mirror of
https://github.com/Grasscutters/mitmproxy.git
synced 2024-11-23 08:11:00 +00:00
35 lines
1.3 KiB
Python
35 lines
1.3 KiB
Python
import subprocess
|
|
import pf
|
|
|
|
"""
|
|
Doing this the "right" way by using DIOCNATLOOK on the pf device turns out
|
|
to be a pain. Apple has made a number of modifications to the data
|
|
structures returned, and compiling userspace tools to test and work with
|
|
this turns out to be a pain in the ass. Parsing pfctl output is short,
|
|
simple, and works.
|
|
|
|
Note: Also Tested with FreeBSD 10 pkgng Python 2.7.x.
|
|
Should work almost exactly as on Mac OS X and except with some changes to
|
|
the output processing of pfctl (see pf.py).
|
|
"""
|
|
|
|
|
|
class Resolver(object):
|
|
STATECMD = ("sudo", "-n", "/sbin/pfctl", "-s", "state")
|
|
|
|
def original_addr(self, csock):
|
|
peer = csock.getpeername()
|
|
try:
|
|
stxt = subprocess.check_output(self.STATECMD, stderr=subprocess.STDOUT)
|
|
except subprocess.CalledProcessError, e:
|
|
if "sudo: a password is required" in e.output:
|
|
insufficient_priv = True
|
|
else:
|
|
raise RuntimeError("Error getting pfctl state: " + repr(e))
|
|
|
|
if insufficient_priv is True or "sudo: a password is required" in stxt:
|
|
raise RuntimeError(
|
|
"Insufficient privileges to access pfctl. "
|
|
"See http://mitmproxy.org/doc/transparent/osx.html for details.")
|
|
return pf.lookup(peer[0], peer[1], stxt)
|