File: //usr/lib/python3/dist-packages/samba/emulate/__pycache__/traffic.cpython-310.pyc
o
�/adS �
@ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZm Z d dl
m Z m Z m
Z
mZ d dlmZ d dlmZ d dlmZ d dlZd dlmZ d dlmZ d d lmZmZm Z d d
lm Z d d l m Z d d lm Z d d
lm!Z! d dl"m#Z# d dl$Z$d dl%m&Z&m'Z'm(Z( d dl)m*Z* d dl+m,Z,m-Z-m.Z.m/Z/ d dl0m1Z1 d dl2m3Z3 d dl2m4Z4 d dl5m6Z6 d dl7m8Z8 d dl9Z9dZ:dZ;dZ<dZ=dddddddddd� Z>ddddddddd �Z?h d �Z@d ZAdeA ZBd ZCd ZDe8eEd �ZFd!d"� ZGd#d$� ZHd%d&� ZIG d'd(� d(eJ�ZKG d)d*� d*eL�ZMd+d,� ZNd-d.� ZOG d/d0� d0eL�ZPG d1d2� d2eL�ZQG d3d4� d4eL�ZRG d5d6� d6eR�ZS�dCd8d9�ZTd:d;� ZUd<d=� ZVd>d?� ZWG d@dA� dAeL�ZX�dDdCdD�ZYi dEdF�dGdH�dIdH�dJdH�dKdH�dLdH�dMdF�dNdH�dOdH�dPdH�dQdH�dRdH�dSdF�dTdF�dUdH�dVdF�ZZi dWdX�dYdZ�d[d\�d]d^�d_d`�dadb�dcdd�dedf�dgdh�didj�dkdl�dmdn�dodp�dqdr�dsdt�dudv�dwdx�i dydz�d{d|�d}d~�dd��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�dd�d�d��d�df�d�d���i d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�dx�d�dz�d�d��d�d��d�d��d�d��d�d��d�d��d�d��d�d���i d�d��d�d��d�d��d�d��d�dd�dēd�dƓd�dȓd�dʓd�d̓d�dΓd�dГd�dғd�dԓd�d֓d�dؓd�dړ�i d�dܓd�dޓd�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d�d��d�d��d�d��d�d���d�d�d�d��d �d�d�d�d��Z[�d�d� Z\�d�d� Z]�dE�d �d
�Z^�dF�d �d �Z_ �
�dG�d�d�Z`�d�d� Za�d�d� Zb�d�d� Zce�d�d�Zd�d�d� Ze� �dH�d�d �Zf�d �d � Zg�d �d � Zh�d!�d"� Zi�dI�d%�d&�Zj�d'�d(� Zk�dH�d)�d*�Zl� �dH�d+�d,�Zm�d-�d.� Zn�d/�d0� Zo�d1�d2� Zp� �dH�d3�d4�ZqG �d5�d6� �d6eL�Zr�d7�d8� Zs�d9�d:� Zt�d;�d<� Zu�d=�d>� Zv�d?�d@� Zw�dA�dB� ZxdS (J � N)�ECHILD�ESRCH)� OrderedDict�Counter� defaultdict�
namedtuple)�query)�traffic_packets)�SamDB)�LdbError)�ClientConnection)�security�drsuapi�lsa)�netlogon)�netr_Authenticator)�srvsvc)�samr)�
drs_DsBind)� Credentials�DONT_USE_KERBEROS�MUST_USE_KERBEROS)�system_session)�UF_NORMAL_ACCOUNT�UF_SERVER_TRUST_ACCOUNT�UF_TRUSTED_FOR_DELEGATION� UF_WORKSTATION_TRUST_ACCOUNT)� SEC_CHAN_BDC)�gensec)�sd_utils)�
get_string)�get_samba_logger� ga2U0*�3?�-� �?) ��dns�0��smb�0x72��ldapr' �r, �3�r, �2��cldapr. ��dcerpc�11�r4 �14��nbnsr' )�r& �1�r, r; �r, �4�r, �5�r2 r@ �r4 �12�r4 �13�r4 �15> r) �smb2�browser� smb_netlogong $@)i���������namec G s< | t kr |st|tjd� dS t|t|� tjd� dS dS )a� Print a formatted debug message to standard error.
:param level: The debug level, message will be printed if it is <= the
currently set debug level. The debug level can be set with
the -d option.
:param msg: The message to be logged, can contain C-Style format
specifiers
:param args: The parameters required by the format specifiers
��fileN)� DEBUG_LEVEL�print�sys�stderr�tuple)�level�msg�args� rX �7/usr/lib/python3/dist-packages/samba/emulate/traffic.py�debuge s
�rZ c G sf t jdd�}td|d d |d d f dtjd� | D ] }t|tjd� q ttjd� tj�� d S )
zK Print an unformatted log message to stderr, contaning the line number
r" )�limitz %s:[01;33m%s [00mr � � )�endrO rN N)� traceback�
extract_stackrQ rR rS �flush)rW �tb�arX rX rY � debug_linenow s �� rd c sR | r#d}| D ]}|d7 }||9 }|d; }qdd| � � fdd�}|S dd� }|S )z�Return a function that prints a coloured line to stderr. The colour
of the line depends on a sort of hash of the integer arguments.�� � z
[38;5;%dm� c s0 t dkr| D ]}td� |f tjd� qd S d S )Nr z %s%s[00mrN �rP rQ rR rS �rW rc ��prefixrX rY �p� s
�z random_colour_print.<locals>.pc W s( t dkr| D ] }t|tjd� qd S d S )Nr rN rh ri rX rX rY rl � s
�rX )�seeds�s�xrl rX rj rY �random_colour_print� s
�rp c @ s e Zd ZdS )�FakePacketErrorN)�__name__�
__module__� __qualname__rX rX rX rY rq � s rq c @ st e Zd ZdZdZdd� Zedd� �Zddd �Zd
d � Z d d
� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zd dd�ZdS ) �PacketzDetails of a network packet�
� timestamp� ip_protocol�
stream_number�src�dest�protocol�opcode�desc�extra� endpointsc
C sf || _ || _|| _|| _|| _|| _|| _|| _| | _| j| jk r*| j| jf| _ d S | j| jf| _ d S �Nrv )
�selfrw rx ry rz r{ r| r} r~ r rX rX rY �__init__� s zPacket.__init__c
C sh |� d��d�}|d d� \}}}}}}} }
|dd � } t|�}t|�}t|�}| ||||||| |
| � S )N�
� � )�rstrip�split�float�int) �cls�line�fieldsrw rx ry rz r{ r| r} r~ r rX rX rY � from_line� s"
� �zPacket.from_line� c C sF d� | j�}| j| }|d|| j| jpd| j| j| j| j| j |f fS )z5Format the packet as a traffic_summary line.
r� z%f %s %s %d %d %s %s %s %s� )
�joinr rw rx ry rz r{ r| r} r~ )r� � time_offsetr �trX rX rY �
as_summary� s
��zPacket.as_summaryc
C sL d| j | j| j| jp d| j| j| j| j| jr"dd� | j� d f S df S )Nz:%.3f: %d -> %d; ip %s; strm %s; prot %s; op %s; desc %s %sr# � «r] � »r� )
rw rz r{ rx ry r| r} r~ r r� �r� rX rX rY �__str__� s ����zPacket.__str__c C s d| S )Nz <Packet @%s>rX r� rX rX rY �__repr__� s zPacket.__repr__c C s, | � | j| j| j| j| j| j| j| j| j � S r� )
� __class__rw rx ry rz r{ r| r} r~ r r� rX rX rY �copy� s �z Packet.copyc C s d| j | jf }|S )Nz%s:%s�r| r} )r� r� rX rX rY �as_packet_type� s zPacket.as_packet_typec C s2 | j | jf}|tv rt| S |tv rt| S dS )z�A positive number means we think it is a client; a negative number
means we think it is a server. Zero means no idea. range: -1 to 1.
r� )r| r} � CLIENT_CLUES� SERVER_CLUES)r� �keyrX rX rY � client_score� s
zPacket.client_scorec C s d| j | jf }ztt|�}W n ty. } ztd|j|f tjd� W Y d}~dS d}~ww | j dkr>t dd|j|f � t
�
� }z"|| ||�rbt
�
� }|| }td||j| j | j|f � W dS W dS t y� } z t
�
� }|| }td ||j| j | j||f � W Y d}~dS d}~ww )
z�Send the packet over the network, if required.
Some packets are ignored, i.e. for protocols not handled,
server response messages, or messages that are generated by the
protocol layer associated with other packets.
� packet_%s_%sz#Conversation(%s) Missing handler %srN N�kerberosr" z#Conversation(%s) Calling handler %sz%f %s %s %s %f True z%f %s %s %s %f False %s) r| r} �getattrr �AttributeErrorrQ �conversation_idrR rS rZ �time� Exception) r� � conversation�context�fn_name�fn�e�startr^ �durationrX rX rY �play sJ ����
�
� ��
����z Packet.playc C s | j |j S r� �rw �r� �otherrX rX rY �__cmp__+ � zPacket.__cmp__Nc C s t | j| j�S r� )�is_a_real_packetr| r} )r� �missing_packet_statsrX rX rY �is_really_a_packet. s zPacket.is_really_a_packet)r� r� )rr rs rt �__doc__� __slots__r� � classmethodr� r� r� r� r� r� r� r� r� r� rX rX rX rY ru � s
(ru c C sj | t v rdS | dkr|dkrdS d| |f }tt|d�}|du r,tjd| tjd� dS |tju r3dS dS ) zdIs the packet one that can be ignored?
If so removing it will have no effect on the replay
Fr, r� r� Nzmissing packet %srN T)�SKIPPED_PROTOCOLSr� r �LOGGERrZ rR rS � null_packet)r| r} r� r� rX rX rY r� 2 s
r� c C s& | dkrdS | |fdv rdS t | |�S )z�Return true if a packet generates traffic in its own right. Some of
these will generate traffic in certain contexts (e.g. ldap unbind
after a bind) but not if the conversation consists only of these packets.
�waitF)�r� r� r/ rF �r4 �16)r� r� rX rX rY � is_a_traffic_generating_packetH s
r� c
@ s� e Zd ZdZddddddddddej�d�ddf
dd�Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z dd� Z
d+dd�Zd,dd�Zd,dd�Zd,dd�Zd,dd �Zd-d d �Zd-d d �Zd,d!d"�Zd#d$� Zd%d&� Zd'd(� Zd)d*� ZdS ).�
ReplayContextaW State/Context for a conversation between an simulated client and a
server. Some of the context is shared amongst all conversations
and should be generated before the fork, while other context is
specific to a particular conversation and should be generated
*after* the fork, in generate_process_local_config().
N�DOMAINc C s� || _ d | _|| _|| _|rt| _nt| _| | _|
| _| | _ || _
|| _ | | _ |�
d�| _|
| _|| _d| _d| _d| _d| _d| _d| _d| _d| _|| _| �� d S )N�realmF)�server�netlogon_connection�creds�lpr �kerberos_stater �ou�base_dn�domain�statsdir�global_tempdir�
domain_sid�getr� � instance_id�badpassword_frequency�last_lsarpc_bad�last_lsarpc_named_bad�last_simple_bind_bad�
last_bind_bad�last_srvsvc_bad�last_drsuapi_bad�last_netlogon_bad�last_samlogon_bad�total_conversations�generate_ldap_search_tables)r� r� r� r� r� r� �prefer_kerberos�tempdirr� r� r� r� r� r� rX rX rY r� a s4 zReplayContext.__init__c C s
t � }td| j || j| jd�}|j|�� tjdgdgd�}i }dg i}|D ]-}t |j
�}d� dd � |� d�D ���
� }|�|g �} | �|� |�d
�rS|d �|� q&t|�� �D ]L}
|
d d � d kreqZ|
d d � } | d d � d kr�| d d � } | d d � d ksstd
�D ] } | d 7 } | |
kr�| |v r�td|
| f tjd� q�||
|| < q�qZ|| _|| _i | _|j|�� tjdgdd�}d� dd � |D ��}
d�|
�| jd< d}dD ] }|d�||�� �7 }q�d�|�| jd< d| jd< |jdtjdgd �}d �|d d �| jd < d S ) N� ldap://%s)�url� session_info� credentialsr� zpaged_results:1:1000�dn)�scope�controls�attrs� invocationId�,c s s � | ] }|� � d d� V qd S )Nr" )�lstrip��.0ro rX rX rY � <genexpr>� s � z<ReplayContext.generate_ldap_search_tables.<locals>.<genexpr>zCN=NTDS Settings,rK z,DC� zdn_map collison %s %srN z"(objectclass=groupPolicyContainer))r� r� �
expressionr� c s s � | ]
}d � |d �V qdS )z(distinguishedName={0})r� N)�format)r� rV rX rX rY r� � s � z(|{0})�gPCFileSysPath)zDomain Controllers,ztraffic_replay,r� z(distinguishedName={0}{1})�gpLinkz'(objectCategory=pKICertificateTemplate)�pKIExtendedKeyUsage�highestCommittedUSN)r� r� z(usnChanged>={0})r �
usnChanged) r r
r� r� r� �search� domain_dn�ldb�
SCOPE_SUBTREE�strr� r� r� �upper�
setdefault�append�
startswith�list�keys�rangerQ rR rS �dn_map�attribute_clue_map�search_filtersr� �
SCOPE_BASE)r� �session�db�resr r �rr� �patternr& �krl �i�
gpos_by_dn�ou_strr� rX rX rY r� � sn
�
��
� � ���� �z)ReplayContext.generate_ldap_search_tablesc C sT | j �� D ]
}||v r| j | S q|dkr(t�� | j }t| j|�}d| S dS )NzDC,DCz((&(sAMAccountName=%s)(objectClass=user))z(objectClass=*))r r �randomr� � user_namer� )r� r� �dn_sigr� r� �random_user_id� account_namerX rX rY �guess_search_filter� s � z!ReplayContext.guess_search_filterc C s� g | _ g | _g | _g | _g | _g | _g | _|j| _|j| _|j | _ |j
| _
t | j d|j
�| _| j�d| j� | j�d| j� | j�d| j� | j�dd� d| _d| j| jf | _d| j | jf | _| �� | �� d S ) Nzconversation-%dz private dirzlock dirzstate directoryztls verify peer�no_checkz/root/ncalrpc_as_system�cn=%s,%s)�ldap_connections�dcerpc_connections�lsarpc_connections�lsarpc_connections_named�drsuapi_connections�srvsvc_connections�
samr_contexts� netbios_name� machinepass�username�userpass�
mk_masked_dirr� r� r� r� �set�
remoteAddressr� � samlogon_dn�user_dn�generate_machine_creds�generate_user_creds)r� �accountr� rX rX rY � generate_process_local_config� s: ��
�
� z+ReplayContext.generate_process_local_configc C sR |s!| j r t�� | j k r z||� W n ty Y nw d}nd}||�}||fS )a Execute the supplied logon function, randomly choosing the
bad credentials.
Based on the frequency in badpassword_frequency randomly perform the
function with the supplied bad credentials.
If run with bad credentials, the function is re-run with the good
credentials.
failed_last_time is used to prevent consecutive bad credential
attempts. So the over all bad credential frequency will be lower
than that requested, but not significantly.
TF)r� r r� )r� �f�good�bad�failed_last_time�resultrX rX rY �with_random_bad_credentials s �z)ReplayContext.with_random_bad_credentialsc C s� t � | _| j�| j� | j�| j� | j�| j� | j�| j � | j�
| j � | j� | j
� t � | _| j�| j� | j�| j� | j�| jdd� � | j�| j � | j� | j
� t � | _| j�| j� | j�| j� | j�| j� | j�| j � | j�| j�� tjB � | j� | j
� | j�| j� t � | _| j�| j� | j�| j� | j�| jdd� � | j�| j � | j�| j�� tjB � | j� | j
� | j�| j� dS )a; Generate the conversation specific user Credentials.
Each Conversation has an associated user account used to simulate
any non Administrative user traffic.
Generates user credentials with good and bad passwords and ldap
simple bind credentials with good and bad passwords.
N���)r �
user_creds�guessr� �set_workstationr � set_passwordr" � set_usernamer! �
set_domainr� �set_kerberos_stater� �user_creds_bad�simple_bind_creds�set_gensec_features�get_gensec_featuresr � FEATURE_SEAL� set_bind_dnr' �simple_bind_creds_badr� rX rX rY r) 1 sF ���z!ReplayContext.generate_user_credsc C s� t � | _| j�| j� | j�| j� | j�t� | j�| j � | j�
| jd � | j� | j � | j�
| j� t � | _| j�| j� | j�| j� | j�t� | j�| j dd� � | j�
| jd � | j�
| j� dS )z�Generate the conversation specific machine Credentials.
Each Conversation has an associated machine account.
Generates machine credentials with good and bad passwords.
�$Nr2 )r �
machine_credsr4 r� r5 r �set_secure_channel_typer r6 r r7 r8 r� r9 r� �machine_creds_badr� rX rX rY r( _ s z$ReplayContext.generate_machine_credsc C sV | j �|�}|r
t�|�S |�� }|r(|| jv r t�| j| �S |dd � }|s| jS )N� )r r� r �choicer� r r� )r� r �
attributes� attr_cluerX rX rY �get_matching_dnx s
�z ReplayContext.get_matching_dnFc C s@ d}| j r |s | j d S td| j |df| j�}| j �|� |S )Nz$12345678-1234-abcd-ef00-01234567cffb���zncacn_ip_tcp:%sr\ )r r r� r� r� )r� �new�guid�crX rX rY �get_dcerpc_connection� s
� z#ReplayContext.get_dcerpc_connectionc �L � j r
|s
� j d S � fdd�}� �|� j� j� j�\}� _� j �|� |S )NrJ c � t � d� j � j| �S �Nz ncacn_np:%s)r r� r� �r� r� rX rY �connect� � �z4ReplayContext.get_srvsvc_connection.<locals>.connect)r r1 r3 r: r� r� �r� rK rS rM rX r� rY �get_srvsvc_connection� �
�� z#ReplayContext.get_srvsvc_connectionc rO )NrJ c s d}t �d� j|f � j| �S )Nzschannel,seal,sign�ncacn_ip_tcp:%s[%s]�r �lsarpcr� r� )r� �binding_optionsr� rX rY rS � s ��z4ReplayContext.get_lsarpc_connection.<locals>.connect)r r1 rB rD r� r� rU rX r� rY �get_lsarpc_connection� s
�� z#ReplayContext.get_lsarpc_connectionc rO )NrJ c s t �d� j � j| �S rQ rY rR r� rX rY rS � rT z?ReplayContext.get_lsarpc_named_pipe_connection.<locals>.connect)r r1 rB rD r� r� rU rX r� rY � get_lsarpc_named_pipe_connection� rW z.ReplayContext.get_lsarpc_named_pipe_connectionc sd � j r |s � j d }|S � fdd�}� �|� j� j� j�\}� _t|�\}}||f}� j �|� |S )z get a (drs, drs_handle) tuplerJ c s" d}d� j |f }t�|� j| �S )N�sealrX )r� r r� )r� r[ �binding_stringr� rX rY rS � s
�z:ReplayContext.get_drsuapi_connection_pair.<locals>.connect)r r1 r3 r: r� r r� )r� rK �unbindrM rS �drs�
drs_handle�supported_extensionsrX r� rY �get_drsuapi_connection_pair� s
�� z)ReplayContext.get_drsuapi_connection_pairc sz � j r
|s
� j d S � fdd�}� fdd�}|r'� �|� j� j� j�\}� _n� �|� j� j� j�\}� _� j �|� |S )NrJ c � t d� j | � jd�S )a$
To run simple bind against Windows, we need to run
following commands in PowerShell:
Install-windowsfeature ADCS-Cert-Authority
Install-AdcsCertificationAuthority -CAType EnterpriseRootCA
Restart-Computer
z
ldaps://%s�r� r� �r
r� r� rR r� rX rY � simple_bind� s
�z6ReplayContext.get_ldap_connection.<locals>.simple_bindc re )Nr� rf rg rR r� rX rY � sasl_bind� s
�z4ReplayContext.get_ldap_connection.<locals>.sasl_bind) r r1 r; r@ r� r3 r: r� r� )r� rK �simplerh ri �samdbrX r� rY �get_ldap_connection� s&
�
��� z!ReplayContext.get_ldap_connectionc C s0 | j r|r| j �t| j| j| jd�� | j d S )N)r� r� rJ )r r� � SamrContextr� r� r� )r� rK rX rX rY �get_samr_context s
�
z ReplayContext.get_samr_contextc s> � j r� j S � fdd�}� �|� j� j� j�\}� _|� _ |S )Nc rP )Nz ncacn_ip_tcp:%s[schannel,seal])r r� r� rR r� rX rY rS s ��z6ReplayContext.get_netlogon_connection.<locals>.connect)r� r1 rB rD r� )r� rS rM rX r� rY �get_netlogon_connection s ��z%ReplayContext.get_netlogon_connectionc C s
| j dfS )N�A�r� r� rX rX rY �guess_a_dns_lookup$ �
z ReplayContext.guess_a_dns_lookupc C s> | j �� }t� }dd� |d D �|j_|d |_t� }||fS )Nc S s" g | ]
}t |t�r |nt|��qS rX )�
isinstancer� �ordr� rX rX rY �
<listcomp>* s �z3ReplayContext.get_authenticator.<locals>.<listcomp>�
credentialrw )rB �new_client_authenticatorr �cred�datarw )r� �auth�current�
subsequentrX rX rY �get_authenticator' s
�
z ReplayContext.get_authenticatorc K sL t j�| j|�}t|d�}|�� D ]\}}td||f |d� q|�� dS )z�Write arbitrary key/value pairs to a file in our stats directory in
order for them to be picked up later by another process working out
statistics.�wz%s: %srN N)�os�pathr� r� �open�itemsrQ �close)r� �filename�kwargsr, r �vrX rX rY � write_stats1 s
zReplayContext.write_statsr� )F)FF)rr rs rt r� r� �environr� r� r� r r+ r1 r) r( rI rN rV r\ r] rd rl rn ro rr r~ r� rX rX rX rY r� Z sD
�,W .
&
r� c @ s* e Zd ZdZd dd�Zdd� Zdd� ZdS )
rm z5State/Context associated with a samr connection.
Nc C s@ d | _ d | _d | _d | _d | _d | _d | _|| _|| _|| _ d S r� )
�
connection�handle�
domain_handler� � group_handle� user_handle�ridsr� r� r� )r� r� r� r� rX rX rY r� ? s
zSamrContext.__init__c C s( | j stjd| j | j| jd�| _ | j S )Nzncacn_ip_tcp:%s[seal])�lp_ctxr� )r� r r� r� r� r� rX rX rY �get_connectionK s �zSamrContext.get_connectionc C s$ | j s| �� }|�d tj�| _ | j S r� )r� r� �Connect2r
�SEC_FLAG_MAXIMUM_ALLOWED)r� rM rX rX rY �
get_handleT s zSamrContext.get_handle�NN)rr rs rt r� r� r� r� rX rX rX rY rm < s
rm c @ s� e Zd ZdZ d dd�Zdd� Zdd � Z
d d d �Zd
d� ZeZ dd� Z
dd� Z dd� Z dd� Z
d!dd�Zd"dd�Zdd � Zd d � ZdS )#� ConversationzADetails of a converation between a simulated client and a server.NrX c C s@ || _ || _g | _t|�| _d| _|| _|D ]}| j|� qd S )Nr� )�
start_timer� �packetsrp rV �client_balancer� �add_short_packet)r� r� r� �seqr� rl rX rX rY r� ] s
�zConversation.__init__c C s6 | j d u r|j d u r dS dS |j d u rdS | j |j S )Nr rJ r\ )r� r� rX rX rY r� h s
zConversation.__cmp__c C s� |� � }| jdu r
|j| _| jdu r|j| _|j| jkr&td| j|jf ��| j| j8 _|j|jd kr@| j|�� 8 _n | j|�� 7 _|�� rU| j �
|� dS dS )zmAdd a packet object to this conversation, making a local copy with
a conversation-relative timestamp.Nz8Conversation endpoints %s don't matchpacket endpoints %sr ) r� r� rw r� rq rz r� r� r� r� r� )r� �packetrl rX rX rY �
add_packetq s
��zConversation.add_packetTc
C s� |r t ||�s dS | �� \}}|s||}}||f} t�| d�}
t�|d�} t|| j | d|||||
|� } | j| jd krG| j | �
� 8 _ n | j | �
� 7 _ | � � r\| j �
| � dS dS )z�Create a packet from a timestamp, and 'protocol:opcode' pair, and a
(possibly empty) list of extra data. If client is True, assume
this packet is from the client to the server.
Nr� �06r )r� �guess_client_server�OP_DESCRIPTIONSr� � IP_PROTOCOLSru r� rz r� r� r� r� r� r� )
r� rw r| r} r �client�skip_unused_packetsrz r{ r� r~ rx r� rX rX rY r� � s$
��z Conversation.add_short_packetc C s d| j | j| jt| j�f S )Nz-<Conversation %s %s starting %.3f %d packets>)r� r� r� �lenr� r� rX rX rY r� � s
��zConversation.__str__c C �
t | j�S r� )�iterr� r� rX rX rY �__iter__� rs zConversation.__iter__c C r� r� )r� r� r� rX rX rY �__len__� rs zConversation.__len__c C s* t | j�dk r dS | jd j| jd j S )Nr" r rJ )r� r� rw r� rX rX rY � get_duration� s zConversation.get_durationc s � fdd�� j D �S )Nc s g | ]}|� � j��qS rX )r� r� �r� rl r� rX rY rv � � z8Conversation.replay_as_summary_lines.<locals>.<listcomp>)r� r� rX r� rY �replay_as_summary_lines� s z$Conversation.replay_as_summary_linesc
C s� | j }t�� | }|| }|t }|dkrt�|� t�� | | }| �d| |f � d} d}
t�� } | jD ]=} t�� | }|| j }|| krI|} |dk rm| t }|dkrmt�|� t�� | }|| j |
krm|| j }
| �| |� q6| ||
fS )zMReplay the conversation at the right time.
(We're already in a fork).r zstarting %s [miss %.3f]r� )r� r� �SLEEP_OVERHEAD�sleeprV r� rw r� )
r� r� r� r* r� �now�gap�
sleep_time�miss�max_gap�max_sleep_miss�p_startrl rX rX rY �replay_with_delay� s2
z Conversation.replay_with_delayc C s> | j \}}| jdk r||fS | jdkr||kr||fS ||fS )zhHave a go at deciding who is the server and who is the client.
returns (client, server)
r )r� r� )r� � server_cluerc �brX rX rY r� � s
z Conversation.guess_client_serverc s: � �fdd�| j D �| _ | j r| j d j| _dS d| _dS )z�Prune any packets outside the timne window we're interested in
:param s: start of the window
:param e: end of the window
c s* g | ]}�|j kr� krn n|�qS rX r� r� �r� rn rX rY rv � s * z>Conversation.forget_packets_outside_window.<locals>.<listcomp>r N�r� rw r� )r� rn r� rX r� rY � forget_packets_outside_window� s "z*Conversation.forget_packets_outside_windowc C s: | j D ] }| j|8 _q| jdur| j|8 _dS dS )z=Adjust the packet start times relative to the new start time.Nr� )r� r� rl rX rX rY �renormalise_times� s
�z Conversation.renormalise_times)NNrX N)TTr� r� )rr rs rt r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� rX rX rX rY r� [ s&
�
�
# r� c @ s6 e Zd ZdZd dd�Zdd� Zd dd�Zd d d
�ZdS ) � DnsHammerzOA lightweight conversation that generates a lot of dns:0 packets on
the flyNc sR t |� �}� fdd�t|�D �| _| j�� || _� | _d| _| j|d�| _d S )Nc s g | ]}t �d � ��qS )r )r �uniform)r� r
�r� rX rY rv r� z&DnsHammer.__init__.<locals>.<listcomp>r ��
query_file) r� r �times�sort�rater� r� �_get_query_choices�
query_choices)r� �dns_rater� r� �nrX r� rY r� s
zDnsHammer.__init__c C s dt | j�| j| jf S )Nz-<DnsHammer %d packets over %.1fs (rate %.2f)>)r� r� r� r� r� rX rX rY r� s �zDnsHammer.__str__c C s� |rCt |d�� }|�� }W d � n1 sw Y g }|�� D ] }|�� }|r@|�d�s@|�d�}t|�dks;J �|�|� q!|S g d�S )z�
Read dns query choices from a file, or return default
rname may contain format string like `{realm}`
realm can be fetched from context.realm
r
N�#r� � )
)r �{realm}rp �yes)r\ r� �NSr� )r" � *.{realm}rp �no)rE r� r� r� )�
�_msdcs.{realm}rp r� )� r� r� r� )� � nx.realm.comrp r� )� r� r� r� )� �*.nx.realm.comrp r� )� r� r� r� )r� �read�
splitlines�stripr� r� r� r� )r� r� r, �text�choicesr� rW rX rX rY r� s
�
�z DnsHammer._get_query_choicesc
C s |sJ �|j s J �t�� }| jD ]t}t�� | }|| }|t }|dkr)t�|� t�| j�\}}} }
|j|j d�}d} t�� } z1zt || �}
|
dkrQt
|
�sQd} W n t y] d} Y nw W t�� }|| }t d|||| f � qt�� }|| }t d|||| f � w d S )Nr rq Tr� Fz%f DNS dns %s %f %s )
r� r� r� r� r� r rF r� r� � dns_queryr� r� rQ )r� r� r� r� r� r� r� r} �rname�rtype�exist�success� packet_start�answersr^ r� rX rX rY �replay4 s:
� ����zDnsHammer.replayr� )rr rs rt r� r� r� r� r� rX rX rX rY r� s
!r� �countc C sp t t�}g }| D ]<}t|t�rt|�}td|jf tjd� |D ] }t �
|�}|j dkr:|dkr:||j d7 < q |�
|� q |�� q|sKg dfS tdd� |D ��}td d� |D ��}td
tjd� t� } t|�D ]&\}
}| j|8 _| �|j�} | d u r�t|
d d
�} | | |j< | �|� qkg } | �� D ]
} t| �dkr�| �
| � q�t|| �}
t| �|
}| ||
|fS )zLLoad a summary traffic summary file and generated Converations from it.
z Ingesting %srN r& �includer\ r c s � � | ]}|j V qd S r� r� r� rX rX rY r� f � � z#ingest_summaries.<locals>.<genexpr>c s r� r� r� r� rX rX rY r� g r� z$gathering packets into conversationsNr" )r� )r r� rt r� r� rQ rM rR rS ru r� r| r} r� r� �min�maxr � enumeraterw r� r� r� r� �valuesr� r� )�files�dns_mode�
dns_countsr� r, r� rl r� � last_packet�
conversationsr
rM �conversation_listr� �
mean_intervalrX rX rY �ingest_summariesP sB
� r� c C s2 t � }| D ]}|�|j� q|r|�d�d S d S )Nr\ r )r �updater� � most_common)r� � addressesrM rX rX rY �guess_server_address� s �r� c C s, i }| � � D ]
\}}d�|�}|||< q|S �Nr� )r� r� )ro �yr r� �k2rX rX rY �stringify_keys� s
r� c C s4 i }| � � D ]\}}tt|��d��}|||< q|S r� )r� rT r� r� )ro r� r r� r� rX rX rY �unstringify_keys� s
r� c @ sd e Zd Zddd�Zi fdd�Zdd� Zdd � Z
ddd�Zdd� Zdd� Z
ddd�Z
d S )� TrafficModelrE c C s0 i | _ i | _|| _tt�| _d| _ddg| _d S )Nr� r r\ )�ngrams�
query_detailsr� r r� � dns_opcounts�cumulative_duration� packet_rate)r� r� rX rX rY r� � s
zTrafficModel.__init__c C s� d}d}t f| jd }t|�}|�� D ]
\}}| j| |7 < qt|�dkrS|d j} d}
| d } |D ]} |
t| �7 }
t| | jd j �} q5|
| j
d< | | | j
d< |D ]q} | � |�\}
}|| � � 7 }t f| jd }| D ]W}|j
|
krvqn|j | }|j }|tkr�dt�td|t �� }| j�|g ��|� |dd � |f }|�� }| j�|g ��t|j�� | j�|g ��|� |dd � |f }qnqU| j|7 _| j�|g ��t � d S )Nr� r\ r g�������?rJ �wait:%dr$ )�
NON_PACKETr� r� r� r r� r� r� r� rw r r� r� rz �WAIT_THRESHOLD�math�log�
WAIT_SCALEr r� r� r� r rT r r )r� r� r �prev� cum_durationr� r� r r� �first�total�lastrM r� rl �elapsedr� �short_prX rX rY �learn� sP
���zTrafficModel.learnc C s� i }| j �� D ]\}}d�|�}tt|��||< qi }| j�� D ]\}}ttdd� |D ���||< q ||| j| jtd�}| j |d< t
|t �rKt |d�}t
j||dd� d S ) Nr� c s s" � | ] }|r d � |�ndV qdS )r� r# N)r� r� rX rX rY r� � s � �z$TrafficModel.save.<locals>.<genexpr>)r r r r �versionr& r r" )�indent)r r� r� �dictr r r r �CURRENT_MODEL_VERSIONr rt r� r� �json�dump)r� r, r r r� r �drX rX rY �save� s&
��
zTrafficModel.savec C s� t |t�r t|�}t�|�}z|d }|tk r td|tf ��W n
ty- tdt ��w |d �� D ]+\}}t t|��
d��}| j � |g �}|�� D ]\}}|�
t|�g| � qL|�� q4|d �� D ]6\}}| j� t|�g �}|�� D ] \}}|dkr�|�
dg| � qw|�
t t|��
d��g| � qw|�� qfd |v r�|d �� D ]
\}}| j| |7 < q�|d
| _|d | _d S ) Nr z4the model file is version %d; version %d is requiredz=the model file lacks a version number; version %d is requiredr r� r r# rX r& r r )rt r� r� r �load�REQUIRED_MODEL_VERSION�
ValueError�KeyErrorr� rT r� r r� �extendr� r r r r ) r� r, r r r r� r� rl r� rX rX rY r � sB
�� ��
zTrafficModel.loadr� Nr\ r c C s� g }t f| jd }|du r|d } t�| j�|t f��}|t krN||k r) |S t�� |kr=td||f tjd� |S dt� dd� }td | tjd� || j
v r\t�| j
| �} ng } |� d
d�\}
} |
d kr�t | �t�� } t
�| �t| }
||
7 }n(tjt� }t
�|�| }
||
7 }|dur�||kr� |S ||kr�|�||
| | f� |dd� |f }|d dd� d
kr�|d dd� d
kr�t f| jd }q)zUConstruct an individual conversation packet sequence from the
model.
r\ NTz"ending after %s (persistence %.1f)rN r r� � ztrying %s instead of end�:r� ���zwait:rJ )r r� r rF r r� rQ rR rS � randranger r� r� r �expr
r� �NO_WAIT_LOG_TIME_RANGEr� )r� rw � hard_stop� replay_speed�
ignore_before� persistencerM r� rl r r| r} �
log_wait_timer� �log_waitrX rX rY � construct_conversation_sequence sL # � � �
�(�z,TrafficModel.construct_conversation_sequencec C s | j \}}|| | S r� �r )r� �scale�rate_n�rate_trX rX rY �scale_to_packet_rateN �
z!TrafficModel.scale_to_packet_ratec C s | j \}}|| | S r� r- )r� �ppsr/ r0 rX rX rY �packet_rate_to_scaleR r2 z!TrafficModel.packet_rate_to_scalec C s� d| }t || �}g }d}||k rCt�| |�} | j| ||d|d�}
|
D ]
\} } }
}t| |
�r2 nq%q|�|
� |t|
�7 }||k s| �|�}td||t|�||f t j
d� |� � |S )z<Generate a list of conversation descriptions from the model.� r )r& r' r( r) zGwe have %d packets (target %d) in %d conversations at %.1f/s (scale %f)rN ) r� r r� r, r� r� r� r4 rQ rR rS r� )r� r r� r' r) �lead_in�target_packetsr� � n_packetsr� rM rw r| r} r r. rX rX rY � generate_conversation_sequencesV s< �
�
�
���z,TrafficModel.generate_conversation_sequences)rE )r� Nr\ r r )r\ r ) rr rs rt r� r r r r, r1 r4 r9 rX rX rX rY r� � s
0(
�6�r� r\ c C s@ g }| D ]}|r t |d d ||f|�}|d7 }|�|� q|S )Nr r\ )r� r� )r� r� r� r� rn rM rX rX rY �seq_to_conversations~ s
�r: r& r5 � rpc_netlogonr� r� r) rH r, r2 rZ r r4 �epmr rI rJ r r9 )rI �0x01zHost Announcement (0x01))rI �0x02zRequest Announcement (0x02))rI �0x08z Browser Election Request (0x08))rI �0x09z Get Backup List Request (0x09))rI �0x0cz$Domain/Workgroup Announcement (0x0c))rI �0x0fz Local Master Announcement (0x0f)r1 �
searchRequestrA �
searchResDone)r4 r' �Requestr3 �BindrB �Bind_ackrD �Bind_nakr6 �
Alter_contextrF �Alter_context_respr� �AUTH3)r4 r0 �Responser% r r: �response)r r' �DsBind)r rC � DsCrackNames)r rE �DsWriteAccountSpn)r r; �DsUnbind)r r0 �
DsReplicaSync)r r. �DsGetNCChanges)r r> �DsReplicaUpdateRefs)r< r. �Mapr� r� r+ � bindRequestr< � bindResponser/ �
unbindRequestr- r= �searchResEntryr? )r, r� z*** Unknown ***)rZ r7 �lsa_LookupNames)rZ rG �lsa_LookupSids)rZ �39� lsa_QueryTrustedDomainInfoBySid)rZ �40�lsa_SetTrustedDomainInfo)rZ �6�lsa_OpenPolicy)rZ �76�lsa_LookupSids3)rZ �77�lsa_LookupNames4r8 )r9 r; )r; �21�NetrLogonDummyRoutine1)r; �26�NetrServerAuthenticate3)r; �29�NetrLogonGetDomainInfo)r; �30�NetrServerPasswordSet2)r; r\ �NetrLogonSamLogonEx)r; r^ �DsrEnumerateDomainTrusts)r; �45�NetrLogonSamLogonWithFlags)r; r> �NetrServerReqChallenge)r r' �Connect)r r� �GetAliasMembership)r �17� LookupNames)r �18�
LookupRids)r �19� OpenGroup)r r; �Close)r �25�QueryGroupMember)r �34�OpenUser)r �36�
QueryUserInfo)r r\ �GetGroupsForUser)r r. �
QuerySecurity)r r@ � LookupDomain)r �64�Connect5)r r` � EnumDomains)r �7�
OpenDomain)r �8�QueryDomainInfo)r) �0x04z Close (0x04))r) �0x24zLocking AndX (0x24))r) �0x2ezRead AndX (0x2e))r) �0x32z
Trans2 (0x32))r) �0x71zTree Disconnect (0x71)r( zNegotiate Protocol (0x72))r) �0x73zSession Setup AndX (0x73))r) �0x74zLogoff AndX (0x74))r) �0x75zTree Connect AndX (0x75))r) �0xa2zNT Create AndX (0xa2))rH r' �NegotiateProtocol)rH r5 �Ioctl)rH r7 �Find)rH r� �GetInfo)rH rw �Break)rH r; � SessionSetup)rH r0 �
SessionLogoff)rH r. � TreeConnect�TreeDisconnect�Create�Readz$SAM LOGON request from client (0x12)z3SAM Active Directory Response - user unknown (0x17)�NetShareGetInfo�
NetSrvGetInfo))rH r> )rH r@ )rH r` )rH r� )rJ �0x12)rJ �0x17)r r� )r rf c
C sT | � dd�\}}t�||fd�}t�|d�}||d|||||g} | �|� d�| �S )Nr! r\ r� r� r� )r� r� r� r� r r� )
rl rw rz r{ r r| r} r~ rx r� rX rX rY �expand_short_packet� s
r� c C s" t j�� t j�� t�d� dS )z�Signal handler closes standard out and error.
Triggered by a sigterm, ensures that the log messages are flushed
to disk and not lost.
r N)rR rS r� �stdoutr� �_exit)�signal�framerX rX rY �flushing_signal_handler s
r� c
C s* |d t �dd� }tj�� tj�� t�� }|dkr |S z�z�t �|� ||f}d} | d d }
t |
|| |d�} t
�
t
j t � |�
|| � tj�� t�d� tj�|jd| j �} t| d�}
z tj�� t�d� W n ty� } z
t�d| � W Y d }~nd }~ww |
t_t�� | }|
| }|t }|dkr�t�|� | j||d
�\}}}t d | � t d | � t d
| � W n# t y� d} t dt� � | f tjd� t � tj� tj�� Y nw W tj�� tj�� t�!| � d S W tj�� tj�� t�!| � d S tj�� tj�� t�!| � w )z8Fork a new process and replay the conversation sequence.�� r i� )r� r� zstats-conversation-%dr r\ � stdout closing failed with %sN)r� r� zMaximum lag: %fz
Start lag: %fzMax sleep miss: %fz*EXCEPTION in child PID %d, conversation %srN )"r �randintrR r� ra rS r� �fork�seedr� r� �SIGTERMr� r+ �stdinr� r� r� r� r� r� �IOErrorr� �infor� r� r� r� rQ r� �getpidr_ � print_excr� )�csr� r� r* � client_id� server_idr� �pidr� �statusr� rM r� r, r� r� r� r� �max_lag� start_lagr� rX rX rY �replay_seq_in_fork sv
�
��
� � ��
�
�
r� c
C sx t j�� t j�� t�� }|dkr|S t j�� t�d� z t j�� t�d� W n tyC } z
t �
d| � W Y d }~nd }~ww tj � |j
d�}t|d�t _zYzd}t�tjt� t| ||d�}|j|d� W n ty� d}tdt�� t jd � t�t j� Y nw W t j�� t j�� t�|� d S W t j�� t j�� t�|� d S t j�� t j�� t�|� w )
Nr r\ r� z stats-dnsr r� )r� z)EXCEPTION in child PID %d, the DNS hammerrN )rR r� ra rS r� r� r� r� r� r� �warnr� r� r� r� r� r� r� r� r� r� rQ r� r_ r� r� ) r� r� r� r� r� r� r� r� �hammerrX rX rY �dnshammer_in_forkR sP
�� ���
�
�
r� Fc
K s" t d |||t| �d�|
��} t|�t| �k r"tdt|�t| �f ��t�� t| �d } t�� | }
|d u r@| d d d | }td| tjd� td|| tjd� td | tjd� |
| d
}t �
d t| �|f � | j d t| �t d
d� | D ��d� i }�z�z�|r�t
||| |d�}d||< t| �D ]\}}|| }|d }t||
| ||�}|||< q�t�� }td||
| ||
f tjd� t�� |k �r%|�r%t�d� z t�dtj�\}}W n ty� } z |jtkr� W Y d }~n3d }~ww |�r |�|d �}tdk�rtd||t|�f tjd� | �r |dk�r n t�� |k �r%|s�W n t�y; tdtjd� t�� Y nw W | j dt|�d� dD ]�}tdt|�|f tjd� |D ]&}z t�||� W �qY t�y } z|jt k�rt� W Y d }~�qYd }~ww t�d� t�� d }|�r�z t�dtj�\}}W n t�y� } z
|jtk�r�� W Y d }~nd }~ww |dk�r�|�|d �}|d u �r�td | � tj� � tj � � t� d� td ||t|�f tjd� t�� |k�r�n|�s�|�s� nt�d� �qH|�r td t|� tjd� z t� dd� W d S t!�y' td tjd� Y d S w | j dt|�d� dD ]�}tdt|�|f tjd� |D ]&}z t�||� W �qD t�yj } z|jt k�r_� W Y d }~�qDd }~ww t�d� t�� d }|�r�z t�dtj�\}}W n t�y� } z
|jtk�r�� W Y d }~nd }~ww |dk�r�|�|d �}|d u �r�td | � tj� � tj � � t� d� td ||t|�f tjd� t�� |k�r�n|�sy|�s� nt�d� �q3|�r�td t|� tjd� zt� dd� W w t!�y td tjd� Y w w )!N)r� r� r� r� z(we have %d accounts but %d conversationsg{�G�z�?rJ r z We will start in %.1f secondsrN z We will stop after %.1f secondszruntime %.1f secondsr$ z6Replaying traffic for %u conversations over %d seconds�
intentionsc s s � | ]}t |�V qd S r� )r� r� rX rX rY r� � s � zreplay.<locals>.<genexpr>)�Planned_conversations�Planned_packetsr� r\ r" z,all forks done in %.1f seconds, waiting %.1fg�~j�t�h?z-process %d finished conversation %d; %d to gozEXCEPTION in parent�
unfinished)�Unfinished_conversations)� r� r5 z killing %d children with -%d� �?z children is %s, no pid foundz)kill -%d %d KILLED conversation; %d to goz%d children are missingzignoring fake ^CrX )"r� r� r r� �setpgrpr� rQ rR rS r� r� r� �sumr� r� r� r� �waitpid�WNOHANG�OSError�errnor �poprP r� r_ r� �killr ra r� r� �killpg�KeyboardInterrupt)�conversation_seq�hostr� r� �accountsr� �dns_query_filer� �latency_timeout�stop_on_any_errorr� r� �delayr� r^ �childrenr� r
r� r* r� r� r� r� rM rn rX rX rY r� u s| ��� � ��
���
��
��
���� ���
�� ���
���
��� ����
�� ���
���
��� ��r� c C s" t � }td| |dg||d�}|S )Nr� zmodules:paged_searches)r� r� �optionsr� r� )r r
)r� r� r� r r� rX rX rY �openLdb s �r� c C s d|| � � f S )z(Generate an ou name from the instance idz#ou=instance-%d,ou=traffic_replay,%s)r� )r� r� rX rX rY �ou_name s �r� c
C s� t | |�}z| �|�dd�d dd�� W n ty1 } z|j\}}|dkr'� W Y d}~nd}~ww z | �|dd�� W |S tyZ } z|j\}}|dkrO� W Y d}~|S d}~ww )z�Create an ou, all created user and machine accounts will belong to it.
This allows all the created resources to be cleaned up easily.
r� r\ �organizationalunit)r� � objectclass�D N)r� �addr� r rW �r� r� r� r� r� �_rX rX rY � create_ou s2
�
���
��
���r� �ConversationAccounts)r r r! r" c C sH g }t d|d �D ]}t||�}t||�}t||||�}|�|� q |S )z;Generate a series of unique machine and user account names.r\ )r � machine_namer r� r� ) r� r� �number�passwordr� r
r r! r* rX rX rY �generate_replay_accounts< s
� r� Tc C s` t | |�}d||f }dt|� �d�}|r tttB �}ntt�}| �|dd| ||d�� dS )z"Create a machine account via ldap.r �"%s"� utf-16-le�computerz%s$�r� r� �sAMAccountName�userAccountControl�
unicodePwdN)r� r �encoder� r r r r� ) r� r� r r �traffic_accountr� r� �utf16pw�account_controlsrX rX rY �create_machine_accountJ s
� �r� c C s\ t | |�}d||f }dt|� �d�}| �|d|tt�|d�� t�| �}|�|d� dS )z Create a user account via ldap.r r� r� �userr� z (A;;WP;;;PS)N) r� r r� r� r� r r �SDUtils� dacl_add_ace)r� r� r! r" r� r' r� �sdutilsrX rX rY �create_user_accountc s
�
r� c C s, t | |�}d||f }| �|d|d�� dS )zCreate a group via ldap.r �group)r� r� r� N)r� r� )r� r� rM r� r� rX rX rY � create_groupu s
�r� c C � d| |f S )z-Generate a user name based in the instance idz
STGU-%d-%drX �r� r
rX rX rY r � � r r� r� c s( | j d�|�� gd�}� fdd�|D �S )z'Seach objectclass, return attr in a setz(objectClass={}))r� r� c s h | ]}t |� ��qS rX )r� )r� �obj��attrrX rY � <setcomp>� r� z%search_objectclass.<locals>.<setcomp>)r� r� )r� r� r �objsrX r� rY �search_objectclass� s
�r c C sl t | dd�}d}t|dd�D ]%}t||�}||vr3t| |||� |d7 }|d dkr3t�d||f � q|S )zAdd users to the serverr� �r� r rJ r\ �2 zCreated %u/%u users)r r r r� r� r� )r� r� r� r� �existing_objects�usersr
rM rX rX rY �generate_users� s
�r c C s |rd| |f S d| |f S )z1Generate a machine account name from instance id.z
STGM-%d-%dzPC-%d-%drX )r� r
r� rX rX rY r� � s r� c C st t | dd�}d}t|dd�D ])}t|||�}|d |vr7t| ||||� |d7 }|d dkr7t�d||f � q|S ) z"Add machine accounts to the serverr� r r rJ rA r\ r z Created %u/%u machine accounts)r r r� r� r� r� ) r� r� r� r� r� r �addedr
rM rX rX rY �generate_machine_accounts� s
� �r
c C r� )z'Generate a group name from instance id.z
STGG-%d-%drX r� rX rX rY �
group_name� r� r c C sj t | dd�}d}t|dd�D ]$}t||�}||vr2t| ||� |d7 }|d dkr2t�d||f � q|S )z3Create the required number of groups on the server.r� r r rJ r\ r� zCreated %u/%u groups)r r r r� r� r� )r� r� r� r �groupsr
rM rX rX rY �generate_groups� s
�r
c
C sZ t | |�}z
| �|dg� W dS ty, } z|j\}}|dkr!� W Y d}~dS d}~ww )z7Remove the created accounts and groups from the server.z
tree_delete:1� N)r� �deleter rW r� rX rX rY �clean_up_accounts� s
���r c C s� d} d}
d} t | |� t�d� t| |||�} t�d� t| ||||�} |dkr3t�d� t| ||�}
|dkrTt�d� t||
|| ||�}
t�d� t| ||
� |
�� } |
dkre| dkre||
kret� d� t�d| | |
| f � d S )
zTGenerate the required users and groups, allocating the users to
those groups.r z Generating dummy user accountsz!Generating dummy machine accountszGenerating dummy groupszAssigning users to groupszAdding users to groupsz(The added groups will contain no membersz:Added %d users (%d machines), %d groups and %d membershipsN)
r� r� r� r r
r
�GroupAssignments�add_users_to_groupsr �warning)r� r� r� �number_of_users�number_of_groups�group_memberships� max_members�machine_accounts�traffic_accounts�memberships_added� groups_added�computers_added� users_added� assignmentsrX rX rY �generate_users_and_groups� sD
�
�
�
�r c @ sd e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dS )r c C sB d| _ | �|� | �||� || _tt�| _| �|||||� d S )Nr )r� �generate_group_distribution�generate_user_distributionr r r r �
assign_groups)r� r r r r r r rX rX rY r� s
�zGroupAssignments.__init__c C s@ g }t |�}|dkr d S d}|D ]
}||7 }|�|| � q|S )Nr r� )r� r� )r� �weights�distr �
cumulative� probabilityrX rX rY �cumulative_distribution s z(GroupAssignments.cumulative_distributionc C sj |dkrd}n|dkrd}n |dkrd}nd}g }t d|d �D ] }t�|�}|�|� q | �|�| _d S )
zAProbability distribution of a user belonging to a group.
i@KL g @i�� g @i� g @g �?r\ N)r r �
paretovariater� r' � user_dist)r� � num_users�num_memberships�shaper# ro rl rX rX rY r! ( s
z+GroupAssignments.generate_user_distributionc C sD g }t d|d �D ]
}d|d }|�|� q || _| �|�| _dS )z6Probability distribution of a group containing a user.r\ g�������?N)r r� �
group_weightsr' �
group_dist)r� r� r# ro rl rX rX rY r B s z,GroupAssignments.generate_group_distributionc C s, t � | jt�� �}t � | jt�� �}||fS )z2Returns a randomly generated user-group membership)�bisectr) r r. �r� r� r� rX rX rY �generate_random_membershipP s z+GroupAssignments.generate_random_membershipc C s
| j | S r� )r )r� r� rX rX rY �users_in_group\ rs z GroupAssignments.users_in_groupc C s
| j �� S r� )r r r� rX rX rY �
get_groups_ rs zGroupAssignments.get_groupsc C sP t | j| �}||kr&t�d�||�� d| j|d < | �| j�}|| _dS dS )z?Prevent the group's membership from exceeding the max specifiedzGroup {0} has {1} membersr r\ N)r� r r� r� r� r- r' r. )r� r� r � num_members�new_distrX rX rY �cap_group_membershipb s
�z%GroupAssignments.cap_group_membershipc C sH || j | vr| j | �|� | jd7 _| jr"| �|| j� d S d S )Nr\ )r r� r� r r6 r0 rX rX rY �add_assignmentn s �z GroupAssignments.add_assignmentc
C s� |dkrdS t �t|�t|�t|� �}| jr t|| j| �}|| d }|| d }| �� |k rR| �� \}} | |ks@||krJ| �|d | d � | �� |k s2dS dS )a Allocate users to groups.
The intention is to have a few users that belong to most groups, while
the majority of users belong to a few groups.
A few groups will contain most users, with the remaining only having a
few users.
r Nr\ )r �ceilr� r r� r r1 r7 )
r� r r r r r �existing_users�existing_groupsr� r� rX rX rY r" z s$ ��� �z GroupAssignments.assign_groupsc C s | j S r� �r� r� rX rX rY r � s zGroupAssignments.totalN)rr rs rt r� r' r! r r1 r2 r3 r6 r7 r" r rX rX rX rY r s !r c
C s� |� � }d}d}|�� D ]A}|�|�}t|�dkrq tdt|�d�D ]*}|||d � } t| ||| � |t| �7 }|d7 }|d dkrLt�d||f � q"q dS )zDTakes the assignments of users to groups and applies them to the DB.r r� r\ r zAdded %u/%u membershipsN)r r3 r2 r� r �add_group_membersr� r� )
r r� r r r� r r� r2 �chunk�chunk_of_usersrX rX rY r � s"
���r c
s� t | |�� � fdd�}|t||��}t�� }t�| |�|_|D ]}|t||��}dt|� } t�|tj d�|| < q | �
|� dS )z(Adds the given users to group specified.c s d| � f S )Nr rX rL �r� rX rY �build_dn� r� z#add_group_members.<locals>.build_dnzmember-�memberN) r� r r� �Message�Dnr� r r� �MessageElement� FLAG_MOD_ADD�modify)
r r� r� r2 r@ �group_dn�mr� r' �idxrX r? rY r< � s
r< c * C s� t jj}d}d}d}i }t� }t� }|dur|j} ndd� } | d� dddd�}
dddd�} t�| �D ]�} tj� | | �}
t
|
d���}|D ]�}z[|� d �� d
�}|d }|d }|d
}t
|d �}t
|d �}t|| |�}t||�}||f}|�|g ��|� |d dkr�|d 7 }n |d 7 }|| d 7 < |�|� | |� W qD ttfy� d|v r�|� dd �\}}||
v r�tt
|�|
| �|
|< n || v r�tt|�| | �| |< nt|t jd� nt|t jd� Y qDw W d � n1 s�w Y q3|| }|dk�rd}n|| }|dk�rd}n|| }t|�} td| � td||f � td||f � t|
�� �D ]\}}td|�dd�d |f � �q4t| �� �D ]\}}td|�dd�d |f � �qNtd� i } |D ]\} } | | v�rxt� | | < | | �| � �qjt| �� �} | D ]W}t| | t d�}!|!D ]I}||f}|| }"t|"�}"t|"�}#|| }t |"�|# }$t |"d �}%t |"d �}&|"d |"d }'|"d }(t � |d �})td |||)|#||$|%|&|'|(f
� �q��q�dS )!z/Generate and print the summary stats for a run.r Nc S s d S r� rX )ro rX rX rY �tw� s zgenerate_stats.<locals>.twz2time conv protocol type duration successful error
)z Maximum lagz Start lagzMax sleep miss)r� r� r� r
r� r� r\ r" rE r� r� �Truer! rN zTotal conversations: %10dz-Successful operations: %10d (%.3f per second)z-Failed operations: %10d (%.3f per second)z%-28s %fr� r] z%-28s %dz�Protocol Op Code Description Count Failed Mean Median 95% Range Max)r� r� gffffff�?rJ r� z?%-12s %4s %-35s %12d %12d %12.6f %12.6f %12.6f %12.6f %12.6f)!rR �
float_infor� r r$ �writer� �listdirr� r� r� r� r� r� r� r� r� r� r �
IndexErrorr� rQ rS r� �sortedr� �replacer �
opcode_keyr� �calc_percentiler� r� )*r� � timing_filer
r �
successful�failed� latencies�failures�unique_conversationsrJ � float_values�
int_valuesr� r� r, r� r� r� r| � packet_type�latencyr� �opr r� r� � success_rate� failure_rater� �ops�protor� � protocols� packet_typesr� r� �mean�median�
percentile�rng�maxvr~ rX rX rY �generate_stats� s� ��
�
���� ��&
��
�
���rj c C s& zdt | � W S ty | Y S w )zCSort key for the operation code to ensure that it sorts numericallyz%03d)r� r )r� rX rX rY rR M s
�rR c C sp | sdS t | �d | }t�|�}t�|�}||kr | t|� S | t|� || }| t|� || }|| S )ztCalculate the specified percentile from the list of values.
Assumes the list is sorted in ascending order.
r r\ )r� r �floorr8 r� )r� rg r r, rM �d0�d1rX rX rY rS U s
rS c G s. t jj| � }t �d�}t �|� t �|� |S )zuIn a testenv we end up with 0777 directories that look an alarming
green colour with ls. Use umask to avoid that.�? )r� r� r� �umask�mkdir)r� r �maskrX rX rY r# g s
r# r; )r\ r" )r\ r� ) NNNNr NNr$ F)T)r� r� )yr� r� r r r rR r� r� r r � collectionsr r r r � dns.resolverr r� �
samba.emulater � samba.samdbr
r� r � samba.dcerpcr r
r r r �samba.dcerpc.netlogonr r r �samba.drs_utilsr r_ �samba.credentialsr r r �
samba.authr �
samba.dsdbr r r r �samba.dcerpc.miscr �sambar r � samba.commonr � samba.loggerr! r/ r r r� r r� r� r� r
r r% rP rr r� rZ rd rp r� rq �objectru r� r� r� rm r� r� r� r� r� r� r� r: r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r� r
r r
r r r r r< rj rR rS r# rX rX rX rY �<module> s� �
�
e ( N5 a
�������� �
� � �
������������ �
� � �
��������������� � � � � �!�"�#�$�%�&�'�(�)�*�+�,�-�.�/�0�1�2�3�4�5�6�7�8�9�:�;�<�=�>�?�@�A�B�C�D�E�F�G�H�I�J�K�L�M�N�O�P�Q�R�S�T�U�V
� b
@$�
� � � �-