pattern_finder.py 7.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229
  1. #!/usr/bin/env python3
  2. """
  3. Pattern Analysis Tool for MEL Protocol Checksums
  4. Looks for mathematical relationships and patterns in the checksum data
  5. """
  6. import sys
  7. import struct
  8. from collections import defaultdict
  9. def parse_hex(hex_str: str):
  10. """Parse hex string to bytes"""
  11. return [int(hex_str[i:i+2], 16) for i in range(0, len(hex_str), 2)]
  12. def find_changing_bytes(filename: str):
  13. """Find which bytes change between consecutive entries"""
  14. with open(filename, 'r') as f:
  15. lines = [line.strip() for line in f if line.strip()]
  16. if len(lines) < 2:
  17. return
  18. print(f"Analyzing byte changes in {filename}")
  19. print("=" * 50)
  20. # Parse first two entries
  21. bytes1 = parse_hex(lines[0])
  22. bytes2 = parse_hex(lines[1])
  23. print("Changes between first two entries:")
  24. for i, (b1, b2) in enumerate(zip(bytes1, bytes2)):
  25. if b1 != b2:
  26. print(f" Byte {i:2d}: 0x{b1:02x} → 0x{b2:02x} (diff: {b2-b1:+d})")
  27. # Look at sequence field specifically (byte 6 based on your data)
  28. print(f"\nSequence progression (byte 6):")
  29. for i in range(min(20, len(lines))):
  30. bytes_data = parse_hex(lines[i])
  31. seq = bytes_data[6] if len(bytes_data) > 6 else 0
  32. checksum = bytes_data[-2] | (bytes_data[-1] << 8) if len(bytes_data) >= 2 else 0
  33. print(f" Entry {i:2d}: seq=0x{seq:02x}, checksum=0x{checksum:04x}")
  34. def analyze_checksum_patterns(filename: str):
  35. """Analyze patterns in checksum values"""
  36. with open(filename, 'r') as f:
  37. lines = [line.strip() for line in f if line.strip()]
  38. print(f"Checksum Pattern Analysis for {filename}")
  39. print("=" * 50)
  40. checksums = []
  41. sequences = []
  42. payload_sums = []
  43. for line in lines:
  44. bytes_data = parse_hex(line)
  45. payload = bytes_data[:-2]
  46. checksum = bytes_data[-2] | (bytes_data[-1] << 8)
  47. sequence = bytes_data[6] if len(bytes_data) > 6 else 0
  48. checksums.append(checksum)
  49. sequences.append(sequence)
  50. payload_sums.append(sum(payload))
  51. # Look for arithmetic progression in checksums
  52. print("Checksum differences (first 20):")
  53. for i in range(1, min(20, len(checksums))):
  54. diff = checksums[i] - checksums[i-1]
  55. print(f" {i-1:2d}→{i:2d}: {diff:+5d} (0x{diff & 0xFFFF:04x})")
  56. # Check for correlation with payload sum
  57. print(f"\nPayload sum vs Checksum correlation:")
  58. for i in range(min(10, len(checksums))):
  59. print(f" Entry {i}: sum={payload_sums[i]:5d}, checksum={checksums[i]:5d}, "
  60. f"ratio={checksums[i]/payload_sums[i] if payload_sums[i] != 0 else 'N/A':.3f}")
  61. def test_bitwise_operations(filename: str):
  62. """Test various bitwise operations that might be used"""
  63. with open(filename, 'r') as f:
  64. first_line = f.readline().strip()
  65. bytes_data = parse_hex(first_line)
  66. payload = bytes_data[:-2]
  67. expected = bytes_data[-2] | (bytes_data[-1] << 8)
  68. print(f"Testing bitwise operations on first entry:")
  69. print(f"Expected checksum: 0x{expected:04x}")
  70. print("=" * 40)
  71. # Sum with bit operations
  72. s = sum(payload)
  73. tests = [
  74. ("Sum", s & 0xFFFF),
  75. ("Sum >> 1", (s >> 1) & 0xFFFF),
  76. ("Sum << 1", (s << 1) & 0xFFFF),
  77. ("Sum rotated right", ((s >> 8) | (s << 8)) & 0xFFFF),
  78. ("Sum rotated left", ((s << 8) | (s >> 8)) & 0xFFFF),
  79. ("Sum XOR 0xFFFF", (s ^ 0xFFFF) & 0xFFFF),
  80. ("Sum XOR 0x5555", (s ^ 0x5555) & 0xFFFF),
  81. ("Sum XOR 0xAAAA", (s ^ 0xAAAA) & 0xFFFF),
  82. ("~Sum", (~s) & 0xFFFF),
  83. ("~Sum + 1", (~s + 1) & 0xFFFF),
  84. ("0x10000 - Sum", (0x10000 - s) & 0xFFFF),
  85. ("0xFFFF - Sum", (0xFFFF - s) & 0xFFFF),
  86. ]
  87. for name, result in tests:
  88. match = "✓" if result == expected else "✗"
  89. print(f" {match} {name:20s}: 0x{result:04x}")
  90. def analyze_multiple_files(filenames):
  91. """Compare patterns across multiple files"""
  92. print("Multi-file Pattern Analysis")
  93. print("=" * 50)
  94. all_data = {}
  95. for filename in filenames:
  96. try:
  97. with open(filename, 'r') as f:
  98. lines = [line.strip() for line in f if line.strip()]
  99. # Get first entry from each file
  100. if lines:
  101. bytes_data = parse_hex(lines[0])
  102. payload = bytes_data[:-2]
  103. checksum = bytes_data[-2] | (bytes_data[-1] << 8)
  104. all_data[filename] = {
  105. 'payload': payload,
  106. 'checksum': checksum,
  107. 'payload_sum': sum(payload),
  108. 'first_hex': lines[0]
  109. }
  110. except FileNotFoundError:
  111. print(f"Warning: File {filename} not found")
  112. continue
  113. print("Comparison of first entries:")
  114. for filename, data in all_data.items():
  115. print(f"\n{filename}:")
  116. print(f" Checksum: 0x{data['checksum']:04x}")
  117. print(f" Payload sum: {data['payload_sum']}")
  118. print(f" First hex: {data['first_hex'][:40]}...")
  119. # Look for common differences
  120. checksums = [data['checksum'] for data in all_data.values()]
  121. sums = [data['payload_sum'] for data in all_data.values()]
  122. if len(checksums) > 1:
  123. print(f"\nDifferences between files:")
  124. filenames_list = list(all_data.keys())
  125. for i in range(len(filenames_list)):
  126. for j in range(i+1, len(filenames_list)):
  127. f1, f2 = filenames_list[i], filenames_list[j]
  128. check_diff = all_data[f2]['checksum'] - all_data[f1]['checksum']
  129. sum_diff = all_data[f2]['payload_sum'] - all_data[f1]['payload_sum']
  130. print(f" {f1} vs {f2}:")
  131. print(f" Checksum diff: {check_diff:+d}")
  132. print(f" Sum diff: {sum_diff:+d}")
  133. def find_magic_constants(filename: str):
  134. """Try to find magic constants used in the checksum calculation"""
  135. with open(filename, 'r') as f:
  136. lines = [line.strip() for line in f if line.strip()]
  137. print("Searching for magic constants...")
  138. print("=" * 40)
  139. # Test first few entries
  140. for i, line in enumerate(lines[:5]):
  141. bytes_data = parse_hex(line)
  142. payload = bytes_data[:-2]
  143. expected = bytes_data[-2] | (bytes_data[-1] << 8)
  144. payload_sum = sum(payload)
  145. print(f"\nEntry {i}:")
  146. print(f" Expected: 0x{expected:04x} ({expected})")
  147. print(f" Sum: 0x{payload_sum:04x} ({payload_sum})")
  148. # Try to find what constant when added/subtracted/XORed gives the expected result
  149. magic_add = (expected - payload_sum) & 0xFFFF
  150. magic_sub = (payload_sum - expected) & 0xFFFF
  151. magic_xor = expected ^ payload_sum
  152. print(f" Magic add: 0x{magic_add:04x} (sum + this = expected)")
  153. print(f" Magic sub: 0x{magic_sub:04x} (sum - this = expected)")
  154. print(f" Magic XOR: 0x{magic_xor:04x} (sum ^ this = expected)")
  155. def main():
  156. if len(sys.argv) < 2:
  157. print("Usage:")
  158. print(" python pattern_finder.py <file1> [file2] [file3] ...")
  159. print("\nThis tool will:")
  160. print(" - Find changing bytes between entries")
  161. print(" - Analyze checksum patterns")
  162. print(" - Test bitwise operations")
  163. print(" - Compare multiple files")
  164. print(" - Search for magic constants")
  165. sys.exit(1)
  166. filenames = sys.argv[1:]
  167. # Single file analysis
  168. main_file = filenames[0]
  169. print("PATTERN ANALYSIS REPORT")
  170. print("=" * 60)
  171. find_changing_bytes(main_file)
  172. print()
  173. analyze_checksum_patterns(main_file)
  174. print()
  175. test_bitwise_operations(main_file)
  176. print()
  177. find_magic_constants(main_file)
  178. print()
  179. # Multi-file analysis if multiple files provided
  180. if len(filenames) > 1:
  181. analyze_multiple_files(filenames)
  182. if __name__ == "__main__":
  183. main()