大龍的博客

導(dǎo)航

<

2009年11月

>

日

一

二

三

四

五

六

25

26

27

28

29

30

31

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

1

2

3

4

5

留言簿(43)

收藏夾

ps (rss)

隨筆檔案

文章檔案

閱讀排行榜

評(píng)論排行榜

常用鏈接

統(tǒng)計(jì)

隨筆 - 864
文章 - 2
評(píng)論 - 378
引用 - 0

迅雷UPnP數(shù)據(jù)抓包分析 --- 轉(zhuǎn)

寫UPNP路由端口映射程序時(shí)抓的迅雷的數(shù)據(jù)包，由UPNP協(xié)議在路由上進(jìn)行端口映射的全過程都在這里了。
有了過程思路，想要自己在路由上增加端口映射就容易了，只是發(fā)送數(shù)據(jù)包，接收并解析XML數(shù)據(jù)的問題了。

//設(shè)備發(fā)現(xiàn)消息
[2009-9-21 23:54:07:033]
M-SEARCH * HTTP/1.1
HOST:239.255.255.250:1900
MAN:"ssdp:discover"
MX:6
ST:urn:schemas-upnp-org:service:WANPPPConnection:1

M-SEARCH * HTTP/1.1
HOST:239.255.255.250:1900
MAN:"ssdp:discover"
MX:6
ST:urn:schemas-upnp-org:service:WANIPConnection:1

//////////////////////////////////////////////////////////
[2009-9-21 23:54:07:043]
HTTP/1.1 200 OK
CACHE-CONTROL: max-age=100
DATE: Thu, 01 Jan 1970 00:46:40 GMT
EXT:
LOCATION: http://192.168.1.1:1900/igd.xml
SERVER: TP-LINK SOHO Router R402 Series Router, UPnP/1.0
ST: urn:schemas-upnp-org:service:WANIPConnection:1
USN: uuid:upnp-WANConnectionDevice-192168115678900001::urn:schemas-upnp-org:service:WANIPConnection:1

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[2009-9-22 0:03:56:811]
GET /igd.xml HTTP/1.1
Host: 192.168.1.1:1900

[2009-9-22 0:03:56:811]
HTTP/1.1 200 OK
CONTENT-LENGTH: 2746
CONTENT-TYPE: text/xml
DATE: Thu, 01 Jan 1970 00:56:29 GMT
LAST-MODIFIED: Tue, 28 Oct 2003 08:46:08 GMT
SERVER: TP-LINK SOHO Router R402 Series Router, UPnP/1.0
CONNECTION: close

1
0

urn:schemas-upnp-org:device:InternetGatewayDevice:1
http://192.168.1.1:80 TP-LINK SOHO Router R402 Serie
TP-LINK
http://www.tp-link.com.cn
TL-R402 Series 2.0
TL-R402 Series
2.0
uuid:upnp-InternetGatewayDevice-192168115678900001
123456789001

urn:schemas-upnp-org:service:Layer3Forwarding:1
urn:upnp-org:serviceId:L3Forwarding1
/l3f
/l3f
/l3f.xml

urn:schemas-upnp-org:device:WANDevice:1
WAN Device
TP-LINK
http://www.tp-link.com.cn
WAN Device
WAN Device
1

12345678900001
uuid:upnp-WANDevice-192168115678900001
123456789001

urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1
urn:upnp-org:serviceId:WANCommonInterfaceConfig
/ifc
/ifc
/ifc.xml

urn:schemas-upnp-org:device:WANConnectionDevice:1
WAN Connection Device
TP-LINK
http://www.tp-link.com.cn
WAN Connection Device
WAN Connection Device
1

12345678900001
uuid:upnp-WANConnectionDevice-192168115678900001
123456789001

urn:schemas-upnp-org:service:WANIPConnection:1
urn:upnp-org:serviceId:WANIPConnection
/ipc
/ipc
/ipc.xml

得到外部IP地址
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[2009-9-22 0:03:56:831]
POST /ipc HTTP/1.1
HOST: 192.168.1.1:1900
Content-Length: 296
CONTENT-TYPE: text/xml; charset="utf-8"
SOAPACTION: "urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress"

xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

[2009-9-22 0:03:56:841]
HTTP/1.1 200 OK
CONNECTION: close
SERVER: TP-LINK SOHO Router R402 Series Router, UPnP/1.0
CONTENT-LENGTH: 404
CONTENT-TYPE: text/xml; charset="utf-8"

220.112.102.188

增加端口映射
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

[2009-9-22 0:03:56:851]
POST /ipc HTTP/1.1
HOST: 192.168.1.1:1900
Content-Length: 665
CONTENT-TYPE: text/xml; charset="utf-8"
SOAPACTION: "urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping"

xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

10141
TCP
80
192.168.1.103
1
Thunder5
0

[2009-9-22 0:03:56:861]
HTTP/1.1 200 OK
CONNECTION: close
SERVER: TP-LINK SOHO Router R402 Series Router, UPnP/1.0
CONTENT-LENGTH: 332
CONTENT-TYPE: text/xml; charset="utf-8"

增加端口映射
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[2009-9-22 0:03:56:881]
POST /ipc HTTP/1.1
HOST: 192.168.1.1:1900
Content-Length: 668
CONTENT-TYPE: text/xml; charset="utf-8"
SOAPACTION: "urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping"

xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

10141
UDP
19369
192.168.1.103
1
Thunder5
0

[2009-9-22 0:03:56:891]
HTTP/1.1 200 OK
CONNECTION: close
SERVER: TP-LINK SOHO Router R402 Series Router, UPnP/1.0
CONTENT-LENGTH: 332
CONTENT-TYPE: text/xml; charset="utf-8"

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[2009-9-22 0:17:16:651]
SUBSCRIBE /ifc HTTP/1.1
SID: uuid:16842752-2147511038
Timeout: Second-1800
User-Agent: Mozilla/4.0 (compatible; UPnP/1.0; Windows 9x)
Host: 192.168.1.1:1900
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache

[2009-9-22 0:17:16:661]
HTTP/1.1 200 OK
DATE: Thu, 01 Jan 1970 01:09:49 GMT
SERVER: TP-LINK SOHO Router R402 Series Router, UPnP/1.0
SID: uuid:16842752-2147511038
TIMEOUT: Second-1800

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[2009-9-22 0:17:16:691]
SUBSCRIBE /ipc HTTP/1.1
SID: uuid:16842752-2281728766
Timeout: Second-1800
User-Agent: Mozilla/4.0 (compatible; UPnP/1.0; Windows 9x)
Host: 192.168.1.1:1900
Content-Length: 0
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache

[2009-9-22 0:17:16:711]
HTTP/1.1 200 OK
DATE: Thu, 01 Jan 1970 01:09:49 GMT
SERVER: TP-LINK SOHO Router R402 Series Router, UPnP/1.0
SID: uuid:16842752-2281728766
TIMEOUT: Second-1800

//刪除端口映射
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[2009-9-22 0:18:38:349]
POST /ipc HTTP/1.1
HOST: 192.168.1.1:1900
Content-Length: 399
Connection: close
CONTENT-TYPE: text/xml ; charset="utf-8"
SOAPACTION:"urn:schemas-upnp-org:service:WANIPConnection:1#DeletePortMapping"

xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

10141
TCP

[2009-9-22 0:18:38:349]
HTTP/1.1 200 OK
CONNECTION: close
SERVER: TP-LINK SOHO Router R402 Series Router, UPnP/1.0
CONTENT-LENGTH: 338
CONTENT-TYPE: text/xml; charset="utf-8"

//刪除端口映射
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
[2009-9-22 0:18:38:359]
POST /ipc HTTP/1.1
HOST: 192.168.1.1:1900
Content-Length: 399
Connection: close
CONTENT-TYPE: text/xml ; charset="utf-8"
SOAPACTION:"urn:schemas-upnp-org:service:WANIPConnection:1#DeletePortMapping"

xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">

10141
UDP

[2009-9-22 0:18:38:369]
HTTP/1.1 200 OK
CONNECTION: close
SERVER: TP-LINK SOHO Router R402 Series Router, UPnP/1.0
CONTENT-LENGTH: 338
CONTENT-TYPE: text/xml; charset="utf-8"

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

posted on 2009-11-17 12:41 大龍閱讀(3945) 評(píng)論(0) 編輯收藏引用

只有注冊(cè)用戶登錄后才能發(fā)表評(píng)論。
【推薦】100%開源！大型工業(yè)跨平臺(tái)軟件C++源碼提供，建模，組態(tài)！



網(wǎng)站導(dǎo)航: 博客園 IT新聞 BlogJava 博問 Chat2DB 管理

青青草原综合久久大伊人导航_色综合久久天天综合_日日噜噜夜夜狠狠久久丁香五月_热久久这里只有精品