12.12追溯威胁源头有活动吗

import socket
import time

def monitor_network_traffic():
    while True:
        try:
            # 模拟网络流量监测
            data, addr = s.recvfrom(1024)
            current_time = time.time()
            print(f"Received data from {addr} at {current_time}")
            
            # 简单的异常检测逻辑
            if is_suspicious(data):
                log_threat(addr, current_time)
        except Exception as e:
            print(f"Error: {e}")

def is_suspicious(data):
    # 这里可以添加更复杂的异常检测逻辑
    return len(data) > 1000  # 示例：数据包过大视为可疑

def log_threat(addr, timestamp):
    with open("threat_log.txt", "a") as f:
        f.write(f"Threat detected from {addr} at {timestamp}\n")

if __name__ == "__main__":
    s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
    s.bind(('0.0.0.0', 12345))
    monitor_network_traffic()