New recipe: Strip Ethernet/IP/TCP Header from hexstream

This commit is contained in:
Windham Wong 2017-10-19 15:58:47 +01:00
parent a34547dab1
commit 54194f2cc1
4 changed files with 78 additions and 25 deletions

View file

@ -35,6 +35,7 @@ import StrUtils from "../operations/StrUtils.js";
import Tidy from "../operations/Tidy.js";
import Unicode from "../operations/Unicode.js";
import URL_ from "../operations/URL.js";
import Packets from "../operations/Packets.js";
/**
* Type definition for an OpConf.
@ -673,13 +674,6 @@ const OperationConfig = {
}
]
},
"From Tcpdump": {
module: "Packets",
description: "[DEPRECATED] Converts Tcpdump hex to string",
inputType: "string",
outputType: "byteArray",
args: []
},
"From Hexdump": {
module: "Default",
description: "Attempts to convert a hexdump back into raw data. This operation supports many different hexdump variations, but probably not all. Make sure you verify that the data it gives you is correct before continuing analysis.",
@ -3876,6 +3870,36 @@ const OperationConfig = {
}
]
},
"From Tcpdump": {
module: "Packets",
description: "[DEPRECATED] Converts Tcpdump hex to string",
inputType: "string",
outputType: "byteArray",
args: []
},
"Strip TCP Headers": {
module: "Packets",
description: "Remove selected TCP headers from hexstream",
inputType: "string",
outputType: "string",
args: [
{
name: "Ethernet Header",
type: "boolean",
value: Packets.STRIP_ETHERNET_HEADER,
},
{
name: "IP Header",
type: "boolean",
value: Packets.STRIP_IP_HEADER,
},
{
name: "Ethernet Header",
type: "boolean",
value: Packets.STRIP_TCP_HEADER,
},
]
},
};