Python写的嗅探器——Pyside，Scapy

使用Python的Pyside和Scapy写的嗅探器原型，拥有基本框架，但是功能并不十分完善，供参考。

 import sys
 import time
 import binascii
 from PySide.QtCore import *
 from PySide.QtGui import *
 from scapy.all import *

 # Every Qt application must have one and only one QApplication object;
 # it receives the command line arguments passed to the script, as they
 # can be used to customize the application's appearance and behavior
 qt_app = QApplication(sys.argv)
 global_pkt_list = []

 # Try to redirect hexdump()'s output, but failed!Why? T_T
 class redirect_output:
     def __init__(self):
         self.str = ''
     def write(self, s):
         self.str += s
     def show(self):
         return self.str

 class Sniffer(QThread):
     pkt_arrive = Signal(str)
     bGo = True
     filter = None
     iface = 'eth0'

     def __init__(self, parent=None):
         QThread.__init__(self, parent)
         # self.pkt_arrive.connect(OnPktArrive)

     def run(self):
         # self.emit(SIGNAL("pkt_arrive(str)"), "pkt")
         while (self.bGo):
             p = sniff(count=1, filter = self.filter)
             global_pkt_list.append(p[0])
             self.pkt_arrive.emit((p[0].summary()))

     def go(self):
         self.bGo = True
         self.start()

     def stop(self):
         print 'Sniffer got exit message'
         self.bGo = False

 class PktListItem(QListWidgetItem):
     def __init__(self, pkt=None, num=None):
         QListWidgetItem.__init__(self)
         self.pkt = pkt
         self.num = num

 class MainWindow(QWidget):
     ''' An example of PySide absolute positioning; the main window
         inherits from QWidget, a convenient widget for an empty window. '''
     number = 0
     def __init__(self):
         QWidget.__init__(self)
         self.setWindowTitle('J_Sniffer')
         self.setMinimumSize(800, 500)

         # set layout
         self.main_layout = QVBoxLayout()
         # edit and btn
         self.layout1 = QHBoxLayout()

         self.Label_Iface = QLabel("Iface", self)
         self.layout1.addWidget(self.Label_Iface)
         self.TextBox_Iface = QLineEdit(self)
         self.TextBox_Iface.setPlaceholderText("Choose network interface")
         self.layout1.addWidget(self.TextBox_Iface)

         self.Label_Fliter = QLabel("Filter", self)
         self.layout1.addWidget(self.Label_Fliter)
         self.TextBox_Filter = QLineEdit(self)
         self.layout1.addWidget(self.TextBox_Filter)

         self.layout1.addStretch(1)
         self.Btn_Start = QPushButton("&Start", self)
         self.layout1.addWidget(self.Btn_Start)

         self.main_layout.addLayout(self.layout1)

         # List to show packets
         self.List_Pkt = QListWidget(self)
         self.main_layout.addWidget(self.List_Pkt)

         # Tree to see pkt's detail
         self.Tree = QTreeWidget(self)
         self.main_layout.addWidget(self.Tree)
         self.Tree.setColumnCount(2)
         self.Tree.setHeaderLabels(['Key', 'Value'])

         self.setLayout(self.main_layout)

         # create signal and sniff thread
         self.thread = Sniffer()
         self.connect(self.Btn_Start, SIGNAL("clicked()"), self.Sniff)
         # self.connect(self.thread, SIGNAL("pkt_arrive(str)"), self.OnPktArrive) Connot work!
         self.thread.pkt_arrive.connect(self.OnPktArrive)
         self.List_Pkt.currentItemChanged.connect(self.On_ItemChanged)

     @Slot(str)
     def OnPktArrive(self, pkt):
         print 'received pkt arrive signal'

         #p = Ether(pkt) #only Ethernet now, 802.11 may be crash!
         item = PktListItem(num = self.number)
         item.setText(str(self.number) + '\t' + pkt)
         self.List_Pkt.addItem(item)
         self.number += 1

     @Slot()
     def Sniff(self):
         print self.Btn_Start.text()
         if self.Btn_Start.text() == '&Start':
             self.Btn_Start.setText("&Stop")
             self.thread.filter = self.TextBox_Filter.text()
             self.thread.iface = self.TextBox_Iface.text()
             self.thread.go()
         else:
             self.Btn_Start.setText("&Start")
             self.thread.stop()

     def On_ItemChanged(self, curr, prev):
         print curr.num
         self.Tree.clear()
         p = global_pkt_list[curr.num]
         root1 = QTreeWidgetItem(self.Tree)
         if (p.haslayer(Ether)):
             root1.setText(0, 'Ethernet:')
             child1_1 = QTreeWidgetItem(root1)
             child1_1.setText(0, 'dst')
             child1_1.setText(1, p.dst)
             child1_2 = QTreeWidgetItem(root1)
             child1_2.setText(0, 'src')
             child1_2.setText(1, p.src)
             child1_3 = QTreeWidgetItem(root1)
             child1_3.setText(0, 'type')
             child1_3.setText(1, hex(p.type))
             p = p.getlayer(1)
             if (p.haslayer(IP)):
                 self._SetIPTree(p)
                 p = p.getlayer(1)
                 if (p.haslayer(ICMP)):
                     self._SetICMPTree(p)
                 elif (p.haslayer(TCP)):
                     pass
                 else:
                     pass
             elif (p.haslayer(IPv6)):
                 pass
         else:
             root1.setText(0, 'Not Ethernet')
             root1.setText(1, hexdump(p))

     def _SetIPTree(self, p):
         root2 = QTreeWidgetItem(self.Tree)
         root2.setText(0, 'IPv4')
         child2_1 = QTreeWidgetItem(root2)
         child2_1.setText(0, 'Version')
         child2_1.setText(1, str(p.version))
         child2_2 = QTreeWidgetItem(root2)
         child2_2.setText(0, 'ihl(Header Length)')
         child2_2.setText(1, str(p.ihl))
         child2_3 = QTreeWidgetItem(root2)
         child2_3.setText(0, 'tos')
         child2_3.setText(1, str(p.tos))
         child2_4 = QTreeWidgetItem(root2)
         child2_4.setText(0, 'len')
         child2_4.setText(1, str(p.len))
         child2_5 = QTreeWidgetItem(root2)
         child2_5.setText(0, 'id')
         child2_5.setText(1, str(p.id))
         child2_6 = QTreeWidgetItem(root2)
         child2_6.setText(0, 'flags')
         child2_6.setText(1, str(p.flags))
         child2_7 = QTreeWidgetItem(root2)
         child2_7.setText(0, 'frag')
         child2_7.setText(1, str(p.frag))
         child2_8 = QTreeWidgetItem(root2)
         child2_8.setText(0, 'TTL')
         child2_8.setText(1, str(p.ttl))
         child2_9 = QTreeWidgetItem(root2)
         child2_9.setText(0, 'protocol')
         child2_9.setText(1, str(p.proto))
         child2_10 = QTreeWidgetItem(root2)
         child2_10.setText(0, 'checksum')
         child2_10.setText(1, str(p.chksum))
         child2_11 = QTreeWidgetItem(root2)
         child2_11.setText(0, 'src')
         child2_11.setText(1, str(p.src))
         child2_12 = QTreeWidgetItem(root2)
         child2_12.setText(0, 'dst')
         child2_12.setText(1, str(p.dst))

     def _SetICMPTree(self, p):
         root3 = QTreeWidgetItem(self.Tree)
         root3.setText(0, 'ICMP')
         child3_1 = QTreeWidgetItem(root3)
         child3_1.setText(0, 'Type')
         if (p.type == 8):
             child3_1.setText(1, 'echo request')
         elif (p.type == 0):
             child3_1.setText(1, 'echo reply')
         else:
             child3_1.setText(1, str(p.type))
         child3_2 = QTreeWidgetItem(root3)
         child3_2.setText(0, 'Code')
         child3_2.setText(1, str(p.code))
         child3_3 = QTreeWidgetItem(root3)
         child3_3.setText(0, 'Checksum')
         child3_3.setText(1, str(p.chksum))
         child3_4 = QTreeWidgetItem(root3)
         child3_4.setText(0, 'ID')
         child3_4.setText(1, str(p.id))
         child3_5 = QTreeWidgetItem(root3)
         child3_5.setText(0, 'Sequence number')
         child3_5.setText(1, str(p.seq))
         child3_6 = QTreeWidgetItem(root3)
         child3_6.setText(0, 'Data')
         child3_6.setText(1, binascii.b2a_hex(str(p.load)))

     def run(self):
         self.show()

 if __name__ == '__main__':
     # Create an instance of the application window and run it
     win = MainWindow()
     win.run()
     qt_app.exec_()