Files
mxaccess/captures/011-pktmon-subscribe-scalar-loopback-probe/pcap-summary.txt
T
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Initial project state: .NET reference, design, Rust port (M0+M1), evidence
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

61 lines
2.1 KiB
Plaintext

capture captures\011-pktmon-subscribe-scalar-loopback-probe\network-pktmon.pcapng
packets 23938
ip_tcp_udp_packets 23371
packets_with_payload 11951
top_ports
proto port packet_refs
TCP 443 10375
TCP 54893 6794
TCP 3389 6794
TCP 50100 5422
TCP 56605 5256
TCP 55426 4749
TCP 58018 1862
TCP 58013 1830
TCP 58019 1730
UDP 1900 480
UDP 443 180
UDP 60560 180
TCP 52147 110
UDP 5645 96
TCP 56659 96
UDP 57788 72
UDP 48123 72
UDP 60592 72
UDP 43712 72
TCP 61921 38
top_endpoints
proto src sport dst dport packets payload_packets payload_bytes
TCP 10.100.0.199 54893 10.100.0.48 3389 5772 2964 168948
TCP 160.79.104.10 443 10.100.0.48 56605 3828 2472 508644
TCP 160.79.104.10 443 10.100.0.48 55426 3252 1980 144912
TCP 10.100.0.48 55426 160.79.104.10 443 1497 377 6060672
TCP 10.100.0.48 56605 160.79.104.10 443 1428 0 0
TCP 10.100.0.199 58019 10.100.0.48 50100 1128 132 7572
TCP 10.100.0.199 58013 10.100.0.48 50100 1116 132 7464
TCP 10.100.0.199 58018 10.100.0.48 50100 1092 108 3036
TCP 10.100.0.48 3389 10.100.0.199 54893 1022 798 65618
TCP 10.100.0.48 50100 10.100.0.199 58018 770 770 56532
TCP 10.100.0.48 50100 10.100.0.199 58013 714 700 50400
TCP 10.100.0.48 50100 10.100.0.199 58019 602 602 43722
UDP 172.64.155.209 443 10.100.0.48 60560 180 180 90492
UDP 10.100.0.99 5645 239.255.255.250 1900 96 96 30732
TCP 104.18.37.228 443 10.100.0.48 52147 96 48 6528
TCP 34.149.66.137 443 10.100.0.48 56659 96 12 4188
UDP 10.100.0.24 44455 10.100.0.255 32412 36 36 756
UDP 10.100.0.24 54131 10.100.0.255 32414 36 36 756
UDP 10.100.0.67 57788 255.255.255.255 1900 36 36 26952
UDP 10.100.0.67 57788 239.255.255.250 1900 36 36 26952
UDP 10.100.0.231 48123 239.255.255.250 1900 36 36 26916
UDP 10.100.0.231 48123 255.255.255.255 1900 36 36 26916
UDP 10.100.0.176 60592 239.255.255.250 1900 36 36 26916
UDP 10.100.0.176 60592 255.255.255.255 1900 36 36 26916
UDP 10.100.0.218 43712 239.255.255.250 1900 36 36 26916
UDP 10.100.0.218 43712 255.255.255.255 1900 36 36 26916
TCP 172.64.155.209 443 10.100.0.48 61921 24 12 336
TCP 172.64.155.209 443 10.100.0.48 61850 24 24 2232
TCP 172.64.155.209 443 10.100.0.48 59909 24 12 336
TCP 10.100.0.48 61921 172.64.155.209 443 14 14 448