1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
#!/usr/bin/env python
PID = "/tmp/dummy_p0f.pid"
import os
import sys
import struct
import socket
import dummy_killer
try:
import SocketServer as socketserver
except:
import socketserver
class MyStreamHandler(socketserver.BaseRequestHandler):
def handle(self):
S = {
'bad_query' : 0x0,
'ok' : 0x10,
'no_match' : 0x20
}
OS = {
'windows' : ('Windows', '7 or 8'),
'linux' : ('Linux', '3.11 and newer')
}
self.data = self.request.recv(21).strip()
if self.server.p0f_status == 'fail':
response = 0
else:
response = struct.pack(
"IbIIIIIIIhbb32s32s32s32s32s32s",
0x50304602, # magic
S[self.server.p0f_status], # status
1568493408, # first_seen
1568493408, # last_seen
1, # total_conn
1, # uptime_min
4, # up_mod_days
1568493408, # last_nat
1568493408, # last_chg
10, # distance
0, # bad_sw
0, # os_match_q
OS[self.server.p0f_os][0], # os_name
OS[self.server.p0f_os][1], # os_flavor
'', # http_name
'', # http_flavor
'Ethernet or modem', # link_type
'' # language
)
self.request.sendall(response)
self.request.close()
def cleanup(SOCK):
if os.path.exists(SOCK):
try:
os.unlink(SOCK)
except OSError:
logging.warning("Could not unlink socket %s", SOCK)
if __name__ == "__main__":
SOCK = '/tmp/p0f.sock'
p0f_status = 'ok'
p0f_os = 'linux'
alen = len(sys.argv)
if alen > 1:
SOCK = sys.argv[1]
if alen >= 4:
p0f_os = sys.argv[2]
p0f_status = sys.argv[3]
elif alen >= 3:
p0f_os = sys.argv[2]
cleanup(SOCK)
server = socketserver.UnixStreamServer(SOCK, MyStreamHandler, bind_and_activate=False)
server.allow_reuse_address = True
server.p0f_status = p0f_status
server.p0f_os = p0f_os
server.server_bind()
server.server_activate()
dummy_killer.setup_killer(server)
dummy_killer.write_pid(PID)
try:
server.handle_request()
except socket.error:
print "Socket closed"
server.server_close()
cleanup(SOCK)
|
