#!/bin/bash # coding: utf-8 #TO-DO: #sudo tcpdump -i wlp2s0 -c1 -v -w temp.pcap #b=$(sudo tcpdump -r temp.pcap > tempcat) #cat tempcat #a=$(cat tempcat | cut -d" " -f13) #echo "$a" #if [ "$a" == "TCP" ] ; then # echo 'Youpi' #elif [ "$a" == "UDP" ] ; then # echo 'Ah bah non ça marche pas' #else # echo 'KC' #fi sudo ip a echo "Indiquez votre interface : " read Interface while : do sudo tcpdump -i $Interface -c1 -nn tcp -w capturetcp.pcap sudo tcpdump -nn -r capturetcp.pcap > grostastcp echo -e "Voici un paquet TCP\n" cat grostastcp | cut -d" " -f1 >> /tmp/heuretcp.txt cat grostastcp | cut -d" " -f2 >> /tmp/protocoletcp.txt cat grostastcp | cut -d" " -f3 >> /tmp/sourcetcp.txt cat grostastcp | cut -d" " -f5 >> /tmp/destinationtcp.txt cat grostastcp | cut -d" " -f15 >> /tmp/tailletcp.txt tail -n1 /tmp/heuretcp.txt tail -n1 /tmp/protocoletcp.txt tcpvar=$(tail -n1 /tmp/sourcetcp.txt) echo "${tcpvar%.*}" >> /tmp/ipsrctcp.txt echo "${tcpvar##*.}" >> /tmp/portsrctcp.txt tail -n1 /tmp/ipsrctcp.txt tail -n1 /tmp/portsrctcp.txt tcprav=$(tail -n1 /tmp/destinationtcp.txt) echo "${tcprav%.*}" >> /tmp/ipdsttcp.txt echo "${tcprav##*.}" | cut -d":" -f1 >> /tmp/portdsttcp.txt tail -n1 /tmp/ipdsttcp.txt tail -n1 /tmp/portdsttcp.txt tail -n1 /tmp/tailletcp.txt # Attention ici c'est UDP sudo tcpdump -i $Interface -c1 -nn udp -w captureudp.pcap sudo tcpdump -nn -r captureudp.pcap > grostasudp echo -e "Voici un paquet UDP\n" cat grostasudp | cut -d" " -f1 >> /tmp/heureudp.txt cat grostasudp | cut -d" " -f2 >> /tmp/protocoleudp.txt cat grostasudp | cut -d" " -f3 >> /tmp/sourceudp.txt cat grostasudp | cut -d" " -f5 >> /tmp/destinationudp.txt cat grostasudp | cut -d" " -f8 >> /tmp/tailleudp.txt tail -n1 /tmp/heureudp.txt tail -n1 /tmp/protocoleudp.txt udpvar=$(tail -n1 /tmp/sourceudp.txt) echo "${udpvar%.*}" >> /tmp/ipsrcudp.txt echo "${udpvar##*.}" >> /tmp/portsrcudp.txt tail -n1 /tmp/ipsrcudp.txt tail -n1 /tmp/portsrcudp.txt udprav=$(tail -n1 /tmp/destinationudp.txt) echo "${udprav%.*}" >> /tmp/ipdstudp.txt echo "${udprav##*.}" | cut -d":" -f1 >> /tmp/portdstudp.txt tail -n1 /tmp/ipdstudp.txt tail -n1 /tmp/portdstudp.txt tail -n1 /tmp/tailleudp.txt sudo python insertpaq.py done