Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Calculate independent FMSs for each symbol message (fixes #15) #19

Closed
wants to merge 41 commits into from

Conversation

techge
Copy link
Contributor

@techge techge commented Aug 10, 2021

symbolListFMS did only calculate FMS for one message, instead of all
message of a symbol. Now it is create a DissectorMatcher object for each
message of the symbol and thus creates a FMS list of all message of
a symbol.

As far as I can see, the TODO is already mentioning the problem I ran into: the code as it is does only add one message, not all. I cleaned it up. I think it is working as intended now. Or am I missing anything here? Works for me so far :) and for netzob_fms.py and nemesys_fms.py as far as I can see...

Would fix #15

skleber and others added 30 commits September 19, 2018 16:59
…c doctests, and add layer parameter to all scripts
* release:
  finish NEMETYL development, INFOCOM2020 paper release
  massive code cleanup, refactor AbstractSegment and its type hints to allow for simpler subtype checks
  initate NEMETYL development
  README update: compatibility
  compatibility to tshark 2.6.3 json output
* pin versions

* sort requirements.txt

* Remove netzob, install manually instead

* Add Dockerfile

* rename workdir to nemere

* Pin netzob commit

* Install pylstar manually

pylstar is a dependency of netzob, but pip refuses to install it.
Therefore, we are just installing it manually befor installing netzob.
skleber and others added 11 commits June 29, 2021 00:09
    fix failing doctests
    remove namespace cluttering imports in nemere/__init__.py
    add some debug output per logger
    handle smb's NT IOCTL Data
    fix performance in getting tshark-version-compatible ParsingConstants
    fix typos
    fix parallel dissimilarity calculation
    fix minor doctest issues
    small fixes in main scripts
    add details in comments
   fix failing doctests
   remove namespace cluttering imports in nemere/__init__.py
   add some debug output per logger
   handle smb's NT IOCTL Data
   fix performance in getting tshark-version-compatible ParsingConstants
   fix typos
   fix parallel dissimilarity calculation
   fix minor doctest issues
   small fixes in main scripts
   add details in comments
* release:
  Squashed commit of the following:
This shall overrided the version used by netzob which is deprecated and
results in python warnings because of old code.
_getElementByName always returns a list now
    simplify if-cascade in ParsedMessage._parseJSON
    add test cases for messageParser/ParsedMessage._getElementByName
    fix doctests to be called by nosetests
    added dns field for type lookup (by Mathias Wagner)
symbolListFMS did only calculate FMS for one message, instead of all
message of a symbol. Now it is create a DissectorMatcher object for each
message of the symbol and thus creates a FMS list of all message of
a symbol.
@skleber
Copy link
Contributor

skleber commented Jun 24, 2022

You (accidently) removed the WatchdogTimeout try-catch block that prevents a (almost) indefinite runtime for Symbols that Netzob essentially fails in parsing. Granted, this watchdog is a crude workaround, but still necessary in my eyes. Could you readd this in your PR?

Copy link
Contributor

@skleber skleber left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

see my comment for the PR

@skleber
Copy link
Contributor

skleber commented Jan 21, 2024

Having a second look, it noticed, its not that easy, unfortunately.
Continue the discussion in the Issue #15.

@skleber skleber closed this Jan 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

FMS calculation only done for one message in a symbol
2 participants