tescat

package module
v0.0.0-...-09e401d Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Aug 7, 2015 License: Apache-2.0 Imports: 8 Imported by: 0

README

Tescat
======

This tool analyzes UDP packets being broadcast on a specified port to the local network or from a PCAP file. It will identify packets that are unique since the start of the process.

Tescat is especially useful when you're analyzing a network with a large amount of baseline traffic that does not vary frequently and you want to identify anomalies some time after the initial baseline.

This was developed while auditing the internal LAN on the Tesla Model S.

Installation
------------
```
  go get github.com/kevinmahaffey/tescat
  go build src/github.com/kevinmahaffey/tescat/cmd/tescat.go
```
Running
-------
  
  Listen for UDP traffic destined to a given port
```
  ./tescat -p 20100
```

  Process UDP data from a pcap file looking for packets destined to a given port
```
  ./tescat -f mypcap.pcap -p 20100
```

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Capture

type Capture struct {
	// contains filtered or unexported fields
}

func NewCapture

func NewCapture() (c *Capture, err error)

func (*Capture) StartFromPCAP

func (c *Capture) StartFromPCAP(file string, port int) (err error)

func (*Capture) StartFromUDP

func (c *Capture) StartFromUDP(port int) (err error)

type Message

type Message struct {
	Type    uint8
	Opcode  uint8
	Data    []byte
	Unknown []byte
}

func NewHexMessage

func NewHexMessage(messageType uint8, opCode uint8, hexData string) (m *Message, err error)

func NewRawMessage

func NewRawMessage(data []byte) (m *Message)

func (*Message) Bytes

func (m *Message) Bytes() []byte

func (*Message) String

func (m *Message) String() string

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL