Files
mxaccess/captures/044-frida-loopback-write-test-int-123456789/tcp-conversations.tsv
T
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Initial project state: .NET reference, design, Rust port (M0+M1), evidence
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

83 lines
4.8 KiB
Plaintext

conversation_a conversation_b payload_packets payload_bytes first_relative last_relative
127.0.0.1:57415 127.0.0.1:57433 2251 43466 0.000000000 21.859385967
::1:49704 ::1:52846 452 36118 4.161494732 21.787788868
fe80::3608:256c:365:cc73:52889 fe80::3608:256c:365:cc73:55555 2 14170 18.059652090 18.216836214
fe80::3608:256c:365:cc73:52861 fe80::3608:256c:365:cc73:55555 2 13997 6.628551960 6.703291655
fe80::3608:256c:365:cc73:52850 fe80::3608:256c:365:cc73:55555 2 13978 4.581058264 4.655302286
fe80::3608:256c:365:cc73:443 fe80::3608:256c:365:cc73:61633 16 6540 13.295992136 13.343153954
fe80::3608:256c:365:cc73:808 fe80::3608:256c:365:cc73:52847 32 3878 4.546719074 19.679943323
::1:808 ::1:52888 16 2882 17.066066504 17.077814817
::1:808 ::1:52887 16 2880 16.922641039 16.934479713
::1:808 ::1:52884 16 2870 15.240860701 15.252781868
::1:808 ::1:52883 16 2868 15.086760998 15.099592686
::1:135 ::1:52845 22 2860 4.158016920 21.762241840
fe80::3608:256c:365:cc73:52865 fe80::3608:256c:365:cc73:55555 3 2703 8.338651180 10.987233877
::1:443 ::1:52851 6 2674 4.633342505 4.644741297
::1:808 ::1:52878 16 2430 12.196526527 12.211286545
::1:808 ::1:52875 16 2429 12.015075445 12.027095795
::1:808 ::1:52879 16 2423 12.361037016 12.381327152
::1:808 ::1:52868 16 2418 10.516235828 10.528310776
::1:808 ::1:52867 16 2417 10.345037699 10.356289625
::1:808 ::1:52869 16 2411 10.679186344 10.691583872
::1:808 ::1:52874 16 2398 11.860328197 11.874846458
::1:808 ::1:52880 16 2390 12.552695990 12.564703941
::1:808 ::1:52866 16 2386 10.166637897 10.178983927
::1:808 ::1:52870 16 2378 10.833328009 10.844199896
::1:32571 ::1:52863 4 2196 6.897694111 6.904662609
::1:443 ::1:52852 6 2054 4.648403406 4.667782307
::1:808 ::1:52856 16 1990 5.554922819 5.566157341
::1:808 ::1:52853 16 1985 5.073342800 5.089227676
::1:808 ::1:52858 16 1980 5.859330654 5.872775793
::1:808 ::1:52855 16 1975 5.403676510 5.415711403
::1:808 ::1:52857 16 1969 5.706068754 5.716967344
::1:808 ::1:52854 16 1964 5.253641844 5.265658379
::1:808 ::1:52864 16 1941 7.989725351 8.002866983
fe80::3608:256c:365:cc73:52892 fe80::3608:256c:365:cc73:55555 3 1941 19.439446688 21.552904606
::1:80 ::1:52836 6 1821 0.941807508 0.947696209
::1:80 ::1:52838 6 1793 1.602238178 1.608257294
::1:80 ::1:52841 6 1793 2.124391079 2.131097078
::1:80 ::1:52872 6 1793 11.609883547 11.616229296
::1:80 ::1:52877 6 1793 12.128115892 12.136592627
::1:80 ::1:52898 6 1793 21.614466667 21.620243311
::1:80 ::1:52894 6 1792 20.363871336 20.372599125
fe80::3608:256c:365:cc73:808 fe80::3608:256c:365:cc73:55757 2 1789 8.028932333 8.029454708
::1:80 ::1:52860 6 1788 6.275944710 6.284046412
::1:80 ::1:52886 6 1788 16.384112835 16.390162230
::1:80 ::1:52896 6 1788 20.403576612 20.410542488
::1:80 ::1:52891 6 1787 18.565232515 18.572692871
::1:80 ::1:52849 6 1784 4.567577839 4.573531389
127.0.0.1:57470 127.0.0.1:57477 100 1280 0.206132889 21.765163183
127.0.0.1:57608 127.0.0.1:57631 100 1280 0.208753347 21.781321764
fe80::3608:256c:365:cc73:52862 fe80::3608:256c:365:cc73:55555 2 1202 6.710581541 6.716006041
::1:808 ::1:55800 2 1150 1.997909546 1.998308182
127.0.0.1:57484 127.0.0.1:57746 88 1056 0.135826588 21.732676268
127.0.0.1:57485 127.0.0.1:57747 88 1056 0.135826588 21.737722635
127.0.0.1:57684 127.0.0.1:57745 88 1056 0.199999809 21.738514900
10.100.0.48:1433 10.100.0.48:49792 8 1028 7.844619989 17.978393793
10.100.0.48:1433 10.100.0.48:49805 12 1002 8.353704929 18.361898422
fe80::3608:256c:365:cc73:808 fe80::3608:256c:365:cc73:52882 6 913 13.320444345 13.345824480
fe80::3608:256c:365:cc73:808 fe80::3608:256c:365:cc73:52881 6 900 13.290688515 13.317678213
::1:808 ::1:55769 1 488 18.259832621 18.259832621
::1:80 ::1:52835 2 332 0.935764313 0.938823700
::1:80 ::1:52837 2 332 1.595971823 1.599215508
::1:80 ::1:52840 2 332 2.116688490 2.120234728
::1:80 ::1:52848 2 332 4.559725523 4.564160347
::1:80 ::1:52859 2 332 6.267752409 6.272269249
::1:80 ::1:52871 2 332 11.603816509 11.606801748
::1:80 ::1:52876 2 332 12.119186640 12.123672724
::1:80 ::1:52885 2 332 16.376948833 16.380520582
::1:80 ::1:52890 2 332 18.556989670 18.561233521
::1:80 ::1:52893 2 332 20.356000900 20.360402822
::1:80 ::1:52895 2 332 20.395294905 20.399712324
::1:80 ::1:52897 2 332 21.605211735 21.610368013
::1:49704 ::1:49829 2 270 17.865168810 17.865561247
fe80::3608:256c:365:cc73:808 fe80::3608:256c:365:cc73:52839 1 52 1.637832403 1.637832403
fe80::3608:256c:365:cc73:808 fe80::3608:256c:365:cc73:52873 1 52 11.638444424 11.638444424
fe80::3608:256c:365:cc73:808 fe80::3608:256c:365:cc73:52899 1 52 21.640053272 21.640053272
127.0.0.1:49248 127.0.0.1:63342 4 24 3.776938915 18.780520201
127.0.0.1:49787 127.0.0.1:49788 24 24 4.581458092 21.552636385
10.100.0.48:1433 10.100.0.48:49936 2 2 7.332711458 8.359053850
10.100.0.48:1433 10.100.0.48:49933 2 2 7.779240131 9.686875582
10.100.0.48:1433 10.100.0.48:49935 2 2 7.839268446 8.696252823
10.100.0.48:1433 10.100.0.48:49934 2 2 7.875755787 8.513921022