�d |f � �qvW x6t| j� �D ]&\}}td|jdd�d |f � �q�W td� i } x4|D ],\} } | | k�rt� | | < | | j| � �q�W t| j� �} x�| D ]�}t| | t d�}!x�|!D ]�}||f}|| }"t|"�}"t|"�}#|| }t |"�|# }$t |"d �}%t |"d �}&|"d |"d }'|"d! }(t j |d �})td |||)|#||$|%|&|'|(f � �qFW �q,W dS )"z/Generate and print the summary stats for a run.r Nc S s d S )NrF )rY rF rF rG �tw� s zgenerate_stats.<locals>.twz2time conv protocol type duration successful error )z Maximum lagz Start lagzMax sleep miss)r� r� r� r� rl rm rJ r" r; r� r� �Truer� )r= zTotal conversations: %10dz-Successful operations: %10d (%.3f per second)z-Failed operations: %10d (%.3f per second)z%-28s %fr rK z%-28s %dz�Protocol Op Code Description Count Failed Mean Median 95% Range Max)r� g �?gffffff�?rx z?%-12s %4s %-35s %12d %12d %12.6f %12.6f %12.6f %12.6f %12.6fr r )!r@ � float_inforu r r� �writer& �listdirr' ry r( ro rp rq rt r� r� r r� � IndexErrorrr r? rA rA �sortedr) �replacer� � opcode_keyr� �calc_percentiler> r� )*r� Z timing_filer� r� Z successfulZfailedZ latenciesZfailuresZunique_conversationsrC Z float_valuesZ int_valuesr+ r' r� rt ru r� re Z packet_typeZlatencyrz �opr� r- r� Z success_rateZ failure_ratery Zops�protor: Z protocolsZ packet_typesrw rr ZmeanZmedian� percentile�rngZmaxvrg rF rF rG �generate_stats� s� & "" rQ c C s& y dt | � S tk r | S X dS )zCSort key for the operation code to ensure that it sorts numericallyz%03dN)rr r� )r- rF rF rG rK M s rK c C sp | sdS t | �d | }tj|�}tj|�}||kr@| t|� S | t|� || }| t|� || }|| S )ztCalculate the specified percentile from the list of values. Assumes the list is sorted in ascending order. r rJ )rA r� Zfloorr< rr )rw rO r� r� r Zd0Zd1rF rF rG rL U s rL c G s. t jj| � }t jd�}t j|� t j|� |S )zuIn a testenv we end up with 0777 directories that look an alarming green colour with ls. Use umask to avoid that.�? )r& r' ry �umask�mkdir)r' r� �maskrF rF rG r� g s r� )r$ r% )r' r( )r) r% )r) r* )r) r+ )r, r* )r- r. )r- r/ )r0 r% )r$ r1 )r) r1 )r) r2 )r) r3 )r, r3 )r- r4 )r- r5 )r- r6 ���r� )rV r� )rr )rJ r" )r8 r� )r8 r� )r8 r� )r8 r� )r8 r� )r8 r� )r, r* )r, r3 )r- r% )r- r. )r- r4 )r- r5 )r- r/ )r- r6 )r- r� )r- r+ )r$ r% )r$ r1 )r r% )r r4 )r r5 )r r1 )r r+ )r r* )r r2 )r� r* )r� rx )r) r% )r) r1 )r) r+ )r) r* )r) r2 )r) r3 )r) rx )r r/ )r r6 )r r� )r r� )r r� )r r� )r r� )r0 r% )r0 r1 )r� r� )r� r� )r� r� )r� r� )r� r� )r� r� )r� r� )r� r2 )r r% )r r� )r r� )r r� )r r� )r r1 )r r� )r r� )r r� )r r� )r r* )r r3 )r r� )r r� )r r� )r r� )r' r� )r' r� )r' r� )r' r� )r' r� )r' r( )r' r� )r' r� )r' r� )r' r� )r7 r% )r7 r. )r7 r/ )r7 r� )r7 r� )r7 r1 )r7 r+ )r7 r* )r7 r2 )r7 r3 )r7 r� )r7 r� )r9 r� )r9 r� )r r� )r r� )rJ )N) NNNNr NNr& F)r� r� r� r� )T)r r )T)T)T)yr� r& r� r� r� r@ r� r� r r � collectionsr r r r Z dns.resolverr ro Z samba.emulater Z samba.samdbr r� r Z samba.dcerpcr r r r r Zsamba.dcerpc.netlogonr r r Zsamba.drs_utilsr rM Zsamba.credentialsr r r Z samba.authr Z samba.dsdbr r r r Zsamba.dcerpc.miscr Zsambar r Z samba.commonr Z samba.loggerr! r6 r� r� rG r� r� r� r� r� r� r� r> r\ r� rH rR rZ r� r[ �objectr_ r� r� r� r r4 rQ rz r} r r� r� r� r? r> r� r� r� r� rq r� r� r r r r r r r� r r r r r r r" r, r# r$ r= rQ rK rL r� rF rF rF rG �<module> s� e (N 5 c ? # *
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка