noisedestroyers
5c2cb1a4ed
Major Features: - Complete modern TUI interface with three focused views - Enhanced multi-column layout: Source | Proto | Destination | Extended | Frame Type | Metrics - Simplified navigation with 1/2/3 hotkeys instead of F1/F2/F3 - Protocol hierarchy: Transport (TCP/UDP) → Extended (CH10/PTP) → Frame Types - Classic TUI preserved with --classic flag Views Implemented: 1. Flow Analysis View: Enhanced multi-column flow overview with protocol detection 2. Packet Decoder View: Three-panel deep inspection (Flows | Frames | Fields) 3. Statistical Analysis View: Four analysis modes with timing and quality metrics Technical Improvements: - Left-aligned text columns with IP:port precision - Transport protocol separation from extended protocols - Frame type identification (CH10-Data, TMATS, PTP Sync) - Cross-view communication with persistent flow selection - Context-sensitive help and status bars - Comprehensive error handling with console fallback
78 lines
3.1 KiB
Python
78 lines
3.1 KiB
Python
"""
|
|
Data structures for flow and frame type statistics
|
|
"""
|
|
|
|
from dataclasses import dataclass, field
|
|
from typing import Dict, List, Set, Tuple
|
|
|
|
|
|
@dataclass
|
|
class FrameTypeStats:
|
|
"""Statistics for a specific frame type within a flow"""
|
|
frame_type: str
|
|
count: int = 0
|
|
total_bytes: int = 0
|
|
timestamps: List[float] = field(default_factory=list)
|
|
frame_numbers: List[int] = field(default_factory=list)
|
|
inter_arrival_times: List[float] = field(default_factory=list)
|
|
avg_inter_arrival: float = 0.0
|
|
std_inter_arrival: float = 0.0
|
|
outlier_frames: List[int] = field(default_factory=list)
|
|
outlier_details: List[Tuple[int, float]] = field(default_factory=list)
|
|
|
|
|
|
@dataclass
|
|
class EnhancedAnalysisData:
|
|
"""Enhanced analysis data from specialized decoders"""
|
|
# CH10 Timing Analysis
|
|
avg_clock_drift_ppm: float = 0.0
|
|
max_clock_drift_ppm: float = 0.0
|
|
timing_quality: str = "Unknown" # excellent, good, moderate, poor
|
|
timing_stability: str = "Unknown" # stable, variable
|
|
anomaly_rate: float = 0.0 # Percentage of frames with timing anomalies
|
|
avg_confidence_score: float = 0.0
|
|
|
|
# CH10 Frame Quality
|
|
avg_frame_quality: float = 0.0
|
|
sequence_gaps: int = 0
|
|
rtc_sync_errors: int = 0
|
|
format_errors: int = 0
|
|
overflow_errors: int = 0
|
|
|
|
# CH10 Data Analysis
|
|
channel_count: int = 0
|
|
analog_channels: int = 0
|
|
pcm_channels: int = 0
|
|
tmats_frames: int = 0
|
|
|
|
# General Enhanced Data
|
|
has_internal_timing: bool = False
|
|
primary_data_type: str = "Unknown"
|
|
decoder_type: str = "Standard" # Standard, Chapter10_Enhanced, PTP_Enhanced, etc.
|
|
|
|
# Decoded Frame Data Storage
|
|
sample_decoded_fields: Dict[str, any] = field(default_factory=dict) # Sample of actual decoded fields for display
|
|
available_field_names: List[str] = field(default_factory=list) # List of all available field names from decoder
|
|
|
|
@dataclass
|
|
class FlowStats:
|
|
"""Statistics for a source-destination IP pair"""
|
|
src_ip: str
|
|
dst_ip: str
|
|
src_port: int = 0 # Source port (0 if not applicable/unknown)
|
|
dst_port: int = 0 # Destination port (0 if not applicable/unknown)
|
|
transport_protocol: str = "Unknown" # TCP, UDP, ICMP, IGMP, etc.
|
|
traffic_classification: str = "Unknown" # Unicast, Multicast, Broadcast
|
|
frame_count: int = 0
|
|
timestamps: List[float] = field(default_factory=list)
|
|
frame_numbers: List[int] = field(default_factory=list)
|
|
inter_arrival_times: List[float] = field(default_factory=list)
|
|
avg_inter_arrival: float = 0.0
|
|
std_inter_arrival: float = 0.0
|
|
outlier_frames: List[int] = field(default_factory=list)
|
|
outlier_details: List[Tuple[int, float]] = field(default_factory=list) # (frame_number, time_delta)
|
|
total_bytes: int = 0
|
|
protocols: Set[str] = field(default_factory=set)
|
|
detected_protocol_types: Set[str] = field(default_factory=set) # Enhanced protocol detection (CH10, PTP, IENA, etc)
|
|
frame_types: Dict[str, FrameTypeStats] = field(default_factory=dict) # Per-frame-type statistics
|
|
enhanced_analysis: EnhancedAnalysisData = field(default_factory=EnhancedAnalysisData) # Enhanced decoder analysis |