1 package edu.uci.iotproject;
3 import edu.uci.iotproject.maclayer.MacLayerFlowPattern;
4 import edu.uci.iotproject.maclayer.MacLayerFlowPatternFinder;
5 import org.pcap4j.core.*;
7 import java.io.EOFException;
8 import java.net.UnknownHostException;
10 import java.util.concurrent.TimeoutException;
13 * This is a system that reads PCAP files to compare
14 * patterns of DNS hostnames, packet sequences, and packet
15 * lengths with training data to determine certain events
16 * or actions for smart home devices.
18 * @author Janus Varmarken
19 * @author Rahmadi Trimananda (rtrimana@uci.edu)
25 public static void main(String[] args) throws PcapNativeException, NotOpenException, EOFException, TimeoutException, UnknownHostException {
26 // -------------------------------------------------------------------------------------------------------------
27 // Example/debug code for searching for a pattern at the MAC layer.
28 // String fileName = "./pcap/mac-tplink.local.pcapng";
31 // handle = Pcaps.openOffline(fileName, PcapHandle.TimestampPrecision.NANO);
32 // } catch (PcapNativeException pne) {
33 // handle = Pcaps.openOffline(fileName);
35 // Arrays.asList(1590, 1590, 1590, 1001, 337, 197, 636, 1311, 177) // Full pattern (all non-zero payload packets).
36 // MacLayerFlowPattern pattern = new MacLayerFlowPattern("TP_LINK_LOCAL_OFF_MAC", "50:c7:bf:33:1f:09", Arrays.asList(637, 1312));
37 // MacLayerFlowPatternFinder finder = new MacLayerFlowPatternFinder(handle, pattern);
38 // finder.findFlowPattern();
39 // -------------------------------------------------------------------------------------------------------------
41 final String fileName = args.length > 0 ? args[0] : "/home/rtrimana/pcap_processing/smart_home_traffic/Code/Projects/SmartPlugDetector/pcap/wlan1.local.dns.pcap";
42 //final String fileName = args.length > 0 ? args[0] : "/scratch/June-2018/TPLink/wlan1/tplink.wlan1.local.pcap";
43 final String trainingFileName = "./pcap/TP_LINK_LOCAL_ON_SUBSET.pcap";
44 // final String trainingFileName = "./pcap/TP_LINK_LOCAL_ON.pcap";
46 // // ====== Debug code ======
48 PcapHandle trainingPcap;
50 handle = Pcaps.openOffline(fileName, PcapHandle.TimestampPrecision.NANO);
51 trainingPcap = Pcaps.openOffline(trainingFileName, PcapHandle.TimestampPrecision.NANO);
52 } catch (PcapNativeException pne) {
53 handle = Pcaps.openOffline(fileName);
54 trainingPcap = Pcaps.openOffline(trainingFileName);
57 // // TODO: The followings are the way to extract multiple hostnames and their associated packet lengths lists
58 // //List<String> list = new ArrayList<>();
59 // //list.add("events.tplinkra.com");
60 // //FlowPattern fp = new FlowPattern("TP_LINK_LOCAL_ON", list, trainingPcap);
61 // //List<String> list2 = new ArrayList<>();
62 // //list2.add("devs.tplinkcloud.com");
63 // //list2.add("events.tplinkra.com");
64 // //FlowPattern fp3 = new FlowPattern("TP_LINK_REMOTE_ON", list2, trainingPcap);
66 FlowPattern fp = new FlowPattern("TP_LINK_LOCAL_ON", "events.tplinkra.com", trainingPcap);
67 FlowPatternFinder fpf = new FlowPatternFinder(handle, fp);
70 // // ========================