1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248
|
# -*- coding: binary -*-
module PacketFu
# EthOui is the Organizationally Unique Identifier portion of a MAC address, used in EthHeader.
#
# See the OUI list at http://standards.ieee.org/regauth/oui/oui.txt
#
# ==== Header Definition
#
# Integer :b0
# Integer :b1
# Integer :b2
# Integer :b3
# Integer :b4
# Integer :b5
# Integer :local
# Integer :multicast
# Int16 :oui, Default: 0x1ac5 :)
class EthOui < Struct.new(:b5, :b4, :b3, :b2, :b1, :b0, :local, :multicast, :oui)
# EthOui is unusual in that the bit values do not enjoy StructFu typing.
def initialize(args={})
args[:local] ||= 0
args[:oui] ||= 0x1ac # :)
args.each_pair {|k,v| args[k] = 0 unless v}
super(args[:b5], args[:b4], args[:b3], args[:b2],
args[:b1], args[:b0], args[:local], args[:multicast],
args[:oui])
end
# Returns the object in string form.
def to_s
byte = 0
byte += 0b10000000 if b5.to_i == 1
byte += 0b01000000 if b4.to_i == 1
byte += 0b00100000 if b3.to_i == 1
byte += 0b00010000 if b2.to_i == 1
byte += 0b00001000 if b1.to_i == 1
byte += 0b00000100 if b0.to_i == 1
byte += 0b00000010 if local.to_i == 1
byte += 0b00000001 if multicast.to_i == 1
[byte,oui].pack("Cn")
end
# Reads a string to populate the object.
def read(str)
force_binary(str)
return self if str.nil?
if 1.respond_to? :ord
byte = str[0].ord
else
byte = str[0]
end
self[:b5] = byte & 0b10000000 == 0b10000000 ? 1 : 0
self[:b4] = byte & 0b01000000 == 0b01000000 ? 1 : 0
self[:b3] = byte & 0b00100000 == 0b00100000 ? 1 : 0
self[:b2] = byte & 0b00010000 == 0b00010000 ? 1 : 0
self[:b1] = byte & 0b00001000 == 0b00001000 ? 1 : 0
self[:b0] = byte & 0b00000100 == 0b00000100 ? 1 : 0
self[:local] = byte & 0b00000010 == 0b00000010 ? 1 : 0
self[:multicast] = byte & 0b00000001 == 0b00000001 ? 1 : 0
self[:oui] = str[1,2].unpack("n").first
self
end
end
# EthNic is the Network Interface Controler portion of a MAC address, used in EthHeader.
#
# ==== Header Definition
#
# Integer:n1
# Integer:n2
# Integer:n3
#
class EthNic < Struct.new(:n0, :n1, :n2)
# EthNic does not enjoy StructFu typing.
def initialize(args={})
args.each_pair {|k,v| args[k] = 0 unless v}
super(args[:n0], args[:n1], args[:n2])
end
# Returns the object in string form.
def to_s
[n0,n1,n2].map {|x| x.to_i}.pack("C3")
end
# Reads a string to populate the object.
def read(str)
force_binary(str)
return self if str.nil?
self[:n0], self[:n1], self[:n2] = str[0,3].unpack("C3")
self
end
end
# EthMac is the combination of an EthOui and EthNic, used in EthHeader.
#
# ==== Header Definition
#
# EthOui :oui # See EthOui
# EthNic :nic # See EthNic
class EthMac < Struct.new(:oui, :nic)
def initialize(args={})
super(
EthOui.new.read(args[:oui]),
EthNic.new.read(args[:nic]))
end
# Returns the object in string form.
def to_s
"#{self[:oui]}#{self[:nic]}"
end
# Reads a string to populate the object.
def read(str)
force_binary(str)
return self if str.nil?
self.oui.read str[0,3]
self.nic.read str[3,3]
self
end
end
# EthHeader is a complete Ethernet struct, used in EthPacket.
# It's the base header for all other protocols, such as IPHeader,
# TCPHeader, etc.
#
# For more on the construction on MAC addresses, see
# http://en.wikipedia.org/wiki/MAC_address
#
# TODO: Need to come up with a good way of dealing with vlan
# tagging. Having a usually empty struct member seems weird,
# but there may not be another way to do it if I want to preserve
# the Eth-ness of vlan-tagged 802.1Q packets. Also, may as well
# deal with 0x88a8 as well (http://en.wikipedia.org/wiki/802.1ad)
#
# ==== Header Definition
#
# EthMac :eth_dst # See EthMac
# EthMac :eth_src # See EthMac
# Int16 :eth_proto, Default: 0x8000 # IP 0x0800, Arp 0x0806
# String :body
class EthHeader < Struct.new(:eth_dst, :eth_src, :eth_proto, :body)
include StructFu
def initialize(args={})
super(
EthMac.new.read(args[:eth_dst]),
EthMac.new.read(args[:eth_src]),
Int16.new(args[:eth_proto] || 0x0800),
StructFu::String.new.read(args[:body])
)
end
# Setter for the Ethernet destination address.
def eth_dst=(i); typecast(i); end
# Getter for the Ethernet destination address.
def eth_dst; self[:eth_dst].to_s; end
# Setter for the Ethernet source address.
def eth_src=(i); typecast(i); end
# Getter for the Ethernet source address.
def eth_src; self[:eth_src].to_s; end
# Setter for the Ethernet protocol number.
def eth_proto=(i); typecast(i); end
# Getter for the Ethernet protocol number.
def eth_proto; self[:eth_proto].to_i; end
# Returns the object in string form.
def to_s
self.to_a.map {|x| x.to_s}.join
end
# Reads a string to populate the object.
def read(str)
force_binary(str)
return self if str.nil?
self[:eth_dst].read str[0,6]
self[:eth_src].read str[6,6]
self[:eth_proto].read str[12,2]
self[:body].read str[14,str.size]
self
end
# Converts a readable MAC (11:22:33:44:55:66) to a binary string.
# Readable MAC's may be split on colons, dots, spaces, or underscores.
#
# irb> PacketFu::EthHeader.mac2str("11:22:33:44:55:66")
#
# #=> "\021\"3DUf"
def self.mac2str(mac)
if mac.split(/[:\x2d\x2e\x5f]+/).size == 6
ret = mac.split(/[:\x2d\x2e\x20\x5f]+/).collect {|x| x.to_i(16)}.pack("C6")
else
raise ArgumentError, "Unkown format for mac address."
end
return ret
end
# Converts a binary string to a readable MAC (11:22:33:44:55:66).
#
# irb> PacketFu::EthHeader.str2mac("\x11\x22\x33\x44\x55\x66")
#
# #=> "11:22:33:44:55:66"
def self.str2mac(mac='')
if mac.to_s.size == 6 && mac.kind_of?(::String)
ret = mac.unpack("C6").map {|x| sprintf("%02x",x)}.join(":")
end
end
# Sets the source MAC address in a more readable way.
def eth_saddr=(mac)
mac = EthHeader.mac2str(mac)
self[:eth_src].read mac
self[:eth_src]
end
# Gets the source MAC address in a more readable way.
def eth_saddr
EthHeader.str2mac(self[:eth_src].to_s)
end
# Set the destination MAC address in a more readable way.
def eth_daddr=(mac)
mac = EthHeader.mac2str(mac)
self[:eth_dst].read mac
self[:eth_dst]
end
# Gets the destination MAC address in a more readable way.
def eth_daddr
EthHeader.str2mac(self[:eth_dst].to_s)
end
# Readability aliases
alias :eth_dst_readable :eth_daddr
alias :eth_src_readable :eth_saddr
def eth_proto_readable
"0x%04x" % eth_proto
end
end
end
|