* Handles incoming events, like timeouts and packets, that cause a change * in the TCP control block "state". * * This is the part of the code that

* remove leading/trailing whitespace ***************************************************************************/

* Extract an integer. Note ****************************************************************************/

*****************************************************************************/

***************************************************************************/

***************************************************************************/

* When the "--banner" command-line option is selected, this will * will take up to 64 bytes of a response and display it. Other UDP * protocol parse

* Just skip the name, without validating whether it's valid or not. This * is for re-parsing the packet usually, after we've validated that all * th

***************************************************************************/

* Adds a payloads template for the indicated datagram protocol, which * is UDP or Oproto ("other IP protocol"). ************************************

* Test errors. We should get exactly which line-number and which character * in the line caused the error ******************************************

* Figure out the Hello message size by parsing the data *****************************************************************************/

Read a 16-bit value from a capture file, depending upon the byte * order within that file */

* The inner round/mixer function. In DES, it's a series of S-box lookups, * which *****************************************************************

* The inner round/mixer function. In DES, it's a series of S-box lookups, * which *****************************************************************

***************************************************************************/

***************************************************************************/

*****************************************************************************/

*****************************************************************************/

****************************************************************************/

Delete table :param str table_name: table name

* Adds the index variable to just before the file extension. For example, * if the original filename is "foo.bar", and the index is 1, then the * ne

* Deterministic random number generator for repeatable tests. ***************************************************************************/

***************************************************************************/

* Remove bad characters from the banner, especially new lines and HTML * control codes. ************************************************************

****************************************************************************/

***************************************************************************/

****************************************************************************/

* Provide my own rand() simply to avoid static-analysis warning me that * 'rand()' is unrandom, when in fact we want the non-random properties of *

* Test if two ranges overlap. * This is easiest done by testing that they don't overlap, and inverting * the result. * Note that adjacent addresses

* Add the IPv6 range to our list of ranges. ***************************************************************************/

***************************************************************************/

***************************************************************************/

* Some methods of transmit queue multiple packets in a buffer then * send all queued packets at once. At the end of a scan, we might have * some pen

* wrapper for libpcap's sendpacket * * PORTABILITY: WINDOWS and PF_RING * For performance, Windows and PF_RING can queue up multiple packets, then

* Convert TCP flags into an nmap-style "reason" string *****************************************************************************/

* In order to compress the size of the table, and to do case-insensitive * pattern-matches, we convert characters into symbols. We need to create *

* I don't understand why Microsoft says this function is unsafe, so * do it anyway */

* Destroy a TCP connection entry. We have to unlink both from the * TCB-table as well as the timeout-table. * Called from ************************

* remove leading/trailing whitespace ***************************************************************************/

* This is a parser for X.509 certificates. It uses "state-machine" * technology, so that it accepts an in-order sequence of fragments. The * entire

* This function must be called to set the initial state. * @param length * The size of the certificate. This is parsed from the SSL/TLS field.

***************************************************************************/

***************************************************************************/

*****************************************************************************/

***************************************************************************/

***************************************************************************/

***************************************************************************/

* Standard CRC32 calculation. ***************************************************************************/

Create table :param str table_name: table name

***************************************************************************/

* strdup(): compilers don't like strdup(), so I just write my own here. I * should probably find a better solution. ********************************

Generate record dictionary

***************************************************************************/

* Checksum the IP header. This is a "partial" checksum, so we * don't reverse the bits ~. **********************************************************

***************************************************************************/

***************************************************************************/

match domain :return : result

* Returns the time when the next rotate should occur. Rotations are * aligned to the period, which means that if you rotate hourly, it's done * on t

*****************************************************************************/

* Rotate the file, moving it from the local directory to a remote directory * and changing the name to include the timestamp. This is done while the

* Print packet info, when using nmap-style --packet-trace option ***************************************************************************/

*****************************************************************************/

*****************************************************************************/

* Close a capture file created by one of the open functions * such as 'pcapfile_openread()', 'pcapfile_openwrite()', or * 'pcapfile_openappend()'.

****************************************************************************/

* Provide my own rand() simply to avoid static-analysis warning me that * 'rand()' is unrandom, when in fact we want the non-random properties of *

* Provide my own rand() simply to avoid static-analysis warning me that * 'rand()' is unrandom, when in fact we want the non-random properties of *

* Combine two ranges, such as when they overlap. ***************************************************************************/

* Apply the exclude ranges, which means removing everything from "targets" * that's also in "exclude". This can make the target list even bigger * a

***************************************************************************/

* The normal "pick" function is a linear search, which is slow when there * are a lot of ranges. Therefore, the "pick2" creates sort of binary * sea

***************************************************************************/

* for testing when two Windows adapters have the same name. Sometimes * the \Device\NPF_ string is prepended, sometimes not. ***********************

* Used on Windows: if the adpter name is a numeric index, convert it to * the full name. ***********************************************************

***************************************************************************/

registered domain >>> d = Domain('www.example.com') <domain.Domain object> >>> d.registered() example.com