-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Calculate independent FMSs for each symbol message (fixes #15) #19
Conversation
…c doctests, and add layer parameter to all scripts
…allow for simpler subtype checks
* release: finish NEMETYL development, INFOCOM2020 paper release massive code cleanup, refactor AbstractSegment and its type hints to allow for simpler subtype checks initate NEMETYL development README update: compatibility compatibility to tshark 2.6.3 json output
* pin versions * sort requirements.txt * Remove netzob, install manually instead * Add Dockerfile * rename workdir to nemere * Pin netzob commit * Install pylstar manually pylstar is a dependency of netzob, but pip refuses to install it. Therefore, we are just installing it manually befor installing netzob.
WIP: Minor fixes
fix failing doctests remove namespace cluttering imports in nemere/__init__.py add some debug output per logger handle smb's NT IOCTL Data fix performance in getting tshark-version-compatible ParsingConstants fix typos fix parallel dissimilarity calculation fix minor doctest issues small fixes in main scripts add details in comments
fix failing doctests remove namespace cluttering imports in nemere/__init__.py add some debug output per logger handle smb's NT IOCTL Data fix performance in getting tshark-version-compatible ParsingConstants fix typos fix parallel dissimilarity calculation fix minor doctest issues small fixes in main scripts add details in comments
* release: Squashed commit of the following:
This shall overrided the version used by netzob which is deprecated and results in python warnings because of old code.
_getElementByName always returns a list now
Typos and docu
simplify if-cascade in ParsedMessage._parseJSON add test cases for messageParser/ParsedMessage._getElementByName fix doctests to be called by nosetests added dns field for type lookup (by Mathias Wagner)
symbolListFMS did only calculate FMS for one message, instead of all message of a symbol. Now it is create a DissectorMatcher object for each message of the symbol and thus creates a FMS list of all message of a symbol.
You (accidently) removed the WatchdogTimeout try-catch block that prevents a (almost) indefinite runtime for Symbols that Netzob essentially fails in parsing. Granted, this watchdog is a crude workaround, but still necessary in my eyes. Could you readd this in your PR? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
see my comment for the PR
Having a second look, it noticed, its not that easy, unfortunately. |
symbolListFMS did only calculate FMS for one message, instead of all
message of a symbol. Now it is create a DissectorMatcher object for each
message of the symbol and thus creates a FMS list of all message of
a symbol.
As far as I can see, the TODO is already mentioning the problem I ran into: the code as it is does only add one message, not all. I cleaned it up. I think it is working as intended now. Or am I missing anything here? Works for me so far :) and for
netzob_fms.py
andnemesys_fms.py
as far as I can see...Would fix #15