1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
## This file is part of Scapy
## See http://www.secdev.org/projects/scapy for more informations
## Copyright (C) Philippe Biondi <phil@secdev.org>
## This program is published under a GPLv2 license
"""
RIP (Routing Information Protocol).
"""
from scapy.packet import *
from scapy.fields import *
from scapy.layers.inet import UDP
class RIP(Packet):
name = "RIP header"
fields_desc = [
ByteEnumField("cmd", 1, {1:"req", 2:"resp", 3:"traceOn", 4:"traceOff",
5:"sun", 6:"trigReq", 7:"trigResp", 8:"trigAck",
9:"updateReq", 10:"updateResp", 11:"updateAck"}),
ByteField("version", 1),
ShortField("null", 0),
]
def guess_payload_class(self, payload):
if payload[:2] == "\xff\xff":
return RIPAuth
else:
return Packet.guess_payload_class(self, payload)
class RIPEntry(RIP):
name = "RIP entry"
fields_desc = [
ShortEnumField("AF", 2, {2:"IP"}),
ShortField("RouteTag", 0),
IPField("addr", "0.0.0.0"),
IPField("mask", "0.0.0.0"),
IPField("nextHop", "0.0.0.0"),
IntEnumField("metric", 1, {16:"Unreach"}),
]
class RIPAuth(Packet):
name = "RIP authentication"
fields_desc = [
ShortEnumField("AF", 0xffff, {0xffff:"Auth"}),
ShortEnumField("authtype", 2, {1:"md5authdata", 2:"simple", 3:"md5"}),
ConditionalField(StrFixedLenField("password", None, 16),
lambda pkt: pkt.authtype == 2),
ConditionalField(ShortField("digestoffset", 0),
lambda pkt: pkt.authtype == 3),
ConditionalField(ByteField("keyid", 0),
lambda pkt: pkt.authtype == 3),
ConditionalField(ByteField("authdatalen", 0),
lambda pkt: pkt.authtype == 3),
ConditionalField(IntField("seqnum", 0),
lambda pkt: pkt.authtype == 3),
ConditionalField(StrFixedLenField("zeropad", None, 8),
lambda pkt: pkt.authtype == 3),
ConditionalField(StrLenField("authdata", None,
length_from=lambda pkt: pkt.md5datalen),
lambda pkt: pkt.authtype == 1)
]
def pre_dissect(self, s):
if s[2:4] == "\x00\x01":
self.md5datalen = len(s) - 4
return s
bind_layers( UDP, RIP, sport=520)
bind_layers( UDP, RIP, dport=520)
bind_layers( RIP, RIPEntry, )
bind_layers( RIPEntry, RIPEntry, )
bind_layers( RIPAuth, RIPEntry, )
|
