# -*- coding: utf-8 -*-
"""
Created on Wed Dec 03 23:45:49 2014
Last Modified: 2016/10/19 12:13
@author: latyas
"""
from binascii import hexlify
import re, chardet
def hexed(s):
ret = ''
for i in s:
ret += '\\x' + hex(ord(i))[2:].rjust(2, '0')
return ret
filename = 'a.pcapng'
f = open(filename, 'r', encoding='ISO-8859-1')
text = f.read()
offset = re.search('\xF0\x00\xF0\x00[\x00-\xFF]{4}[\x03\x07]\x01', text).start() + 8
#print hexlify(text[offset:offset+330])
#print hexlify(text[offset:offset+338])
# print text[offset+334:offset+338].encode('hex')
if re.match('\x00\x00[\x00-\xFF]{2}', text[offset+334:offset+338]):
ror_version = True
else :
ror_version = False
# print ror_version
username_len = ord(text[offset+3]) - 20
username = text[offset+20:offset+20+username_len]
print('server = \'%s\'' % '.'.join([str(ord(i)) for i in text[offset-12:offset-8]]))
print('username=\'%s\'' % username)
print('password=\'\'')
print('CONTROLCHECKSTATUS = \'%s\'' % hexed(text[offset+56]))
print('ADAPTERNUM = \'%s\'' % hexed(text[offset+57]))
print('host_ip = \'%s\'' % '.'.join([str(ord(x)) for x in text[offset+81:offset+85]]))
print('IPDOG = \'%s\'' % hexed(text[offset+105]))
print('host_name = \'%s\'' % 'GILIGILIEYE')
print('PRIMARY_DNS = \'%s\'' % '.'.join([str(ord(x)) for x in text[offset+142:offset+146]]))
print('dhcp_server = \'%s\'' % '.'.join([str(ord(x)) for x in text[offset+146:offset+150]]))
print('AUTH_VERSION = \'%s\'' % hexed(text[offset+310:offset+312]))
if ror_version:
print('mac = 0x%s' % hexlify(bytes(text[offset+328:offset+334], encoding='ISO-8859-1')))
else:
print('mac = 0x%s' % hexlify(bytes(text[offset+320:offset+326], encoding='ISO-8859-1')))
print('host_os = \'%s\'' % 'NOTE7')
KEEP_ALIVE_VERSION = [i for i in re.findall('\xf0\x00\xf0\x00....\x07.\x5c\x28\x00\x0b\x01(..)', text) if i != '\x0f\x27'][0]
print('KEEP_ALIVE_VERSION = \'%s\'' % hexed(KEEP_ALIVE_VERSION))
print('ror_version = %s ' % ror_version)