b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Merge pull request #237680 from emilytrau/networkminer

Browse source
This commit is contained in:
Janik 2023-06-27 09:50:05 +02:00 committed by GitHub
parent 4f800142c3 64ac9d57b4
commit 921b5061a4
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 257 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

73
pkgs/tools/security/networkminer/default.nix Normal file
View file

@ -0,0 +1,73 @@
{ lib
, buildDotnetModule
, fetchurl
, unzip
, dos2unix
, makeWrapper
, msbuild
, mono
}:
buildDotnetModule rec {
pname = "networkminer";
version = "2.8";
src = fetchurl {
# Upstream does not provide versioned releases, a mirror has been uploaded
# to archive.org
url = "https://archive.org/download/networkminer-${lib.replaceStrings ["."] ["-"] version}/NetworkMiner_${lib.replaceStrings ["."] ["-"] version}_source.zip";
sha256 = "1n2312acq5rq0jizlcfk0crslx3wgcsd836p47nk3pnapzw0cqvv";
};
nativeBuildInputs = [ unzip dos2unix msbuild ];
patches = [
# Store application data in XDG_DATA_DIRS instead of trying to write to nix store
./xdg-dirs.patch
];
postPatch = ''
# Not all files have UTF-8 BOM applied consistently
find . -type f -exec dos2unix -m {} \+
# Embedded base64-encoded app icon in resx fails to parse. Delete it
sed -zi 's|<data name="$this.Icon".*</data>||g' NetworkMiner/NamedPipeForm.resx
sed -zi 's|<data name="$this.Icon".*</data>||g' NetworkMiner/UpdateCheck.resx
'';
nugetDeps = ./deps.nix;
buildPhase = ''
runHook preBuild
msbuild /p:Configuration=Release NetworkMiner.sln
runHook postBuild
'';
installPhase = ''
runHook preInstall
mkdir -p $out/bin $out/share
cp -r NetworkMiner/bin/Release $out/share/NetworkMiner
makeWrapper ${mono}/bin/mono $out/bin/NetworkMiner \
--add-flags "$out/share/NetworkMiner/NetworkMiner.exe" \
--add-flags "--noupdatecheck"
install -D NetworkMiner/NetworkMiner.desktop $out/share/applications/NetworkMiner.desktop
substituteInPlace $out/share/applications/NetworkMiner.desktop \
--replace "Exec=mono NetworkMiner.exe %f" "Exec=NetworkMiner" \
--replace "Icon=./networkminericon-96x96.png" "Icon=NetworkMiner"
install -D NetworkMiner/networkminericon-96x96.png $out/share/pixmaps/NetworkMiner.png
runHook postInstall
'';
meta = with lib; {
description = "The Open Source Network Forensic Analysis Tool (NFAT)";
homepage = "https://www.netresec.com/?page=NetworkMiner";
license = licenses.gpl2Only;
maintainers = with maintainers; [ emilytrau ];
platforms = platforms.linux;
mainProgram = "NetworkMiner";
};
}

8
pkgs/tools/security/networkminer/deps.nix generated Normal file
View file

@ -0,0 +1,8 @@
# This file was automatically generated by passthru.fetch-deps.
# Please dont edit it manually, your changes might get overwritten!
{ fetchNuGet }: [
(fetchNuGet { pname = "Microsoft.NETFramework.ReferenceAssemblies"; version = "1.0.2"; sha256 = "0i42rn8xmvhn08799manpym06kpw89qy9080myyy2ngy565pqh0a"; })
(fetchNuGet { pname = "Microsoft.NETFramework.ReferenceAssemblies.net461"; version = "1.0.2"; sha256 = "0js3dp26nszx82q0phv7hmsm5z23dva7javbmk6a91lbkm07y8p2"; })
(fetchNuGet { pname = "Microsoft.NETFramework.ReferenceAssemblies.net472"; version = "1.0.2"; sha256 = "1dny43jksy6dm9zrkdm8j80gb25w6wdvjlxnphj7ngf0fbg3dd2c"; })
]

174
pkgs/tools/security/networkminer/xdg-dirs.patch Normal file
View file

@ -0,0 +1,174 @@
diff --git a/NetworkMiner/NetworkMinerForm.cs b/NetworkMiner/NetworkMinerForm.cs
index 06c808b..6495b73 100644
--- a/NetworkMiner/NetworkMinerForm.cs
+++ b/NetworkMiner/NetworkMinerForm.cs
@@ -1,4 +1,4 @@
-// Copyright: Erik Hjelmvik, NETRESEC
+// Copyright: Erik Hjelmvik, NETRESEC
//
// NetworkMiner is free software; you can redistribute it and/or modify it
// under the terms of the GNU General Public License
@@ -419,7 +419,7 @@ namespace NetworkMiner {
}
try {
//require FileIOPermission to be PermissionState.Unrestricted
- string path = System.IO.Path.GetDirectoryName(System.Windows.Forms.Application.ExecutablePath) + System.IO.Path.DirectorySeparatorChar + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY;
+ string path = System.IO.Path.GetDirectoryName(SharedUtils.XdgDirectories.GetOrCreateXdgDataHome()) + System.IO.Path.DirectorySeparatorChar + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY;
System.Security.Permissions.FileIOPermission fileIOPerm = new System.Security.Permissions.FileIOPermission(System.Security.Permissions.FileIOPermissionAccess.AllAccess, path);
fileIOPerm.Demand();
}
@@ -1023,13 +1023,13 @@ namespace NetworkMiner {
public void CreateNewPacketHandlerWrapper(System.IO.DirectoryInfo outputDirectory) {
//make sure that folders exists
try {
- System.IO.DirectoryInfo di = new System.IO.DirectoryInfo(outputDirectory.FullName + System.IO.Path.DirectorySeparatorChar + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY);
+ System.IO.DirectoryInfo di = new System.IO.DirectoryInfo(SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY);
if (!di.Exists)
di.Create();
- di = new System.IO.DirectoryInfo(outputDirectory.FullName + System.IO.Path.DirectorySeparatorChar + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY + System.IO.Path.DirectorySeparatorChar + "cache");
+ di = new System.IO.DirectoryInfo(SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY + System.IO.Path.DirectorySeparatorChar + "cache");
if (!di.Exists)
di.Create();
- di = new System.IO.DirectoryInfo(outputDirectory.FullName + System.IO.Path.DirectorySeparatorChar + "Captures");
+ di = new System.IO.DirectoryInfo(SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + "Captures");
if (!di.Exists)
di.Create();
}
@@ -1962,7 +1962,7 @@ namespace NetworkMiner {
string filename = Tools.GenerateCaptureFileName(DateTime.Now);
//string filename="NM_"+DateTime.Now.ToString("s", System.Globalization.DateTimeFormatInfo.InvariantInfo).Replace(':','-')+".pcap";
- string fileFullPath = this.OutputDirectory.FullName + "Captures" + System.IO.Path.DirectorySeparatorChar + filename;
+ string fileFullPath = SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + "Captures" + System.IO.Path.DirectorySeparatorChar + filename;
//string fileFullPath = System.IO.Path.GetDirectoryName(System.IO.Path.GetFullPath(System.Windows.Forms.Application.ExecutablePath)) + System.IO.Path.DirectorySeparatorChar + "Captures" + System.IO.Path.DirectorySeparatorChar + filename;
//make sure to get the right datalink type
@@ -2534,7 +2534,7 @@ namespace NetworkMiner {
if (removeCapturedFiles) {
PacketParser.FileTransfer.FileStreamAssemblerList.RemoveTempFiles();
- string capturesDirectory = System.IO.Path.GetDirectoryName(System.IO.Path.GetFullPath(System.Windows.Forms.Application.ExecutablePath)) + System.IO.Path.DirectorySeparatorChar + "Captures";
+ string capturesDirectory = System.IO.Path.GetDirectoryName(System.IO.Path.GetFullPath(SharedUtils.XdgDirectories.GetOrCreateXdgDataHome())) + System.IO.Path.DirectorySeparatorChar + "Captures";
if (System.IO.Directory.Exists(capturesDirectory)) {
foreach (string pcapFile in System.IO.Directory.GetFiles(capturesDirectory))
try {
@@ -2545,7 +2545,7 @@ namespace NetworkMiner {
//this.ShowAnomaly("Error deleting file \"" + pcapFile + "\"", DateTime.Now);
}
}
- capturesDirectory = this.packetHandlerWrapper.PacketHandler.OutputDirectory + "Captures";
+ capturesDirectory = SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + "Captures";
if (System.IO.Directory.Exists(capturesDirectory)) {
foreach (string pcapFile in System.IO.Directory.GetFiles(capturesDirectory))
try {
@@ -2635,7 +2635,7 @@ namespace NetworkMiner {
try {
PacketParser.Utils.ByteConverter.ToByteArrayFromHexString(keyword);//to force valid hex
this.keywordListBox.Items.Add(keyword);
- //Lägg till keywordet till PacketHandler.PacketHandler!!!
+ //L�gg till keywordet till PacketHandler.PacketHandler!!!
}
catch (Exception ex) {
errorMessage = ex.Message;
@@ -2720,7 +2720,7 @@ namespace NetworkMiner {
#endregion
private void hostSortOrderComboBox_SelectedIndexChanged(object sender, EventArgs e) {
- //HÄR SKA detailsHeader LIGGA Enabled MASSA OLIKA SORTERINGSORDNINGAR:
+ //H�R SKA detailsHeader LIGGA Enabled MASSA OLIKA SORTERINGSORDNINGAR:
//IP, HOTSNAME, SENT PACKETS, RECEIVED PACKETS, MAC ADDRESS
this.RebuildHostsTree(sender, e);
}
@@ -2754,7 +2754,7 @@ namespace NetworkMiner {
foreach (string p in paths) {
if (!p.Contains(PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY))
return false;
- if (!this.IsSubDirectoryOf(new System.IO.DirectoryInfo(p), new System.IO.DirectoryInfo(this.packetHandlerWrapper.PacketHandler.OutputDirectory + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY)))
+ if (!this.IsSubDirectoryOf(new System.IO.DirectoryInfo(p), new System.IO.DirectoryInfo(SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY)))
return false;
}
return true;
@@ -3976,7 +3976,7 @@ finally {
}
private void closeToolStripMenuItem_Click(object sender, EventArgs e) {
- DialogResult yesOrNo = MessageBox.Show("Would you like to delete all extracted files from:" + Environment.NewLine + this.OutputDirectory.FullName + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY + System.IO.Path.DirectorySeparatorChar, "Delete extracted files?", MessageBoxButtons.YesNo);
+ DialogResult yesOrNo = MessageBox.Show("Would you like to delete all extracted files from:" + Environment.NewLine + SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY + System.IO.Path.DirectorySeparatorChar, "Delete extracted files?", MessageBoxButtons.YesNo);
this.ResetCapturedData(false, yesOrNo == DialogResult.Yes, true);
}
diff --git a/NetworkMiner/PcapOverIP/ReceivePcapOverTcpForm.cs b/NetworkMiner/PcapOverIP/ReceivePcapOverTcpForm.cs
index 9bae5f0..72586d4 100644
--- a/NetworkMiner/PcapOverIP/ReceivePcapOverTcpForm.cs
+++ b/NetworkMiner/PcapOverIP/ReceivePcapOverTcpForm.cs
@@ -162,7 +162,7 @@ namespace NetworkMiner.PcapOverIP {
DateTime lastFrameTimestamp = DateTime.MinValue;
string filename = Tools.GenerateCaptureFileName(DateTime.Now);
- string fileFullPath = this.packetHandler.OutputDirectory + "Captures" + System.IO.Path.DirectorySeparatorChar + filename;
+ string fileFullPath = SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + "Captures" + System.IO.Path.DirectorySeparatorChar + filename;
//string fileFullPath = System.IO.Path.GetDirectoryName(System.IO.Path.GetFullPath(System.Windows.Forms.Application.ExecutablePath)) + System.IO.Path.DirectorySeparatorChar + "Captures" + System.IO.Path.DirectorySeparatorChar + filename;
PcapFileWriter pcapFileWriter = new PcapFileWriter(fileFullPath, this.pcapStreamReader.FileDataLinkType[0]);
diff --git a/PacketParser/FileTransfer/FileStreamAssemblerList.cs b/PacketParser/FileTransfer/FileStreamAssemblerList.cs
index 4a6a4dd..129d48b 100644
--- a/PacketParser/FileTransfer/FileStreamAssemblerList.cs
+++ b/PacketParser/FileTransfer/FileStreamAssemblerList.cs
@@ -191,7 +191,7 @@ namespace PacketParser.FileTransfer {
if (removeExtractedFilesFromDisk) {
//remove all files
foreach (string subDirectory in System.IO.Directory.GetDirectories(this.FileOutputDirectory)) {
- if (subDirectory == this.FileOutputDirectory + System.IO.Path.DirectorySeparatorChar + "cache") {
+ if (subDirectory == SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + "cache") {
foreach (string cacheFile in System.IO.Directory.GetFiles(subDirectory))
try {
System.IO.File.Delete(cacheFile);
diff --git a/PacketParser/PacketHandler.cs b/PacketParser/PacketHandler.cs
index a600200..cb78071 100644
--- a/PacketParser/PacketHandler.cs
+++ b/PacketParser/PacketHandler.cs
@@ -1,4 +1,4 @@
-// Copyright: Erik Hjelmvik, NETRESEC
+// Copyright: Erik Hjelmvik, NETRESEC
//
// NetworkMiner is free software; you can redistribute it and/or modify it
// under the terms of the GNU General Public License
@@ -228,7 +228,7 @@ namespace PacketParser {
//this.networkTcpSessionDictionary=new Dictionary<int, NetworkTcpSession>();
this.networkTcpSessionList=new PopularityList<int, NetworkTcpSession>(200);
this.networkTcpSessionList.PopularityLost+=new PopularityList<int, NetworkTcpSession>.PopularityLostEventHandler(networkTcpSessionList_PopularityLost);
- this.FileStreamAssemblerList = new FileTransfer.FileStreamAssemblerList(this, 100, this.OutputDirectory + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY + System.IO.Path.DirectorySeparatorChar);
+ this.FileStreamAssemblerList = new FileTransfer.FileStreamAssemblerList(this, 100, SharedUtils.XdgDirectories.GetOrCreateXdgDataHome() + System.IO.Path.DirectorySeparatorChar + PacketParser.FileTransfer.FileStreamAssembler.ASSMEBLED_FILES_DIRECTORY + System.IO.Path.DirectorySeparatorChar);
this.FileStreamAssemblerList.PopularityLost += this.FileStreamAssemblerList_PopularityLost;
this.ReconstructedFileList=new List<FileTransfer.ReconstructedFile>();
this.credentialList=new SortedList<string, NetworkCredential>();
@@ -874,7 +874,7 @@ namespace PacketParser {
//check the frame content for keywords
foreach (byte[] keyword in this.keywordList) {
- //jAG SLUTADE HÄR. FUNKAR EJ VID RELOAD
+ //jAG SLUTADE H�R. FUNKAR EJ VID RELOAD
int keyIndex = receivedFrame.IndexOf(keyword);
if (keyIndex >= 0) {
if (networkPacket != null)
diff --git a/SharedUtils/XdgDirectories.cs b/SharedUtils/XdgDirectories.cs
new file mode 100644
index 0000000..80c09e3
--- /dev/null
+++ b/SharedUtils/XdgDirectories.cs
@@ -0,0 +1,15 @@
+using System;
+using System.IO;
+
+namespace SharedUtils {
+ public class XdgDirectories {
+ public static string GetOrCreateXdgDataHome() {
+ string home = Environment.GetFolderPath(Environment.SpecialFolder.UserProfile);
+ string data = Environment.GetEnvironmentVariable("XDG_DATA_HOME") ?? home + System.IO.Path.DirectorySeparatorChar + ".local" + System.IO.Path.DirectorySeparatorChar + "share";
+ string dir = data + System.IO.Path.DirectorySeparatorChar + "NetworkMiner";
+ // Directory.CreateDirectory(dir);
+ return dir;
+ }
+
+ }
+}

2
pkgs/top-level/all-packages.nix
View file

@ -9698,6 +9698,8 @@ with pkgs;
netsniff-ng = callPackage ../tools/networking/netsniff-ng { };
networkminer = callPackage ../tools/security/networkminer { };
nixpacks = callPackage ../applications/virtualization/nixpacks { };
nkeys = callPackage ../tools/system/nkeys { };