1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
TODO
====
* gg_map BUG
we seem to sometime create 2 egraph vertice with the same name.
happends for 127.0.0.1 when sniffing on all interfaces with gg_sniff
* email libevent doc mistake ?
===============================================================================
To: nickm@alum.mit.edu Cc: provos@citi.umich.edu
http://www.wangafu.net/~nickm/libevent-book/Ref9_dns.html
The addresses argument to the callback is NULL in the event of an error. For a PTR record, it’s a NUL-terminated string. For IPv4 records, it is an array of four-byte values in network order. For IPv6 records, it is an array of 16-byte records in network order. (Note that the number of addresses can be 0 even if there was no error. This can happen when the name exists, but it has no records of the requested type.)
=>
The addresses argument to the callback is NULL in the event of an error. For a PTR record, it’s pointer to a NUL-terminated string. For IPv4 records, it is an array of four-byte values in network order. For IPv6 records, it is an array of 16-byte records in network order. (Note that the number of addresses can be 0 even if there was no error. This can happen when the name exists, but it has no records of the requested type.)
http://www.wangafu.net/~nickm/libevent-2.0/doxygen/html/dns_8h.html
addresses needs to be cast according to type. It will be an array of 4-byte sequences for ipv4, or an array of 16-byte sequences for ipv6, or a nul-terminated string for PTR.
=>
addresses needs to be cast according to type. It will be an array of 4-byte sequences for ipv4, or an array of 16-byte sequences for ipv6, or a pointer to a nul-terminated string for PTR.
===============================================================================
gg_map: minimal version
using evas, efx and elementary
and igraph - http://igraph.sourceforge.net/index.html
gg_sniff traceroute
using jtrace code http://monkey.org/~jose/software/jtrace/
use libdnet for encoding / decoding
Connectivity improvements:
libglouglou: connect and disconnect packets
libglouglou: keepalive and timeout
glougloud: when no viz cli, report to probes
probes: when ggd tells no viz cli, stop sending traffic
gg_elife: forced_colors of gg_packet disapear to black with time
libglouglou: doxygen documentation
libglouglou: ability to log to file + logging from utils and sendbuf
glougloud + gg_trackproc + gg_sniff: use gg_log
libglouglou: function handlers per packet: _encode, _decode, _getsize
general glouglou Makefile that builds the right stuff
TO LOOK AT
==========
skyrails
iron main
TODO later: network
===================
gg_jsmap
using http://networkx.lanl.gov/
make graph without displaying data packets
without even receving them (register packet type to glougloud, that could
tell the probe that all clients have registered only specific events so the
probe do not send other type of events)
include wireshark dissectors to give habitility to builds maps based on known
dissectors.
netexpect-0.20/src/packets/
wireshark/epan/
wireshark/epan/dissectors
|
