Links

Links are classes that consume an input_stream and produce an output_stream.

PacketMeta

PacketMeta, Use DPKT to pull out packet information and convert those attributes to a dictionary based output.

class chains.links.packet_meta.PacketMeta

Bases: chains.links.link.Link

PacketMeta, Use DPKT to pull out packet information and convert those attributes to a dictionary based output.

packet_meta_data()

Pull out the metadata about each packet from the input_stream :param None:

Returns:a generator that contains packet meta data in the form of a dictionary Return type:generator (dictionary)

chains.links.packet_meta.test()

Test for PacketMeta class

ReverseDNS

PacketTags

TransportMeta

TransportMeta: Pull out transport meta data from incoming packet data

class chains.links.transport_meta.TransportMeta

Bases: chains.links.link.Link

Pull out transport meta data from incoming packet data

transport_meta_data()

Pull out the transport metadata for each packet in the input_stream

chains.links.transport_meta.test()

Test for TransportMeta class

Flows

HTTPMeta

HTTPMeta: Pull out HTTP meta data from incoming flow data

class chains.links.http_meta.HTTPMeta

Bases: chains.links.link.Link

Pull out application meta data from incoming flow data

http_meta_data()

Pull out the application metadata for each flow in the input_stream

chains.links.http_meta.test()

Test for HTTPMeta class

Link BaseClass

Links take an input_stream and provides an output_stream. All streams are required to be a generator that yields python dictionaries.

class chains.links.link.Link

Bases: object

Link classes take an input_stream and provide an output_stream. All streams are required to be a generator that yields python dictionaries.

link(stream_instance)

Set my input stream

input_stream

The input stream property

output_stream

The output stream property

chains.links.link.test()

Spin up the link class and call the methods