1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
# http://trac.secdev.org/scapy/ticket/147
# scapy.contrib.description = VLAN Query Protocol
# scapy.contrib.status = loads
from scapy.packet import *
from scapy.fields import *
from scapy.layers.inet import UDP
class VQP(Packet):
name = "VQP"
fields_desc = [
ByteField("const", 1),
ByteEnumField("type", 1, {
1:"requestPort", 2:"responseVLAN",
3:"requestReconfirm", 4:"responseReconfirm"
}),
ByteEnumField("errorcodeaction", 0, {
0:"none",3:"accessDenied",
4:"shutdownPort", 5:"wrongDomain"
}),
ByteEnumField("unknown", 2, {
2:"inGoodResponse", 6:"inRequests"
}),
IntField("seq",0),
]
class VQPEntry(Packet):
name = "VQPEntry"
fields_desc = [
IntEnumField("datatype", 0, {
3073:"clientIPAddress", 3074:"portName",
3075:"VLANName", 3076:"Domain", 3077:"ethernetPacket",
3078:"ReqMACAddress", 3079:"unknown",
3080:"ResMACAddress"
}),
FieldLenField("len", None),
ConditionalField(IPField("datatom", "0.0.0.0"),
lambda p:p.datatype==3073),
ConditionalField(MACField("data", "00:00:00:00:00:00"),
lambda p:p.datatype==3078),
ConditionalField(MACField("data", "00:00:00:00:00:00"),
lambda p:p.datatype==3080),
ConditionalField(StrLenField("data", None,
length_from=lambda p:p.len),
lambda p:p.datatype not in [3073, 3078, 3080]),
]
def post_build(self, p, pay):
if self.len is None:
l = len(p.data)
p = p[:2]+struct.pack("!H",l)+p[4:]
return p
bind_layers(UDP, VQP, sport=1589)
bind_layers(UDP, VQP, dport=1589)
bind_layers(VQP, VQPEntry, )
bind_layers(VQPEntry, VQPEntry, )
|