#!/usr/bin/env python
# coding=UTF-8
__author__ = 'dj'
import sys
from PyQt4 import QtGui, QtCore
import socket
import fcntl
import struct
from scapy.all import *
import threading
import tempfile
QtCore.QTextCodec.setCodecForTr(QtCore.QTextCodec.codecForName('utf8'))
IFACE = 'eth0' #网卡名称
STOP = True #停止嗅探
PACKETS = [] #数据包收集序列
SELECT_ROW = 0 #选择的行
SELECT_INFO = '' #选择行的详细信息
SHOW2STR = '' #show2()显示的字符串
HEXSTR = '' #hex()显示的信息
FILTER = None #过滤规则
#主界面
class SnifferUI(QtGui.QMainWindow):
def __init__(self, parent=None):
QtGui.QMainWindow.__init__(self, parent)
self.setWindowTitle(u'网络嗅探器')
self.resize(700, 650)
self.setWindowIcon(QtGui.QIcon('icons/logo.ico'))
screen = QtGui.QDesktopWidget().screenGeometry()
size = self.geometry()
self.move((screen.width()-size.width())/2, (screen.height()-size.height())/2)
self.initUI()
def initUI(self):
#工具栏
#打开文件
self.open_toolbar = QtGui.QAction(QtGui.QIcon('icons/open.png'), u'打开', self)
self.open_toolbar.setShortcut('Ctrl+O')
self.open_toolbar.triggered.connect(self.open_pcap)
self.toolbar = self.addToolBar(u'打开')
self.toolbar.addAction(self.open_toolbar)
#保存
self.save_toolbar = QtGui.QAction(QtGui.QIcon('icons/save.png'), u'保存', self)
self.save_toolbar.setShortcut('Ctrl+S')
self.save_toolbar.triggered.connect(self.save_pcap)
self.toolbar = self.addToolBar(u'保存')
self.toolbar.addAction(self.save_toolbar)
#选择接口
self.conf_toolbar = QtGui.QAction(QtGui.QIcon('icons/iface.png'), u'配置', self)
self.conf_toolbar.setShortcut('Ctrl+I')
self.conf_toolbar.triggered.connect(self.select_iface)
self.toolbar = self.addToolBar(u'配置')
self.toolbar.addAction(self.conf_toolbar)
#开始嗅探
self.start_toolbar = QtGui.QAction(QtGui.QIcon('icons/start.jpg'), u'开始', self)
self.start_toolbar.triggered.connect(self.start_sniff)
self.toolbar = self.addToolBar(u'开始')
self.toolbar.addAction(self.start_toolbar)
#停止嗅探
self.stop_toolbar = QtGui.QAction(QtGui.QIcon('icons/stop.png'), u'停止', self)
self.stop_toolbar.triggered.connect(self.stop_sniff)
self.toolbar = self.addToolBar(u'停止')
self.toolbar.addAction(self.stop_toolbar)
#重新嗅探
"""
self.restart_toolbar = QtGui.QAction(QtGui.QIcon('icons/restart.png'), u'重新开始', self)
self.restart_toolbar.triggered.connect(self.restart_sniff)
self.toolbar = self.addToolBar(u'重新开始')
self.toolbar.addAction(self.restart_toolbar)
"""
#过滤器
self.filter_toolbar = QtGui.QAction(QtGui.QIcon('icons/filter.png'), u'过滤', self)
self.filter_toolbar.triggered.connect(self.filter_pcap)
self.toolbar = self.addToolBar(u'过滤')
self.toolbar.addAction(self.filter_toolbar)
#帮助
self.help_toolbar = QtGui.QAction(QtGui.QIcon('icons/help.png'), u'帮助', self)
self.help_toolbar.triggered.connect(self.help_me)
self.toolbar = self.addToolBar(u'帮助')
self.toolbar.addAction(self.help_toolbar)
#关于
self.about_toolbar = QtGui.QAction(QtGui.QIcon('icons/info.png'), u'关于', self)
self.about_toolbar.triggered.connect(self.about_me)
self.toolbar = self.addToolBar(u'关于')
self.toolbar.addAction(self.about_toolbar)
#退出
self.exit_toolbar = QtGui.QAction(QtGui.QIcon('icons/exit.ico'), u'退出', self)
self.connect(self.exit_toolbar, QtCore.SIGNAL('triggered()'), QtCore.SLOT('close()'))
self.toolbar = self.addToolBar(u'退出')
self.toolbar.addAction(self.exit_toolbar)
#数据包显示栏
self.packet_table = Packet_TableView(parent=self)
self.packet_table.doubleClicked.connect(self.get_row_info)
#分割栏目
self.splitter = QtGui.QSplitter(self)
self.splitter.addWidget(self.packet_table)
self.splitter.setOrientation(QtCore.Qt.Vertical)
self.setCentralWidget(self.splitter)
def get_row_info(self):
infoUI = ShowInfoUI(parent=self)
infoUI.show()
infoUI.exec_()
#打开数据包
def open_pcap(self):
global PACKETS
open_name = QtGui.QFileDialog.getOpenFileName(self, self.tr('Open Packets'), '.', self.tr("Packets Files(*.pcap *.cap)"))
name = str(open_name)
pcap = rdpcap(name)
PACKETS = list(pcap)
for packet in PACKETS:
if int(packet.getlayer(Ether).type) == 34525 and STOP:
proto = 'IPv6'
src = str(packet.getlayer(IPv6).src)
dst = str(packet.getlayer(IPv6).dst)
info = str(packet.summary())
self.packet_table.row_append(src, dst, proto, info)
elif int(packet.getlayer(Ether).type) == 2048 and STOP:
if int(packet.getlayer(IP).proto) == 6:
proto = 'TCP'
elif int(packet.getlayer(IP).proto) == 17:
proto = 'UDP'
elif int(packet.getlayer(IP).proto) == 1:
proto = 'ICMP'
src = str(packet.getlayer(IP).src)
dst = str(packet.getlayer(IP).dst)
info = str(packet.summary())
self.packet_table.row_append(src, dst, proto, info)
elif int(packet.getlayer(Ether).type) == 2054 and STOP:
proto = 'ARP'
src = str(packet.getlayer(ARP).psrc)
dst = str(packet.getlayer(ARP).pdst)
info = str(packet.summary())
self.packet_table.row_append(src, dst, proto, info)
else:
pass
#保存数据包
def save_pcap(self):
save_name = QtGui.QFileDialog.getSaveFileName(self, self.tr("Save Packets"), '.', self.tr("Packets Files(*.pcap)"))
if save_name:
name = str(save_name + '.pcap')
wrpcap(name, PACKETS)
QtGui.QMessageBox.information(self, u"保存成功", self.tr("数据包保存成功!"))
#选择网卡
def select_iface(self):
iface = IfaceUI(parent=self)
iface.exec_()
#处理数据包
def handle_packets(self, packet):
if int(packet.getlayer(Ether).type) == 34525 and STOP:
proto = 'IPv6'
src = str(packet.getlayer(IPv6).src)
dst = str(packet.getlayer(IPv6).dst)
info = str(packet.summary())
self.packet_table.row_append(src, dst, proto, info)
PACKETS.append(packet)
elif int(packet.getlayer(Ether).type) == 2048 and STOP:
if int(packet.getlayer(IP).proto) == 6:
proto = 'TCP'
elif int(packet.getlayer(IP).proto) == 17:
proto = 'UDP'
elif int(packet.getlayer(IP).proto) == 1:
proto = 'ICMP'
src = str(packet.getlayer(IP).src)
dst = str(packet.getlayer(IP).dst)
info = str(packet.summary())
self.packet_table.row_append(src, dst, proto, info)
PACKETS.append(packet)
elif int(packet.getlayer(Ether).type) == 2054 and STOP:
proto = 'ARP'
src = str(packet.getlayer(ARP).psrc)
dst = str(packet.getlayer(ARP).pdst)
info = str(packet.summary())
self.packet_table.row_append(src, dst, proto, info)
PACKETS.append(packet)
else:
pass
#开始嗅探
def start_sniff(self):
sniff_thread = threading.Thread(target=sniffer, args=(IFACE, self.handle_packets))
sniff_thread.start()
#停止嗅探
def stop_sniff(self):
global STOP
STOP = False
#重新开始
def restart_sniff(self):
self.packet_table.clearSpans()
#过滤数据包
def filter_pcap(self):
global FILTER
filterUI = FilterUI(parent=self)
if filterUI.exec_():
FILTER = str(filterUI.get_value())
#帮助
def help_me(self):
QtGui.QMessageBox.information(self, u"帮助", self.tr("先配置要嗅探的网卡，然后启动嗅探器!"))
#关于
def about_me(self):
QtGui.QMessageBox.information(self, u"关于", self.tr("本程序由软件工程11202班董进编写!"))
#选择网卡对话框
class IfaceUI(QtGui.QDialog):
def __init__(self, parent=None):
QtGui.QDialog.__init__(self, parent)
self.resize(500, 200)
self.setWindowTitle(u'网络适配器选择')
screen = QtGui.QDesktopWidget().screenGeometry()
size = self.geometry()
self.move((screen.width()-size.width())/2, (screen.height()-size.height())/2)
self.initUI()
self.show()
def initUI(self):
device_data = get_iface_name()
iface_num = len(device_data)
iface_keys = device_data.keys()
#网卡列表
self.radio_lists = []
self.gridlayout = QtGui.QGridLayout()
self.label_name = QtGui.QLabel(u'接口名')
self.label_ip = QtGui.QLabel(u'IP地址')
self.label_receive = QtGui.QLabel(u'接受流量')
self.label_send = QtGui.QLabel(u'发送流量')
self.gridlayout.addWidget(self.label_name, 1, 1)
self.gridlayout.addWidget(self.label_ip, 1, 2)
self.gridlayout.addWidget(self.label_receive, 1, 3)
self.gridlayout.addWidget(self.label_send, 1, 4)
self.setLayout(self.gridlayout)
for i in range(iface_num):
iface_name = iface_keys[i]
self.iface_radio = QtGui.QRadioButton(iface_name)
if iface_name == 'eth0':
self.iface_radio.setChecked(True)
self.gridlayout.addWidget(self.iface_radio, i+2, 1)
self.radio_lists.append(self.iface_radio)
self.ip_label = QtGui.QLabel(get_ip_address(iface_name))
self.gridlayout.addWidget(self.ip_label, i+2, 2)
data = device_data[iface_name].split(';')
self.receive_label = QtGui.QLabel(data[0])
self.send_label = QtGui.QLabel(data[1])
self.gridlayout.addWidget(self.receive_label, i+2, 3)
self.gridlayout.addWidget(self.send_label, i+2, 4)
self.setLayout(self.gridlayout)
#添加按钮
self.start_but = QtGui.QPushButton(u'确定', self)
self.start_but.clicked.connect(self.exit_me)
self.start_but.setCheckable(False)
self.gridlayout.addWidget(self.start_but, iface_num + 2, 2)
self.cancel_but = QtGui.QPushButton(u'取消', self)
self.connect(self.cancel_but, QtCore.SIGNAL('clicked()'), QtCore.SLOT('close()'))
self.cancel_but.setCheckable(False)
self.gridlayout.addWidget(self.cancel_but, iface_num + 2, 3)
def exit_me(self):
global IFACE
for radio in self.radio_lists:
if radio.isChecked():
IFACE = radio.text()
self.setVisible(False)
#显示数据包列表
class Packet_TableView(QtGui.QTableView):
def __init__(self, parent=None):
QtGui.QTableView.__init__(self, parent)
self.model = QtGui.QStandardItemModel(parent=self)
self.model.setHorizontalHeaderLabels(['Source', 'Destination', 'Protoco', 'Info'])
self.setModel(self.model)
self.setColumnWidth(0, 120)
self.setColumnWidth(1, 120)
self.setColumnWidth(2, 100)
self.setColumnWidth(3, 350)
self.setAlternatingRowColors(True)
self.setAutoScroll(True)
self.setSelectionBehavior(QtGui.QAbstractItemView.SelectRows) #整行选中
self.setEditTriggers(QtGui.QTableView.NoEditTriggers) #不可编辑
self.setSelectionMode(QtGui.QTableView.SingleSelection) #选择单行
self.show()
def mouseDoubleClickEvent(self, QMouseEvent):
global SELECT_ROW, SELECT_INFO, SHOW2STR, HEXSTR
QtGui.QTableView.mouseDoubleClickEvent(self, QMouseEvent)
pos = QMouseEvent.pos()
item = self.indexAt(pos)
if item:
SELECT_ROW = int(item.row())
SELECT_INFO = PACKETS[SELECT_ROW]
#输出重定向数据
show2_temp_name = tempfile.NamedTemporaryFile(prefix='show2_', dir='/tmp')
old = sys.stdout
show2_file = open(show2_temp_name.name, 'w')
sys.stdout = show2_file
SELECT_INFO.show2()
sys.stdout = old
show2_file.close()
hex_temp_name = tempfile.NamedTemporaryFile(prefix='hex_', dir='/tmp')
hex_file = open(hex_temp_name.name, 'w')
sys.stdout = hex_file
hexdump(SELECT_INFO)
sys.stdout = old
hex_file.close()
#读取数据
with open(show2_temp_name.name, 'r') as show2f:
SHOW2STR = show2f.read()
with open(hex_temp_name.name, 'r') as hexf:
HEXSTR = hexf.read()
print('--------------------------------------')
print(SHOW2STR)
print(HEXSTR)
print('--------------------------------------')
#添加行
def row_append(self, src, dst, proto, info):
self.model.appendRow((QtGui.QStandardItem(src),
QtGui.QStandardItem(dst),
QtGui.QStandardItem(proto),
QtGui.QStandardItem(info)))
class ShowInfoUI(QtGui.QDialog):
def __init__(self, parent=None):
QtGui.QDialog.__init__(self, parent)
self.resize(500, 600)
self.setWindowTitle(u'数据包详细信息')
screen = QtGui.QDesktopWidget().screenGeometry()
size = self.geometry()
self.move((screen.width()-size.width())/2, (screen.height()-size.height())/2)
self.initUI()
self.show()
def initUI(self):
self.text_show2 = QtGui.QTextEdit()
self.text_show2.setText(SHOW2STR)
self.text_show2.setReadOnly(True)
self.text_hex = QtGui.QTextEdit()
self.text_hex.setText(HEXSTR)
self.text_hex.setReadOnly(True)
self.save_but = QtGui.QPushButton(u'保存为PDF', self)
self.save_but.setCheckable(False)
self.save_but.clicked.connect(self.save_pdf)
vbox = QtGui.QVBoxLayout()
vbox.addWidget(self.text_show2)
vbox.addWidget(self.text_hex)
vbox.addWidget(self.save_but)
self.setLayout(vbox)
"""
self.splitter = QtGui.QSplitter(self)
self.splitter.addWidget(self.text_show2)
self.splitter.addWidget(self.text_hex)
self.splitter.setOrientation(QtCore.Qt.Vertical)
"""
def save_pdf(self):
save_name = QtGui.QFileDialog.getSaveFileName(self, self.tr("Save PDF"), '.', self.tr("Packets Files(*.pdf)"))
if save_name:
name = str(save_name + '.pdf')
SELECT_INFO.pdfdump(name)
QtGui.QMessageBox.information(self, u"保存成功", self.tr("PDF保存成功!"))
class FilterUI(QtGui.QDialog):
def __init__(self, parent=None):
QtGui.QDialog.__init__(self, parent)
self.resize(300, 100)
self.setWindowTitle(u'过滤器')
screen = QtGui.QDesktopWidget().screenGeometry()
size = self.geometry()
self.move((screen.width()-size.width())/2, (screen.height()-size.height())/2)
self.initUI()
self.show()
def initUI(self):
grid = QtGui.QGridLayout()
grid.addWidget(QtGui.QLabel(u'过滤规则:', parent=self), 0, 0, 1, 1)
self.filter = QtGui.QLineEdit(parent=self)
grid.addWidget(self.filter, 0, 1, 1, 1)
# 创建ButtonBox，用户确定和取消
buttonBox = QtGui.QDialogButtonBox(parent=self)
buttonBox.setOrientation(QtCore.Qt.Horizontal) # 设置为水平方向
buttonBox.setStandardButtons(QtGui.QDialogButtonBox.Cancel|QtGui.QDialogButtonBox.Ok) # 确定和取消两个按钮
# 连接信号和槽
buttonBox.accepted.connect(self.accept) # 确定
buttonBox.rejected.connect(self.reject) # 取消
# 垂直布局，布局表格及按钮
layout = QtGui.QVBoxLayout()
# 加入前面创建的表格布局
layout.addLayout(grid)
# 放一个间隔对象美化布局
spacerItem = QtGui.QSpacerItem(20, 48, QtGui.QSizePolicy.Minimum, QtGui.QSizePolicy.Expanding)
layout.addItem(spacerItem)
# ButtonBox
layout.addWidget(buttonBox)
self.setLayout(layout)
def get_value(self):
return self.filter.text()
#获取网卡名称
def get_iface_name():
with open('/proc/net/dev') as f:
net_dump = f.readlines()
device_data = {}
for line in net_dump[2:]:
line = line.split(':')
device_data[line[0].strip()] = format(float(line[1].split()[0])/(1024.0*1024.0), '0.2f') + " MB;" + format(float(line[1].split()[8])/(1024.0*1024.0), '0.2f') + " MB"
return device_data
#获取网卡IP地址
def get_ip_address(ifname):
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
return socket.inet_ntoa(fcntl.ioctl(s.fileno(), 0x8915, struct.pack('256s', ifname[:15]))[20:24])
#嗅探
def sniffer(IFACE, handle):
sniff(iface=str(IFACE), prn=handle)
def main():
app = QtGui.QApplication(sys.argv)
sniffer = SnifferUI()
sniffer.show()
sys.exit(app.exec_())
if __name__ == '__main__':
main()
