socketMonitor

Class SocketInfoGenerator

java.lang.Object

socketMonitor.SocketInfoGenerator

public class SocketInfoGenerator
extends java.lang.Object

The class SocketInfoGenerator is responsible for generating information about currently opened system (Linux or Windows) sockets. Monitoring of the sockets is based on external tools, depending on the operating system:
- Linux machines: system Netstat
- Windows machines: TCPView (http://technet.microsoft.com/en-us/sysinternals/bb897437)

The generated information includes:
- timestamp when the socket was noticed
- local IP address
- remote IP address
- local transport layer port
- remote transport layer port
- transport layer protocol
- application name associated with the socket

Author:

Jacob Honoré Broberg, Kartheepan Balachandran (kba@es.aau.dk), Tomasz Bujlow (tbu@es.aau.dk)

Field Summary

Fields

Modifier and Type	Field and Description
private static org.apache.log4j.Logger	log Used to log different events.
private long	netstatExtractedTimestamp Timestamp when the socket was detected.
private static java.lang.String[]	netStatLinux Commands used to execute the Linux measurement tool.
private static java.lang.String[]	netStatWindows Commands used to execute the Windows measurement tool.
private static java.lang.String	operatingSystem Operating system: win or linux.
static java.lang.String	OSNAMELINUX Name used to characterize the Linux OS.
static java.lang.String	OSNAMEWINDOWS Name used to characterize the Windows OS.

Constructor Summary

Constructors

Constructor and Description
SocketInfoGenerator() Constructs the object.

Method Summary

Methods

Modifier and Type	Method and Description
java.util.ArrayList<SocketInfo>	findSocketInfo() Gets list of information about currently open sockets.
private java.lang.String	getAppName(java.lang.String[] token) Gets the application name from the token.
private java.lang.String[]	getIPandPort(java.lang.String input) Splits information about IP address and transport layer port.
private java.lang.String[]	getLocalIPandPort(java.lang.String[] token) Gets local IP address and local transport layer port from the token.
private java.lang.String[]	getNestatOutput() Gets information about open sockets from the system using external tools.
static java.lang.String	getOperatingSystem() Gets name of the operating system.
private java.lang.String	getProtocolName(java.lang.String[] token) Gets name of the transport layer protocol from the token.
private java.lang.String[]	getRemoteIPandPort(java.lang.String[] token) Gets remote IP address and local transport layer port from the token.
private boolean	isSocketLine(java.lang.String line) Checks if the supplied line is a valid information about a socket.
private java.lang.String[]	netstatLineTokenizer(java.lang.String stringToTokenize) Splits the information about a socket to particular parts, like IP addresses, ports, etc.
private java.lang.String	replace(java.lang.String str, java.lang.String pattern, java.lang.String replace) Replaces one string with another within a string.
private static void	setOperatingSystem() Sets name of the operating system.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

private static org.apache.log4j.Logger log

Used to log different events.

OSNAMEWINDOWS

public static final java.lang.String OSNAMEWINDOWS

Name used to characterize the Windows OS.

See Also:

Constant Field Values

OSNAMELINUX

public static final java.lang.String OSNAMELINUX

Name used to characterize the Linux OS.

See Also:

Constant Field Values

operatingSystem

private static java.lang.String operatingSystem

Operating system: win or linux.

netStatWindows

private static final java.lang.String[] netStatWindows

Commands used to execute the Windows measurement tool.

netStatLinux

private static final java.lang.String[] netStatLinux

Commands used to execute the Linux measurement tool.

netstatExtractedTimestamp

private long netstatExtractedTimestamp

Timestamp when the socket was detected.

Constructor Detail

SocketInfoGenerator

public SocketInfoGenerator()

Constructs the object.

Method Detail

setOperatingSystem

private static void setOperatingSystem()

Sets name of the operating system.

getOperatingSystem

public static java.lang.String getOperatingSystem()

Gets name of the operating system.

Returns:

name of the operating system

findSocketInfo

public java.util.ArrayList<SocketInfo> findSocketInfo()

Gets list of information about currently open sockets. The following tasks are involved:
- obtain information about sockets from the system
- process each line of information checking if it contains information about an open socket. If not, discard the line
- split this line into tokens. Each token is responsible for example for an IP address, port, trannsport layer protocol name, etc
- create an information about the socket and add it to the list

Returns:

list of information about currently open sockets

getNestatOutput

private java.lang.String[] getNestatOutput()

Gets information about open sockets from the system using external tools. The information is returned as an array of lines.

Returns:

information about currently open sockets

isSocketLine

private boolean isSocketLine(java.lang.String line)

Checks if the supplied line is a valid information about a socket.

Parameters:

line - line to be checked

Returns:

true if the line is a valid information about a socket, false otherwise

netstatLineTokenizer

private java.lang.String[] netstatLineTokenizer(java.lang.String stringToTokenize)

Splits the information about a socket to particular parts, like IP addresses, ports, etc.

Parameters:

stringToTokenize - information to be split

Returns:

array of ordered information about the socket

getProtocolName

private java.lang.String getProtocolName(java.lang.String[] token)

Gets name of the transport layer protocol from the token.

Parameters:

token - token to be extracted

Returns:

name of the transport layer protocol

getIPandPort

private java.lang.String[] getIPandPort(java.lang.String input)

Splits information about IP address and transport layer port.

Parameters:

input - information in notation like "11.22.33.44:5000"

Returns:

array containing separately the IP address and the port

getLocalIPandPort

private java.lang.String[] getLocalIPandPort(java.lang.String[] token)

Gets local IP address and local transport layer port from the token.

Parameters:

token - token to be extracted

Returns:

local IP address and local transport layer port

getRemoteIPandPort

private java.lang.String[] getRemoteIPandPort(java.lang.String[] token)

Gets remote IP address and local transport layer port from the token.

Parameters:

token - token to be extracted

Returns:

remote IP address and local transport layer port

getAppName

private java.lang.String getAppName(java.lang.String[] token)

Gets the application name from the token.

Parameters:

token - token to be extracted

Returns:

the application name

replace

private java.lang.String replace(java.lang.String str,
                       java.lang.String pattern,
                       java.lang.String replace)

Replaces one string with another within a string. Used here to removes exe extensions.

Parameters:

str - string to be processed

pattern - string which we want to replace

replace - the replacement

Returns:

string after replacements