10.3.1 網(wǎng)絡嗅探器

????? 網(wǎng)絡嗅探器可以檢測本機所在局域網(wǎng)內(nèi)的網(wǎng)絡流量和數(shù)據(jù)包收發(fā)情況。

import socket
import threading
import time

activeDegree = dict()
flag = 1
def main():
    global activeDegree
    global flag
    # 獲取 IP 地址
    HOST = socket.gethostbyname(socket.gethostname())
    print('HOST:', HOST)
    #
    s = socket.socket(socket.AF_INET, socket.SOCK_RAW, socket.IPPROTO_IP)
    s.bind((HOST, 0))   # 0 表示所有端口
    #
    s.setsockopt(socket.IPPROTO_IP, socket.IP_HDRINCL, 1)
    #   打開混雜模式，接收所有包
    s.ioctl(socket.SIO_RCVALL, socket.RCVALL_ON)
    #
    while flag:
        c = s.recvfrom(65565)   # 接收一個數(shù)據(jù)包
        print(type(c))
        host = c[1][0]
        activeDegree[host] = activeDegree.get(host, 0) + 1
        print(c)
    s.ioctl(socket.SIO_RCVALL, socket.RCVALL_OFF)   # 關閉混雜模式
    s.close()

t = threading.Thread(target = main)  # 創(chuàng)建線程
t.start()   # 啟動線程，開始嗅探
time.sleep(60)
flag = 0
t.join()    # 等待子線程
for item in activeDegree.items():
    print(item)

10.3.2 多進程端口掃描器

import socket
import multiprocessing
import sys

def ports(ports_service):
    # 獲取常用端口對應的服務名稱
    for port in list(range(1, 100)) + [143, 145, 133, 443, 445, 3389, 8080]:
        try:
            ports_service[port] = socket.getservbyport(port)
        except socket.error:
            pass

def ports_scan(host, ports_service):
    ports_open = []
    try:
        sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        # 超時時間的不同會影響掃描結果的精確度
        sock.settimeout(0.01)
    except socket.error:
        print('socket creaation error')
        sys.exit()
    for port in ports_service:
        try:
            # 嘗試連接指定端口
            sock.connect((host, port))
            # 記錄打開端口
            ports_open.append(port)
            sock.close()
        except socket.error:
            pass
    return ports_open

if __name__ == '__main__':
    m = multiprocessing.Manager()
    ports_service = dict()
    results = dict()
    ports(ports_service)
    # 創(chuàng)建線程池，允許 8 個線程同時運行
    pool = multiprocessing.Pool(processes = 8)
    net = '169.254.143.'
    for host_number in map(str, range(200, 256)):
        host = net + host_number
        # 創(chuàng)建一個新進程，同時記錄運行結果
        results[host] = pool.apply_async(ports_scan, (host, ports_service))
        print('starting ' + host + '...')
    # 關閉進程池，close() 必須在 join() 之前調(diào)用
    pool.close()
    # 等待進程池的進程全部執(zhí)行結束
    pool.join()
 
    # 打印輸出結果
    for host in results:
        print('=' * 30)
        print(host, '.'*10)
        for port in results[host].get():
            print(port, ':', ports_service[port])