GcT@s\ddklZddkZdZeiieiddZyeieWne j o e ZnXdZ de fdYZ ddkZddkZddkZd eifd YZeid ZeiZeieid eieeid ZeieeidZeidZedjoeidnddk Z ddk!Z!ddk"Z"ddk#Z#ddk$Z$ddk%Z%ddk&Z&ddk'Z'ddk(Z(ddk)Z)ddk*Z*ddk+Z+ddk,Z,ddk-Z-ddk.Z.ddk/l0Z0ddk1l1Z1ddk2l2Z2ddk3l4Z4ddk5Z5ddk3Z3ddk6Z6e6i7dde8eyddk9Z9dZ:Wn&e;j oei<ddZ:nXyddk=Z=dZ>Wn&e;j oei<ddZ>nXe!i?i@dZAe!i?i@dZBe!i?i@dZCe!i?i@dZDe$iEddd jZFeiGd!d"jZHe!i?i@d#ZIeAodZJZKn dZJZKeKouyddkLZLdZKWnXe;j oLeAoeiMd$dZKn(edjoeiNd%eOnnXneJouyddkPZPdZJWnXe;j oLeAoeiMd&dZJn(edjoeiNd'eOnnXneK oJeiQd(ZReRiSd)?d*joeiMd+dZTndZT[Rnydd,kUlVZVWn e;j oei<d-nXye iWd.Wne iNj od/ZWn Xe iWZWe iXZXye iYZYe iZZZWn e[j oei<d0nXeIo d1e _\nd2Z]d3e fd4YZ^d5fd6YZ_d7d8Z`d9d8Zad:Zbd;Zcd<ZddZed=Zfd>Zgd?Zhd@ZidAZjdBZkdCZldDZmdEZndFZodGZpdHZqdIZrdJZsdKZtdZudLZvd!Zwd)ZxdMZydNZzdOZ{dPZ|dQZ}dZ~dLZd:ZdRZd8ZdZdZdLZdSZdTZdZdZd>ZdUZdVZdWZedXZdYZedZZd[Zed\\ZZd]e_fd^YZd_Zed`ZdaZdbZdcZddZdddeZdfZdddgZdhZe-iZeFo diZn djZdkZMdlZdmZdnZdoZdpZdqZe dre e e e dsZhdtdu<dvdw<dxdy<dzd{<d|d}<d~d<dd<dd<dd<dd<dd<dd<dd<ddYZdd?Zd@ZddAZdBZdCefdDYZdEfdFYZeiiedGefdHYZdIefdJYZdKefdLYZdMefdNYZdOefdPYZdQefdRYZdSefdTYZdUefdVYZdWefdXYZdYefdZYZ d[efd\YZ!d]efd^YZ"d_e"fd`YZ#daefdbYZ$e,i%dcZ&e,i%ddZ'e,i%dee,i(Z)e,i%dfZ*e,i%dgZ+dhe_fdiYZ,djZ-dkZ.dle/fdmYZ0dne0fdoYZ1dpe0fdqYZ2dre0fdsYZ3dtfduYZ4dve4fdwYZ5dxe4fdyYZ6dze6fd{YZ7d|fd}YZ8d~e8fdYZ9de8fdYZ:de8fdYZ;de8fdYZ<de6fdYZ=dfdYZ>dfdYZ?dfdYZ@dfdYZAdfdYZBde>fdYZCdeCfdYZDdeCfdYZEdeCfdYZFdeCfdYZGdeGfdYZHdeGfdYZIdeGfdYZJde>fdYZKdeKfdYZLde>fdYZMdeMfdYZNdeNfdYZOde>fdYZPde>fdYZQdePfdYZRde>fdYZSde>fdYZTde>fdYZUde>fdYZVdeSfdYZWde>fdYZXdeXfdYZYde>fdYZZde>fdYZ[dZ\de>fdYZ]de]fdYZ^de^fdYZ_de^fdYZ`de]fdYZadeafdYZbde]fdYZcde>fdYZdde>fdYZehdhdd<dLd<d:d<d!d<dRd<d8d<dd<d)dfd9YZpd:e>fd;YZqd<e>fd=YZrd>erfd?YZsd@erfdAYZtdBe>fdCYZudDeufdEYZvdFereufdGYZwdHeufdIYZxdJeufdKYZydLeufdMYZzdNeufdOYZ{dPeufdQYZ|dReufdSYZ}dTexfdUYZ~dVe>fdWYZdXeefdYYZdZerfd[YZd\e]fd]YZhd^e fd<d_e fd<d`dafdL<dbdcfd:<dde fd!<dedffdR<dgdhfd)<didjfd<dke fdfdzYZd{Zd|erfd}YZd~eSfdYZderfdYZdeQfdYZde fdYZdfdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZde0fdYZdefdYZdee/fdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdeefdYZdefdYZdefdYZhdd<dd:<dd!<ddR<dd)<dd#<dd%<dd'<dd+<dd-<dd<dd<ddM<dd<dd<d?d@<dAdB<dCd*<dDdE<dDdF<dGdH<dIdJ<dKdL<dMdN<dOdP<dQdR<dSdT<dUdV<dWdX<dYdZ<d[d\<d]d^<d_d`<d_da<dbdc<ddde<dfdg<dhdi<djdk<dldm<dndo<dpdq<drds<dtdu<dvdw<dxdy<dzd{<d|d}<d~d<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<d=d<dd<dDd<dDd<dd<dd<dd<dd<dd<dd<dYd<dd<dd<dd<dd<dd<dd<dpd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<dd<d d efd?YZd@efdAYZdBefdCYZdDefdEYZdFefdGYZdHefdIYZhdJd<dKdP<dLd<dMdL<dNd:<dNd!<dOdR<dPd8<dQd<dRd)<dSd#<dTd%<dUd'<dVd+<dWd-<dXd<dYd<dZdM<d[d<d\d<d]d^<d_d<d`da<dbdYZd?efd@YZdAefdBYZhZxVeeeD]BZdCeeZeejohedDefd?YZd@efdAYZdBefdCYZ dDefdEYZ!dFefdGYZ"dHefdIYZ#dJefdKYZ$dLefdMYZ%dNefdOYZ&dPefdQYZ'dRefdSYZ(dTefdUYZ)dVefdWYZ*dXefdYYZ+dZefd[YZ,d\efd]YZ-d^efd_YZ.d`efdaYZ/dbefdcYZ0ddefdeYZ1dfefdgYZ2dhefdiYZ3djefdkYZ4dlefdmYZ5dnefdoYZ6dpefdqYZ7drefdsYZ8dtefduYZ9dvefdwYZ:dxefdyYZ;dzefd{YZ<d|efd}YZ=d~efdYZ>defdYZ?defdYZ@defdYZAdefdYZBdefdYZCdefdYZDdefdYZEdefdYZFdefdYZGdefdYZHdefdYZIdefdYZJdefdYZKdefdYZLdefdYZMdefdYZNdefdYZOhdd<ddL<dd:<dd!<ddR<dd8YZd?efd@YZdAefdBYZe dCZe dDZe dEZe dFZe dGZe dHZeeeee"eeeeeeeeeedIdLeeeeeeeeeeeedJdeeedJdeeedJdeeedIdKeeedIdLeeedIdeeedId<eeedId;eeedIdMeeedNdOdIdMeeedIdPeeedIdQeeedJdKeeedJdLeeedJdeeedJd<eeedJd;eeedJdMeeedJdPeeedJdQeeedJdKeeedJdLeeedJdeeedJd<eeedJd;eeedJdMeeedRdeeedIdeeedSddTddUd:eeedSdVdTdVdUd:eeedRdLeeedRdeeedRd<eeedRd;eeedRdMeeedRdWeeedXddJd!eeedXddJdeeedXddJd8eeedXddJdeeedXddJd!eeedXddJdeeedXddJd8eeedXddJdeeedXddJd1eeedYdZd[dZeeedYd\eeed[d\eee!d[d]eee!dYd]eeed[d eeedYd eeed[d^dYd^eeed[d_dYd_eeed[d`dYd`eeed[ddYdaeeed[dadYdeeedbdqeeedYdceeed[dceeeeeeeeeddddIdeeeddddIdeeedddLdIdeeeddd:dIdeeeddd!dIdeeedddRdIdeeeddd)dIdeeeddd#dIdeeeddd%dIdeeeddd'dIdeeeddd+dIdeeeeeeeeeeeeeeeeeeeeeeeeeeeeeed[deeeedYdeeeedYdfeeed[dfeeed[dfdYdfeeedgdeee dgdLdIdLeeedgdLeeedgd:dIdLeeedgd:eee1dJd=ee1e2dhdee2e3eee4d[deee5d[deee6dYdeee7dYdeee8dYdee8e9ee8e9ee9e9ee9e:eee;dYdeee<d[deee=d[dee=eBeeBeCeeCeCee=eDdidee=eEdiddjd)ee=eFdiddjdee=eGee=eHee#e$dIdLee#eee$e%ee%e&dkdee&e)dRdee&e'dRdLee&e(dRd:ee&e*dRd!ee&e+dRdRee&e,dRd8ee&e-dRdee&e.dRd%ee&e/dRd'eeeIdYdleeeId[dleeIeJdIdeeIeKdId:eeIeLdId!eeLedmd!eeMeNdgdeeNeOeeeQd[deeQeRdndeeQeSdndLeeQeTdnd:eeQeWdnd!eeQeYdndReeQeZdnd8eeReVeeSeVeeZeVdodpZd)e dqZdrZdsZe dtZheee<eef<eeh<ed#<ed+<ed6<edu<edv<edw<ed:<ed><edx<ed*<ed<e1dy<e#dze<de<dye1jo e!e_"n[!eKo*ee_#eJoee_$ee_%nneei&Z'eei(Z)eei*Z+eei,Z-eei.Z/d?e fd@YZ0dAe&i1fdBYZ2e ddCZ3dDZ4dEZ5dFZ6dGZ7dHZ8dIZ9e e e ddJZ:dKZ;edjo e:neoe;endS(Li(t generatorsNs1.2.0.2tHOMEs.scapy_startup.pycCsdGHtiddS(Ns\Usage: scapy.py [-s sessionfile] [-c new_startup_file] [-C] -C: do not read startup filei(tsystexit(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytusage#stScapy_ExceptioncBseZRS((t__name__t __module__(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR-stScapyFreqFiltercBseZdZdZRS(cCstii|h|_dS(N(tloggingtFiltert__init__t warning_table(tself((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 3sc Csti}|djoti}d}x2|D]*\}}}}|djoPn|}q/W|ii|d\} } ti} | | |jo| } d} nA| djo/| d7} | djod|i|_qndS| | f|i| /dev/nulliis@Failed to execute tcpdump. Check it is installed and in the PATH(tARC4s:Can't find Crypto python lib. Won't be able to decrypt WEPs255.255.255.255cCs&|djodSnti|SdS(Ns255.255.255.255sis(tsockett inet_aton(tx((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR5s sCinet_ntop/pton functions not found. Python IPv6 support not presenti/cCs3|o|ddjod|}n|idS(Nit 0123456789tn_t________________________________________________0123456789_______ABCDEFGHIJKLMNOPQRSTUVWXYZ______abcdefghijklmnopqrstuvwxyz_____________________________________________________________________________________________________________________________________(t translate(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytfixnamestDADict_ExceptioncBseZRS((RR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR<stDADictcBseZddZdZdZdZdZdZdZdZ d d Z d Z d Z d Z dZdZdZRS(R=cKs||_|ii|dS(N(t_namet__dict__tupdate(R R>tkargs((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s cCs t|S(N(R;(R tval((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR;scCs ||ijS(N(R?(R RB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt __contains__scCs t||S(N(tgetattr(R tattr((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt __getitem__scCst||i||S(N(tsetattrR;(R RERB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt __setitem__scCs+ttdtd|iiS(NcSs|\}}|S(((t.0R6ty((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytscSs!|\}}|o|ddjS(it_((RIR6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKs(titertmapR"R?titems(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__iter__scCsRxK|iiD]:}|o-|ddjod|t||fGHqqWdS(NiRLs %10s = %r(R?tkeysRD(R tk((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_showscCs/d|iditd|iifS(Ns<%s/ %s>t cSs|o|ddjS(iRL((R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKs(R>tjoinR"R?RQ(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__repr__sicCsH|o0|i|jo td|i|ifn|||iR<(R tbrtuniq((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_branchs cOs^|o|i|jotSnx8|D]0}||jp||||jotSq&q&WtS(N(R>tFalsetTrue(R targsRARR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_my_finds" cOs|id||S(N((t _recurs_find(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_findscOs||jodSn|i||o|SnxS|D]K}t|to5|i||f||}|dj o|Sqq7q7WdS(N(RR]t isinstanceR=R^(R tpathR\RAtotp((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR^s  cOs|id||S(N((t_recurs_find_all(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt _find_all scOsg}||jo|Sn|i||o|i|nxH|D]@}t|to*|i||f||}||7}qFqFW|S(N(R]tappendR`R=Rd(R RaR\RAtrRbRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRds cCstd|iiS(NcSs|o|ddjS(iRL((R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKs(R"R?RQ(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRQs(RRR R;RCRFRHRPRSRVRYR]R_R^ReRdRQ(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR=s             tisiiiiiiii'iiiiiiii3i8iiii i@iiiiiipBi@c Cs0tid}td|}yxt|D]}y|id}|djo|| }n|i}|pw.ntti||}t|djp |d ow.nt |d||dt#iiis(Couldn't parse file [%s]: line [%r] (%s)sCan't open /etc/protocols file(tretcompileR=topentfindtstripttupletsplittlentintt Exceptiont log_loadingtinfotIOError(tfilenametspacestdctRtshrptltte((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytload_protocolsis*   's/etc/protocolsc Cs8tid}td|}yt|}x|D]}y|id}|djo|| }n|i}|pw4ntti||}t|djp |d ow4nt |dd||dRiiiiis(Couldn't parse file [%s]: line [%r] (%s)(RjRkR=RlRmRnRoRpRqRrRsRtRutcloseRv( RwRxRyRRRzR{R|R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytload_ethertypess.   #s/etc/ethertypesc Cstid}tdd|}tdd|}y]t|}x@|D]8}y|id}|djo|| }n|i}|pwKntti||}t|djp |d owKn|di d o)t |did d||d|di d o)t |did d||ds%s-tcps%s-udpRiiiis/tcpt/s/udps"Couldn't file [%s]: line [%r] (%s)sCan't open /etc/services file(RjRkR=RlRmRnRoRpRqtendswithRrRsRtRR~RvRu( RwRxttdcttudctRRRzR{R|((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt load_servicess6   )-#s /etc/servicestManufDAcBs5eZdZdZdZdZdZRS(cCs|S(N((R RB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR;scCs;di|idd i}|ii|||fS(Nt:i(RURptupperR?R(R tmactoui((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_get_manuf_couples"cCs|i|dS(Ni(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt _get_manufscCs|i|dS(Ni(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_get_short_manufscCs`di|idd i}||jo-di||dg|iddSn|S(NRii(RURpR(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt _resolve_MACs" -(RRR;RRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs     c Csytd|}xt|D]}y|i}| p|idown|id \}}|id}|djo |}n||d}||f||Riiis+Couldn't parse one line from [%s] [%r] (%s)( RRlRnt startswithRpRmRsRtRRv(RwtmanufdbRRtshrttitlngR|((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt load_manufs&    's$/usr/share/wireshark/wireshark/manufcCsed}xX|D]P}t|}|djp |djo|tiid}q ||}q W|S(Nti it.(tordRt color_themet not_printable(R6RgRtj((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt sane_colors cCsYd}xL|D]D}t|}|djp |djo|d}q ||}q W|S(NRi iR(R(R6RgRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytsanes cCst|ttfjot|Sngt|tjodditt|Sn6t|tjodditt|Sn|SdS(Ns(%s)s, s[%s]( ttypeRrtlongthexRoRURNtlhextlist(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCst|}t|}d}x||jod|Gx\tdD]N}|||jodt|||GndG|ddjodGqCqCWdGt|||d!GH|d7}q!WdS( Nis%04x is%02Xs iRRT(tstrRqtrangeRR(R6RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pythexdump s    cCsjt|}t|}|p1x&t|D]}dt||Gq,WdGn|pt|GHndS(Ns%02XR(RRqRRR(R6tonlyasctonlyhexRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt linehexdumps   cCs*t|}ditd|GHdS(Ns, cSsdt|S(s%#04x(R(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK&s(RRURN(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytchexdump$s cCs^g}|p&|iditd|n|p|it|ndi|S(NRTcSsdt|S(s%02x(R(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK+ss (RfRURNR(R6RRts((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pythexstr(s &cCst|ddd}t|ddd}d}d}h}ddf|d\scssx|]}t|VqWdS(N(Rq(RIRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pys ]ss%04xs RTRs%02Xs i(ii(ii( RRRqtminRfRRtlefttrighttsumRRR(R6RJtSUBSTtINSERTtdRRt backtrackxt backtrackyti2tj2tcolorizetdoxtdoyRtseparatetlinextlineytxxtyytxdtlinetydtcltcol((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pythexdiff1s::F)A!                cCslt|ddjo|d7}nttid|}|d?|d@}||d?7}|}|d@S(NiiRhR/ii(RqRtarray(tpktR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytchecksumscCs|t|ddjo|d7}nttid|}|d?|d@}||d?7}|}|d?d@|d>Bd@S( NiiRhR/iiii(RqRR(RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsti|dS(N(t log_runtimeR(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs"ditd|idS(NRcSstt|dS(i(tchrRr(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKsR(RURNRp(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytmac2strscCsddd ttt|S(Ns%02x:ii(RoRNR(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytstr2macscCsditd||S(NRcSstt|t|AS((RR(R6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKs(RURN(R6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytstrxorscCsRyt|}Wn+tij otti|}nXtid|dS(Ns!Ii(R5R4terrort gethostbynametstructtunpack(R6tip((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytatols cCsttid|S(Ns!I(t inet_ntoaRtpack(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytltoascCs d|?d@S(Nll((R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytitomstsvgc Cs|o|Sn|dj o |}n|djotii}n|djodtii}n|dj od|}ntid||pd|pd|f\}}|i||idS(sdo_graph(graph, prog=conf.prog.dot, format="svg", target="| conf.prog.display", options=None, [string=1]): string: if not None, simply return the graph string graph: GraphViz graph description format: output type (svg, ps, gif, jpg, etc.), passed to dot's "-T" option target: filename or redirect. Defaults pipe to Imagemagick's display program prog: which graphviz program to use options: options to be passed to progs| %ss-T %ss %s %s %s %sRN( RRtprogtdottdisplaytostpopen2twriteR~( tgraphRtformatttargetRtstringtoptionstwRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytdo_graphs      3 s {\tt\char123}t{s {\tt\char125}t}s {\tt\char92}s\s\^{}t^s\$t$s\#Ris\~t~s\_RLs\&t&s\%t%s {\tt\char124}t|s {\tt\char126}s {\tt\char60}tcCs1d}x$|D]}|ti||7}q W|S(NR(t_TEX_TRR(R6RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt tex_escapes c os t|djo|d9}n|idd}xxtt|D]}xtt|D]}xtt|D]x}||jp||jp ||joK||||t||||t||||t|Vq~q~WqeWqLWq9dS(sReturns a generator that mixes provided quantities forever trans: a function to convert the three arguments into a color. lambda x,y,z:(x,y,z) by defaultittranscSs |||fS(((R6RJtz((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKsN(RqRR(tlstcolRARRRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytcolgens'stag%05iccs&xto||V|d7}qWdS(Ni(R[(tlabeltstart((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytincremental_labels  t EnumElementcBs;eZdZdZdZdZdZdZRS(cCs||_||_dS(N(t_keyt_value(R tkeytvalue((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s cCs,d|iid|ii|i|ifS(Ns <%s %s[%r]>R>(R?Rt __class__RRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVscCst|i|S(N(RDR(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt __getattr__scCs|iS(N(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__str__scCs|it|jS(N(RRr(R tother((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__eq__sN( RRRRR RVRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs     tEnum_metaclasscBs>eZeZdZdZdZddZdZ RS(cCsh}xW|iD]I\}}t|tjo*|i||}|||<|||R(R?RR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRV1sN( RRRRRRFRCRRRV(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s    c Cs |djo t}n|i}|ido |d=nxi|iD][}t||tititi gjo,t i d|t||f||=qKqKWyt i ||dWntj onXti|d}ti||||idS(Nt __builtins__s[%s] (%s) can't be saved.s.baktwb(Rt scapy_sessiontcopythas_keyRQRttypestTypeTypet ClassTypet ModuleTypetlog_interactiveRRtrenametOSErrortgzipRltcPickletdumpR~(tfnametsessiont pickleProtot to_be_savedRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt save_session<s"     )!cCshytiti|d}Wn+tj otit|d}nXtiti|dS(Ntrb(RtloadRRlRvRtclearR@(RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt load_sessionRs  cCs^ytiti|d}Wn+tj otit|d}nXti|dS(NR (RR!RRlRvRR@(RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytupdate_sessionZs cCs-titiiti|ddGHdS(Nii (tbase64t encodestringRtzlibtcompressRtdumps(tobj((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt export_objectbscCsH|djotii}ntitiit i |i S(N( RRtstdintreadRtloadsRR't decompressR%t decodestringRn(R*((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt import_objectes cCs ti|ti|ddS(NR (RRRRl(RR*((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt save_objectkscCstiti|dS(NR (RR!RRl(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt load_objectnsc Csddk}ti}t|tj o |g}ntiitii|}tii |}tii |}|i do|d }n|i d|d}}zti}ti|ti}ti|7_y|i||}Wn$tj otid|n3X|i||} ddk} | ii| iWd|o |t_n|oti|nXdS(Nis.pyiis4Module [%s] not found. Check conf.extensions_paths ?(timpRtextensions_pathsRRRRatrealpatht expandusertdirnametbasenameRtinsertRtgetcwdtchdirRt find_modulet ImportErrorRRt load_modulet __builtin__R?R@( RwR4tpathsRtthepathtthenametcwdtsyspathtextftextR@((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytload_extensionws6         tdebugcBseZgZgZgZRS((RRtrecvtsenttmatch(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRIstIPToolscBs)eZdZdZdZdZRS(s7Add more powers to a class that have a "src" attribute.cCstid|idS(Nswhois %s(Rtsystemtsrc(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytwhoisscCs>ddddg|ig}|i||i|idS(Ni i@iii(tttltsorttindex(R tt((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytottls cCs|i|idS(Ni(RURQ(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pythopss(RRt__doc__RPRURV(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRMs  tRoutecBseZdZdZdZdZd d d d dZdZdZ dZ dZ d Z d d Z d ZRS( cCs2|itititi|_h|_dS(N(tresyncR4tAF_INETt SOCK_DGRAMRtcache(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s cCs h|_dS(N(R\(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytinvalidate_cachescCs|it|_dS(N(R]t read_routestroutes(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRYs cCsVd}xI|iD]>\}}}}}|dt|t||||f7}qW|S(NsJNetwork Netmask Gateway Iface Output IP s%-15s %-15s %-15s %-15s %-15s (R_R(R trttnettmsktgwtifacetaddr((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVs  c Cs|dj o|d}}n?|dj o%|id\}}t|}n td|djo d}n|djo3|o |}n|}|i|\}}} n t|}t|t||||fS(Ni RsDmake_route: Incorrect parameters. You should specify a host or a nets0.0.0.0(RRpRrRtroutet get_if_addrRR( R thostRaRctdevtthenetRbtnhoptifaddrR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt make_routes        cOs*|i|ii|i||dS(s;Ex: add(net="192.168.1.0/24",gw="1.2.3.4") N(R]R_RfRm(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytadds cOs`|i|i||}y |ii|}|i|=Wntj otdnXdS(sdelt(host|net, gw|dev)sno matching route foundN(R]RmR_RSt ValueErrorR(R R\RARfR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytdelts c Cs |i|iddgd \}}tt|}t|}||@}xtt|iD]}|i|\}} } } }| |joqhn| djo ||| | |f|i|s  N(RRR R]RYRVRRmRnRpRxRzR{RfR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRXs        #cCsl|d djoddfSny#tii|}|d}Wntd|nX|i|ifS( NiRiRhit link_addrs8Error in attempting to get hw address for interface [%s]t(tdnettintfRRRtdata(RsR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytget_if_raw_hwaddrFscCs ti}|i|diS(NRe(RRRR(tifnameR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytget_if_raw_addrOs cCstidt|tS(Nt16xh6s8x(RRtget_ift SIOCGIFHWADDR(Rs((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRSscCs6yt|tdd!SWntj o dSnXdS(Niit(Rt SIOCGIFADDRRv(Rs((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVscCs"tdtdtiS(NcSs|dS(i((R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK`scSs|ddjS(iN(R(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK`s(RNR"tpcapt findalldevs(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt get_if_list^scCs,ytiSWntj o dSnXdS(NR(Rt lookupdevRs(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytget_working_ifascCstddS(Ns1attach_filter() should not be called in PCAP mode(R(RR"((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt attach_filtergscCstddS(Ns4set_promisc() should not be called in DNET/PCAP mode(R(RRsRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt set_promisciscCs^tdd}g}|i|ix.|D]&}|i|iddiq0W|S(Ns /proc/net/devRgRi(RltreadlineRfRpRn(RtlstR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRms  $cCs^xWtD]L}|djoq ntidt|td}|t@o|Sq q WdS(NRt16xH14xi(RRRRt SIOCGIFFLAGStIFF_UP(Rtifflags((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRus    c Cs:tpdSny)tidtiiti|f}Wn&tj o}ti ddSnX|i }|i ot dnt |d}d}x7|dD]+}|tidtt|i7}qWto#tid|t|d }n tid |t|d }|itt|dS( Ns%s -i %s -ddd -s 1600 '%s'sFailed to execute tcpdump: (%s)sFilter parse erroriRitHBBItHLi$tHIi(tTCPDUMPRtpopenRRttcpdumpRdRRRt readlinesR~RRrRRRNRRptX86_64tidt setsockoptt SOL_SOCKETtSO_ATTACH_FILTER( RR"RRtlinesR tbpfRtbpfh((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR}s&)     )#cCsOtidt|tdd}|o t}nt}|it||dS(NtIHH8siR(RRt get_if_indextPACKET_MR_PROMISCtPACKET_ADD_MEMBERSHIPtPACKET_DROP_MEMBERSHIPRt SOL_PACKET(RRsRBtmreqtcmd((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs ! cCs0g}d}ti}|i||GH|S(NcSs|\}}|i|dS(N(Rf(R`RRRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytaddrts (RRftloop(trtlstRRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytnew_read_routess   c Cstotid}n*totid}ntid}d}t}g}x=|iD]/}|pPn|i}|iddjoqbn|iddjo-d}|iddjo t}qbqbn|djoqbn|pPnto,|i d \}}}}} } } } nS|o)|i d \}}} } } }}n#|i d \}}} } } }| id djoqbn|d jod}d}ntot |}nVd|jo+|i d\}}t t |}nt |i ddd }|dd|i d7}t |}d| jo d}nt|}|i|||||fqbW|i|S(Ns netstat -rvns netstat -rnWs netstat -rnis----t DestinationitMtuiiitLctdefaultlRRs.0itGs0.0.0.0(tSOLARISRRtFREEBSDRZRRnRmR[RpRRRrtcountRgRfR~(Rtokt mtu_presentR_RRtmaskRctnetiftmxfrgtrtttreftflgtusetmtutnetmaskRl((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR^s`    ,)"         cCs/ti}h}d}|i|||S(NcSs|idpdSn|idpdSn|di}t|}|di}t|}||||f||d|jo|d7}q,Wtd|dd} d| d} t|d} d} x| djp|o7g} t|D]}| |id| q~ }n| d7} d}x|d|jo}|}|d7}xLt| D]>}|| @}|| L}||||N}|||| >O}qW||jo ||VqqW|pPqqdS(s*iterate through a sequence in random order. When all the values have been drawn, if forever=1, the drawing is done again. If renewkeys=0, the draw will be in the same order, guaranteeing that the same number will be drawn in not less than the number of integers of the sequenceiiiiiN(trandomtRandomRtmaxtxrangetrandintR(tinftsuptseedtforevert renewkeystrndt sbox_sizettopRtfstfsmasktroundstturnst_[1]RRtsboxRtcttlsb((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytrandseqzs87      t VolatileValuecBs#eZdZdZdZRS(cCsd|iiS(Ns<%s>(RR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVscCs0|djot|nt|i|S(Nt __setstate__(tAttributeErrorRDt_fix(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cCsdS(N(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRRVRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  t RandFieldcBseZRS((RR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstRandNumcBs&eZdZdZdZdZRS(icCst|||_dS(N(Rtseq(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs |iiS(N(Rtnext(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRRRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs t RandNumGammacBseZdZdZRS(cCs||_||_dS(N(talphatbeta(R R"R#((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s cCs"ttti|i|iS(N(RrtroundRt gammavariateR"R#(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s t RandNumGausscBseZdZdZRS(cCs||_||_dS(N(tmutsigma(R R'R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s cCs"ttti|i|iS(N(RrR$RtgaussR'R((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR&s t RandNumExpocBseZdZdZRS(cCs ||_dS(N(tlambd(R R+((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsttti|iS(N(RrR$Rt expovariateR+(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR*s tRandBytecBseZdZRS(cCsti|dddS(Niliill(RR (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR-st RandShortcBseZdZRS(cCsti|dddS(Niliill(RR (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR.stRandIntcBseZdZRS(cCsti|dddS(Nili ill(RR (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR/stRandSIntcBseZdZRS(cCsti|dddS(Nliillll(RR (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR0stRandLongcBseZdZRS(cCsti|dddS(Nili@ill(RR (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR1st RandSLongcBseZdZRS(cCsti|dddS(Nli?illll(RR (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR2st RandChoicecBseZdZdZRS(cGs$|ptdn||_dS(Ns$RandChoice needs at least one choice(t TypeErrort_choice(R R\((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsti|iS(N(RtchoiceR5(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR3s t RandStringcBseZddZdZRS(t>ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789cCs||_||_dS(N(tcharstsize(R R:R9((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s cCs:d}x-t|iD]}|ti|i7}qW|S(NR(RR:RR6R9(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs (RRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR7s tRandBincBseZdZRS(cCs/ti||ditttddS(NRi(R7R RURNRR(R R:((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR;stRandTermStringcBseZdZdZRS(c Cs;ti||ditttdd||_dS(NRii(R7R RURNRRtterm(R R:R=((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s.cCsti||iS(N(R7RR=(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR<s tRandIPcBseZddZdZRS(s 0.0.0.0/0cCst||_dS(N(tNetR(R t iptemplate((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs |iiS(N(RR6(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR>s tRandMACcBseZddZdZRS(R|cCs|d7}|id}d|_xtdD]}||djo t}ncd||jo>||id\}}tt|dt|d}nt||d}|i|f7_q/WdS(Ns :*:*:*:*:*RiR|R~i((RpRRR-RRr(R ttemplateRR R6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s    %cCs d|iS(Ns%02x:%02x:%02x:%02x:%02x:%02x(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRA s tRandOIDcBs8eZdededdZdZdZRS(g?g{Gz?cCs||_|dj ok|id}xYtt|D]A}d||jo*ttt||id||s <%s [%s]>(RDRRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRV'scCs6|idjoEdittg}td|iD]}||iq4~Sng}x|iD]}|djo|it|iqe|djoB|ttg}td|iD]}||iq~7}qet |t jo |itt i |qe|i|qeWdi|SdS(NRiR|s**( RERRURNRRRFRGRfRRoRt randrange(R RRtoidt_[2]((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR,sE   B N(RRRR*R RVR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRCs tRandASN1ObjectcBs eZddZddZRS(cCsN|djo+tdtdtii}n||_d|_dS(NcSs|iS((t _asn1_obj(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKAscSs t|dS(RL(thasattr(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKBsR8(RRNR"tASN1_Class_UNIVERSALRtvaluestobjlistR9(R RP((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR ?s   " ics7ti|i}t|to |ttiddSnt|to]ttidd}|di g}t |D]}|ti|i q~Snmt|t o\djoOttidd}|t fd|id |ig|SntttiddS( Niig?iRi g{Gz?cs|idS(i(R(R6(R(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKNsRP(RR6RPt issubclasst ASN1_INTEGERRrR)t ASN1_STRINGR,RURR9t ASN1_SEQUENCERNR(R RRbRRR((RsB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyREs D6N(RRRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK>s tRandDHCPOptionscBs eZdddZdZRS(cCs|djotd}n||_|djottdd}n||_ti|_|ii d|ii ddS(Ng?iitpadtend( RR*R:R;Rtrndstrt DHCPOptionsROt_optstremove(R R:RX((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR Rs    cCsg}x|t|iD]k}ti|i}t|tjo|i||idfq|i|i |i i fqW|S(Ni( RR:RR6RZRRRfRXRtrandvalR(R RRRRb((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\s&N(RRRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRUQs tAutoTimecBseZddZdZRS(cCs1|djo d|_nti||_dS(Ni(RtdiffR(R tbase((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR js  cCsti|iS(N(RR^(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRosN(RRRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR]is t IntAutoTimecBseZdZRS(cCstti|iS(N(RrRR^(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRss(RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR`rstZuluTimecBseZddZdZRS(cCs ||_dS(N(R^(R R^((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR xscCs&tidtiti|iS(Ns %y%m%d%H%M%SZ(RtstrftimetgmtimeR^(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRzsN(RRRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRaws t DelayedEvalcBs eZdZdZdZRS(s. Exemple of usage: DelayedEval("time.time()") cCs ||_dS(N(texpr(R Re((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs t|iS(N(tevalRe(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRRWR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRd~s tIncrementalValuecBs#eZddddZdZRS(iiicCs&||_|_||_||_dS(N(RRBtsteptrestart(R RRhRi((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s cCsB|i}|i|ijo|i|_n|i|i7_|S(N(RBRiRRh(R R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  (RRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRgsg{Gz?cCstidt|}t|}|djotdt||}nx6tit||D]}ti dd||NR(R?RRRRB(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVHscCs|itiS(N(RRtASN1_default_codec(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJsicCsd|t|dS(Ns s (trepr(R tlvl((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytstrshowLscCs|i|GHdS(N(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytshowNscCs |i|jS(N(RB(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRPscCst|i|S(N(tcmpRB(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__cmp__Rs(RRRRRNRRR RRVRRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRAs        tASN1_DECODING_ERRORcBs/eZeiZddZdZdZRS(cCsti||||_dS(N(RR texc(R RBR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR WscCs3d|iid|ii|i|iidfS(Ns<%s[%r]{{%s}}>Ri(R?RRRRBRR\(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVZscCs.t|ito|ii|Sn|iS(N(R`RBRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR]sN( RRRNRRRR RVR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRUs   t ASN1_forcecBseZeiZdZRS(cCs.t|ito|ii|Sn|iS(N(R`RBRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRds(RRRNRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRbs t ASN1_BADTAGcBseZRS((RR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRisRRcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRRlsRScBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRSostASN1_BIT_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRrstASN1_PRINTABLE_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRustASN1_T61_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRxstASN1_IA5_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{stASN1_NUMERIC_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR~stASN1_VIDEOTEX_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRst ASN1_UTC_TIMEcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstASN1_TIME_TICKScBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRst ASN1_BOOLEANcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRst ASN1_NULLcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstASN1_COUNTER32cBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRsRTcBseZeiZddZRS(icCsNd|d|iid}x+|iD] }||id|d7}q&W|S(Ns s# %s:s Ri(RRRBR(R RRRb((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  (RRRNRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRTs tASN1_SETcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstASN1_OIDcBs#eZeiZdZdZRS(cCs&tii|}ti||dS(N(Rtmibt_oidRR (R RB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs2d|iid|iitii|ifS(Ns<%s[%r]>R(R?RRRRRt_oidnameRB(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVs(RRRNRRR RV(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  t BER_ExceptioncBseZRS((RR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstBER_Decoding_ErrorcBs eZdddZdZRS(cCs&ti||||_||_dS(N(RsR t remainingtdecoded(R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s cCscti|}t|ito|d|ii7}n|d|i7}|d|i7}|S(Ns ### Already decoded ### %ss ### Already decoded ### %rs ### Remaining ### %r(RsRR`RtBERcodec_ObjectRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs N(RRRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstBER_BadTag_Decoding_ErrorcBseZRS((RR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs|djo|djot|Snd}xA|p |djo,t|d@|}|dL}|d8}q1Wt|djo tdt||fntt|dB|S( NiiRilis4BER_len_enc: Length too long (%i) to be encoded [%r]i(RRqR(RR:R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt BER_len_encs  cCst|d}|d@p||dfSn|dM}t||jo*tdt|d|fd|nd}x3|d|d!D] }|dK}|t|O}qW|||dfS( Niiiis,BER_len_dec: Got %i bytes while expecting %iRll(RRqR(RRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt BER_len_decs  * cCsg}xh|p |djoS|id|d@t|djo|dcdO}t||}|dK}||d@O}|d@pPqqW|d@otdd|n|||dfS(Niiiis*BER_num_dec: unfinished number descriptionRi(RRqRR(RR6RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt BER_num_decs    tBERcodec_metaclasscBseZdZRS(cCsctt|i||||}y|ii|i|Wn!td|i|ifnX|S(NsError registering %r for %r(RRRRRRR(RRRRyR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs !(RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRsRcBseZeZeiZeiZ e dZ e dZ e dZ e dZe dZe d edZe d edZe d dZe dZRS( cCs|ii|S(N(RR(RRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs1|p&td|i|ifd|ndS(Ns+%s: Got empty object while expecting tag %rR(RRR(RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt check_stringscCso|i||it|djo@td|it|dt|d|ifd|n|dS(Nis'%s: Got tag [%i/%#x] while expecting %rRi(RRRRR(RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt check_type s  :cCs=|i|}|ptd|id|nt|S(Ns%%s: No bytes while expecting a lengthR(RRRR(RRts2((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytcheck_type_get_lens cCsi|i|\}}t||jo,td|it||fd|n||| ||fS(Ns#%s: Got %i bytes while expecting %iR(RRqRR(RRRts3((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytcheck_type_check_lens &cCs|djo|ii}n|i|t|d}||joK|}t|djo|d d}ntd||fd|n||iti }|i |||S(Niiis...sUnknown prefix [%02x] for [%r]R( RRRyRRRqRRR~RRz(RRRytsafeRcRTR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytdo_dec"s    cCs|p|i|||Sny|i|||SWntj o7}ti|i||\}}t||fSnVtj o}t|d|dfSn,tj o}t|d|dfSnXdS(NRR( RRRRzRRRRRq(RRRyRR|Rbtremain((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRz0scCs|i||dtS(NR(RzR[(RRRy((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{>scCs;t|tjoti|Sntit|SdS(N(RRtBERcodec_STRINGRtBERcodec_INTEGERRr(RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRCsN(RRRRR~RRRNRRt classmethodRRRRRRRZRRzR{R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs    RcBs5eZeiZedZededZ RS(cCsg}x||i|d@d|jo djnoPnd|jo djno|idn|dL}|pPq q tt|}|itt||it|i|idi|S(NiiiiiR(RfRNRRRqRtreverseRU(RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRQs  cCs|i|\}}}d}|oNt|dd@o d}nx,|D] }|dK}|t|O}qKWn|i||fS(Nliili(RRR(RRRyRRRTR6R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRbs  N( RRRNRRRRRRZR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyROs tBERcodec_BOOLEANcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRost BERcodec_NULLcBs eZeiZedZRS(cCs<|djot|idSnt||i|SdS(NiRh(RRRR(RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRts (RRRNRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRrs RcBs5eZeiZedZededZ RS(cCs!t|itt||S(N(RRRRq(RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR}scCs.|i|\}}}|ii||fS(N(RRR(RRRyRRRT((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRsN( RRRNRRRRRRZR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{s tBERcodec_BIT_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstBERcodec_PRINTABLE_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstBERcodec_T61_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstBERcodec_IA5_STRINGcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstBERcodec_UTC_TIMEcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstBERcodec_TIME_TICKScBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstBERcodec_COUNTER32cBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstBERcodec_SEQUENCEcBs5eZeiZedZededZ RS(csYt|tj o%ditfd|}ntitt||S(NRcs|iiS((RR(R6(R(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKs(RRRURNRRRRq(RR((RsB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs%c Cs|djo|ii}n|i|\}}|| ||}}g}x|oyti|||\}}WnTtj oH} | i|7_| idj o|i | in|| _nX|i |qPWt ||jotdd|n|i ||fS(Ns#Not enough bytes to decode sequenceR( RRRyRRRzRRRRfRqR( RRRyRRtstRTR*Rbterr((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs$   N( RRRNRRRRRRZR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs t BERcodec_SETcBseZeiZRS((RRRNRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRst BERcodec_OIDcBs5eZeiZedZededZ RS(cCsg}|ididD]}|t|q~}t|djo#|dcd|d7<|d=ndig}|D]}|t|q~}t|itt||S(NRiii(iR( RnRpRrRqRURRRR(RRIRR6RRJRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs 9 0c Cs|i|\}}}g}x+|o#t|\}}|i|q!Wt|djo,|id|dd|dcd; "%s" [label="%s"]; s} (RQRftoidnameRR( R t other_keysRARRRtnodesRJtoidsRRbtparentR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt _make_graphs(1+ !     (RRRRRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  c Cs||jp ||jo||jSng}d}x|D]}ti|o|i|q;t|}||jo d}n||jo||}n||jo||}nt|tjo||7}q;|i|q;W|o|||tMIB(RRRQR RpRRR'RlR-RUt_mib_re_stringst_mib_re_commentst_mib_re_oiddecltfinditertgroupsR;RRqt _mib_re_bothRLRR(t filenamesRRRRtfnamesRRttextt cleantextRR RIRtnewmibRb((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytload_mib1 sB'    *    tGencBseZdZRS(cCs tgS(N(RM(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRPW s(RRRP(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!V stSetGencBs/eZddZdZdZdZRS(icCs\||_t|tjo ||_n0t|tot||_n |g|_dS(N(t _iterpacketRRtsetR`t PacketList(R R$R#((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR [ s   cCs|S(N((R telement((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyttransfc sccsx|iD]}t|tjot|djo}t|dtjoft|dtjoO|d|djo6|d}x)||djo|V|d7}qWqq t|to5|ipt|t ox|D] }|VqWq |Vq WdS(Niii( R$RRoRqRrR`R!R#tPacket(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRPe s T + cCsd|iiS(Ns (R$RV(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVr s(RRR R'RPRV(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"Z s   R?cBsGeZdZdZeidZdZdZdZ dZ RS(s7Generate a list of IPs from a network address or a nameRs^(\*|[0-2]?[0-9]?[0-9](-[0-2]?[0-9]?[0-9])?)\.(\*|[0-2]?[0-9]?[0-9](-[0-2]?[0-9]?[0-9])?)\.(\*|[0-2]?[0-9]?[0-9](-[0-2]?[0-9]?[0-9])?)\.(\*|[0-2]?[0-9]?[0-9](-[0-2]?[0-9]?[0-9])?)(/[0-3]?[0-9])?$c s||_|iddg}|ii|pti|d|d@t||dd|?Bdf}n1t|d|>@t|dd|?Bdf}|S( NiiR|iR~li(ii(RRRmRNRrRp(RRR6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt parse_digit s    10cs ||S(((R6RJ(R)(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK sRcSs||S(((R6tnm((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK siiii (iiii ( RRpt ipaddressRLR4RRrRNtparsed(R RaRR((R)sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR y s  c csxt|idD]u}xlt|idD]W}xNt|idD]9}x0t|idD]}d||||fVqbWqHWq.WqWdS(Niiiis %i.%i.%i.%i(RR,(R RRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRP scCsRg}x<|iD]1}|itti|d|ddqWdi|S(NiiR(R,RfRRRRU(R RR ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR6 s  /cCs d|iS(NsNet(%r)(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRV s( RRRWRRjRkR+R RPR6RV(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR?u s   RcBs)eZdZdZdZdZRS(RcCs||_g|_g}xj|idD]Y}d|jo9|id|iittt|idq(|i|q(Wdi||_dS(NRR~s%i( RItcmptRpRfRoRNRrRURE(R RIRER((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s    ,cCs d|iS(NsOID(%r)(RI(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRV sccsg}|iD]}||dq~}x|it|Vd}xp|t|jo tn|||i|djo||cd7q>W|p|d7}q+q+Wd}ti}xJ|iD]?}|d|i|i |i d|i ||f7}qW|d|id|i d|i |f7}d|i d |i |i |i d||i d fS( NcSs |dfS(i((R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK siiRs %s%s%sRtOthers %s%s%s%s%sRR(tdictRNR3RR6thaslayerRRtpacketlist_protoRtpuncttpacketlist_valuetpacketlist_nameR4(R R3RRgRRcRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRV s8       cCst|i|S(N(RDR(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scsttoOtto?itfdiddiifSntt jo*iii ddiSnii S(Ncsi|jS((R6(R6(R titem(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK sRs %s from %ssmod %s( R`RRQR(RR"RRR4tsliceRF(R RA((R RAsB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRF s $cOs)|i|ii||dd|iS(NRsmod %s(RRt __getslice__R4(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRC scCs-|i|i|idd|i|ifS(NRs%s+%s(RRR4(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__add__ scCsgx`|iD]U}|dj o||pq q5n|djo|i|GHq ||GHq WdS(sprints a summary of each packet prn: function to apply to each packet instead of lambda x:x.summary() lfilter: truth function to apply to each packet to decide whether it will be displayedN(RRR8(R tprntlfilterRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR7 s     cCsxtt|iD]}}|dj o||i|pqqHntii|dG|djo|i|i|GHq||i|GHqWdS(sprints a summary of each packet with the packet's number prn: function to apply to each packet instead of lambda x:x.summary() lfilter: truth function to apply to each packet to decide whether it will be displayeds%04iN(RRqRRRRRR8(R RERFR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytnsummary s   cCs|idS(sdeprecated. is show()N(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scOs|i||S(sBBest way to display the packet list. Defaults to nsummary() method(RG(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs&|it||idd|iS(s2Returns a packet list filtered by a truth functionRs filtered %s(RR"RR4(R tfunc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"" scOst|i||S(sPrints a table using a function that returs for each packet its head column value, head row value and displayed value ex: p.make_table(lambda x:(x[IP].dst, x[TCP].dport, x[TCP].sprintf("%flags%")) (t make_tableR(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRI& scOst|i||S(s0Same as make_table, but print a table with lines(tmake_lined_tableR(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ* scOst|i||S(s7Same as make_table, but print a table with LaTeX syntax(tmake_tex_tableR(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK- scKsati}|i}|dj ot||}nt||}|iti|||S(sApplies a function to each packet to get a value that will be plotted with GnuPlot. A gnuplot object is returned lfilter: a truth function that decides whether a packet must be plotedN(tGnuplotRRR"RNtplottData(R RRFRAtgR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRM1 s   icKsmti}|i}|dj ot||}nt||| ||}|iti|||S(sZdiffplot(f, delay=1, lfilter=None) Applies a function to couples (l[i],l[i+delay])N(RLRRR"RNRMRN(R RtdelayRFRAROR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytdiffplot< s   c Ksti}|i}|dj ot||}nh}xO|D]G}||\}} ||jo||i| qB| g|| "%s" s} N(RRR6RR( R t getsrcdstRAtconvRcRtgrRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt conversations s"     c s|djo d}n|djo d}n|djo d}nh}h}h}x:|iD]/}y||||||} } } | |joL|| \} } | d7} | | jo| i| n| | f|| event -> dst and the data are graphed. by default we have IP.src -> IP.dport -> IP.dstcSs |tiS((R\RO(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK scSs |tiS((R\tdport(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK scSs |tiS((R\R(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK siiiNcsdi|dS(Nig@(tlog(R(tmath(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt normalize scSsQt|t|}}||jo d}n|djo d}n||fS(Nii(RR(R6RtM((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytminmax s     cSs|\}}|S(((RIR6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK scSs|\}}|S(((RIR6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK ss'digraph "afterglow" { edge [len=2.5]; s # src nodes sl"src.%s" [label = "%s", shape=box, fillcolor="#FF0000", style=filled, fixedsize=1, height=%.2f,width=%.2f]; s# event nodes sp"evt.%s" [label = "%s", shape=circle, fillcolor="#00FFFF", style=filled, fixedsize=1, height=%.2f, width=%.2f]; sr"dst.%s" [label = "%s", shape=triangle, fillcolor="#0000ff", style=filled, fixedsize=1, height=%.2f, width=%.2f]; s### s "src.%s" -> "evt.%s"; s "evt.%s" -> "dst.%s"; Rs/tmp/azeR( RRRfRRcRNROtfloatRlRR(R ROteventRRAtslteltdlRRR|RRRRdRftminstmaxstminetmaxetmindtmaxdR_((RcsB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt afterglow s       &         $$ ,  0 *   c stfdi}tfd|}gxd|D]\}|iti}xA|D]9}|ddjo"i|i|ddfq_q_Wq@WptddSntfd}t i } | i t i ||| S( sOTries to graph the timeskew between the timestamps and real time for a given ipcs i|S((R6(R6(R (sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK scs6|ito&|itijo |itS((R<R\RWROR0(R6(R(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK sit Timestampis"No timestamps found in packet listNcs:|\}}|d|dd|dddfS(iiig@@((RIR6RJ(R(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK s( RNRR"RWR0RRfRRRLRMRN( R RRARRRctoptsRbRRO((RRR sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyttimeskew_graph s"*  c Kstii}t|i}xtt|iD]}|i|}|i|i|}|i}|i|i |i dd||ftii i gt idjotiddn|itii|dtiiiddtiiddq4W|S(Nis+\font\cmssfont=cmss12\cmssfont{Frame %i/%i}iRt paperformattmargint fittosize(tpyxtdocumentRqRRR6t canvas_dumptbboxRRRR:tLARGERRRRRftpageRvtA4tunittt_cm(R RARRRR5Rtcbb((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_dump_document s  <$cKsl|i|}|djo>dti}|i|tidtii|fn|i|HdS(sCreates a multipage poscript file with a psdump of every packet filename: name of the file to write to. If empty, a temporary file is used and conf.prog.psreader is calleds/tmp/scapy.psd.%is %s %s.ps &N( RRRtgetpidt writePSfileRNRRtpsreader(R RwRAR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytpsdump# s  ! cKsl|i|}|djo>dti}|i|tidtii|fn|i|HdS(sCreates a PDF file with a psdump of every packet filename: name of the file to write to. If empty, a temporary file is used and conf.prog.pdfreader is calleds/tmp/scapy.psd.%is %s %s.pdf &N( RRRRt writePDFfileRNRRt pdfreader(R RwRAR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytpdfdump0 s  ! icCs|i}g}d}x|t|jo||}|}x|t|djo|d7}||}|i|oX|i||f|o!d||_d||_q?n||=||=|d8}Pq?q?W|d7}qW|otd|}nt|t|fS(ssr([multi=1]) -> (SndRcvList, PacketList) Matches packets in the list and return ( (matched couples), (unmatched packets) )iiicSst|d S(t _answered(RM(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKU s(RRqtanswersRfRR"t SndRcvListR%(R tmultiRtsrRRRRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR= s.        N($RRRRR R6R8R9RVRRFRCRDR7RGRRR"RIRJRKRMRQRSRTRXRRZR[R`RrRuRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR% sB                    R   tDot11PacketListcBs#eZddddZdZRS(t Dot11ListcCs@|djotttttg}nti||||dS(N(RtDot11WEPt Dot11BeaconR1R2R0R%R (R RRR3((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR ^ s cCstdtd|i}g}xA|D]9}|i}|i|it|iiiq.Wt|dd|i S(NcSs |itS((RWtDot11(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKd scSs|ito |idjS(i(R<RR(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKd sRs Ether from %s( RNR"RRtunwepRfRRR%R4(R Rtr2Rctq((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt toEthernetc s!  !N(RRRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR] sRcBs,eZddddZdZdZRS(tResultscCsti||||dS(N(R%R (R RRR3((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR o scCs|dS(Ni((R R5((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR6q scCs"d|di|difS(Ns %s ==> %sii(R7(R R5((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR8s sN(RRRR R6R8(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRn s t ARPingResultcBs#eZddddZdZRS(tARPingcCsti||||dS(N(R%R (R RRR3((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR x scCs,x%|iD]\}}|idGHq WdS(Ns%Ether.src% %ARP.psrc%(RRU(R RRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{ s N(RRRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRw st AS_resolvercBsSeZdZdZddddZdZdZdZdZ dZ RS( s-ki+cCsA|dj o ||_n||_|dj o ||_ndS(N(RtservertportR(R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s     cCsptititi|_|ii|i|if|io+|ii|id|ii dndS(Ns i ( R4RZt SOCK_STREAMRtconnectRRRtsendRJ(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_start s  cCs|iidS(N(RR~(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_stop scCsd\}}x|iD]}| o$|ido|di}n|ido-|o|d7}n||di7}n|dj o |oPqqW||ifS(NRsorigin:isdescr:s\ni(NR(Rt splitlinesRRn(R ttxttasntdescR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt _parse_whois s   cCst|iid|d}x5d|jp d|jp||iid7}qW|i|\}}|||fS(Ns%s RRtsourcei (RRRJR(R RR6RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt _resolve_one s cGsn|ig}xM|D]E}|i|\}}}|dj o|i|||fqqW|i|S(N(RRRRfR(R tipsRRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytresolve s   N( RRRRRR RRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s   tAS_resolver_riswhoiscBseZdZdZRS(sriswhois.ripe.nets-k -M -1(RRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR stAS_resolver_radbcBseZdZdZRS(s whois.ra.nets-k -M(RRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR stAS_resolver_cymrucBseZdZdZdZRS(swhois.cymru.comc Gs#g}tititi}|i|i|if|iddi|dd}x.|id}|djoPn||7}q^|i x|i dD]t}d|joqnt t i |id\}}}|djoqnt|}|i|||fqW|S( Nsbegin s s end Ri iRtNA(R4RZRRRRRRURJR~RRNRRnRpRrRf( R RtASNlistRRgRRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s*    $  N(RRRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR stAS_resolver_multicBs2eZeeefZdZdZRS(cGs|o ||_ndS(N(tresolvers_list(R treslist((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR sc Gs|}g}x|iD]{}|i|}g}|D]\}}} ||q6~} g} |D]}|| jo | |q`q`~ }||7}qW|S(N(RR( R RttodoRtASresRRRRRtresolvedRJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s *2(RRRRRRR R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s tTracerouteResultcBs\eZd dd dZdZdZdZdZd ddZd ddZ RS( t TraceroutecCsGti||||d|_d|_d|_d|_d|_dS(Ni(R%R Rtgraphdeft graphASresRZthloctnloc(R RRR3((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s     cCs|idS(NcSs.|\}}|id|i|idfS(sB%IP.dst%:{TCP:tcp%ir,TCP.dport%}{UDP:udp%ir,UDP.dport%}{ICMP:ICMP}s4%-15s,IP.src% {TCP:%TCP.flags%}{ICMP:%ir,ICMP.type%}(RURQ(RIRRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK s(RI(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scsh}x{|iD]p\}}t|joqn|ti}||joh|||!i%t$i&} | d0t'| jod||!i %TCP.sport% %TCP.flags%s"%r,src%":T%ir,TCP.sport%s %UDP.sport%s"%r,src%":U%ir,UDP.sport%s" ICMP %ICMP.type%s"%r,src%":I%ir,ICMP.type%s8{IP: IP %proto%}{IPv6: IPv6 %nh%}s)"%r,src%":{IP:P%ir,proto%}{IPv6:P%ir,nh%}s "%r,src%"sunk%iis %s %i/icmpis %s %i/tcps %s %i/udps %s %i/protos"%s"cSs|idddS(RTii(trsplit(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK st60t86tbatffta0t70t40t20sdigraph trace { s1 node [shape=ellipse,color=black,style=solid]; s #ASN clustering s subgraph cluster_%s { s color="#%s%s%s";s* node [fillcolor="#%s%s%s",style=filled];s fontsize = 10;s label = "%s\n[%s]" s "%s"; s } s #endpoints sM "%s" [shape=record,color=black,fillcolor=green,style=filled,label="%s|%s"]; Rs #Blackholes s< %s [shape=octagon,color=black,fillcolor=red,style=filled]; s #Padding Rhs? "%s" [shape=triangle,color=black,fillcolor=red,style=filled]; s#---[%s s edge [color="#%s%s%s"]; s %s -> s %s; s} ()RRRRt graphpaddingRR\tIPv6ROR0RRaR1R2RRRthlimRQtICMPv6TimeExceededRfRURRQRRRRR R;tfromkeysRNRRRUR<RYRWR!RqR("R RRZRR`tportsRRRgRRRQRct unknown_labelt blackholestbhiptrtkRRRtbhtASN_query_listRtASNstASDsRRRtiplistt backcolorlistt forecolorlistRRVtsndtrcv((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt make_graph s           =          !             (        cKsn|djo ti}n|idjp |i|jp|i|jo|i||nt|i|S(sx.graph(ASres=conf.AS_resolver, other args): ASres=None : no AS resolver => no clustering ASres=AS_resolver() : default whois AS resolver (riswhois.ripe.net) ASres=AS_resolver_cymru(): use whois.cymru.com whois database ASres=AS_resolver(server="whois.ra.net") type: output type (svg, ps, gif, jpg, etc.), passed to dot's "-T" option target: filename or redirect. Defaults pipe to Imagemagick's display program prog: which graphviz program to useN(RRRRRRRR(R RRZRA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR6 s  N( RRRR RRRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s   m *tFieldcBseZdZdZdZddZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZRS(sFor more informations on how this work, please refer to http://www.secdev.org/projects/scapy/files/scapydoc.pdf chapter ``Adding a New Field''iR/cCsk||_|ddjo ||_nd||_|id||_ti|i|_g|_dS(Nis@=<>!t!( RREtany2iRRRtcalcsizetsztowners(R RRRE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR U s   cCs|ii|dS(N(RRf(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytregister_owner_ scCs|iS(s<Convert internal value to a length usable by a FieldLenField(R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyti2lenb scCsdS(sqConvert internal value to a number of elements usable by a FieldLenField. Always 1 except for list fieldsi((R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyti2counte scCs|S(s%Convert human value to internal value((R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyth2ii scCs|S(s%Convert internal value to human value((R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyti2hl scCs|S(s'Convert machine value to internal value((R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytm2io scCs|djo d}n|S(s'Convert internal value to machine valueiN(R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyti2mr s  cCs|i||S(sUTry to understand the most input values possible and make an internal value from them(R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRw scCs-|djo d}nt|i||S(s/Convert internal value to a nice representationiN(RRR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyti2reprz s  cCs#|ti|i|i||S(s"Add an internal value to a string(RRRER!(R RRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytaddfield scCs7||i|i|ti|i||i dfS(s'Extract an internal value from a stringi(RR RRRE(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytgetfield scCst|do|iSnt|tjoT|}xJtt|D]2}t||to||i||t,cssx|]}|iVqWdS(N(R(RIR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pys s(RURR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRV scCs ti|S(N(Rtdeepcopy(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs|id}|djo3htd<td<td<td<|Snw|djoO|idd jot|id }nt|id d!}t|Sntd |i|ifd S( sOReturn a volatile object whose value is both random and suitable for this fielditBHIQRjR/RtQRiR7is"no random class for [%s] (fmt=%s).N( RER-R.R/R1RrR;RR(R tfmttR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\ s  3 (RRRWtislistt holds_packetsR RRRRRR R!RR"R#R$R%RVRR\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRO s&             tEmphcBs2eZdZdZdZdZdZRS(RcCs ||_dS(N(tfld(R R.((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCst|i|S(N(RDR.(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs t|iS(N(thashR.(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__hash__ scCs |i|jS(N(R.(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR.R RR0R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR- s    t ActionFieldcBs)eZdZdZdZdZRS(cKs||_||_||_dS(N(t_fldt_action_methodt _privdata(R R.t action_methodRA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s  cCs;t||i||i|it|id||S(NR(RDR3R2R4(R RRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s"cCst|i|S(N(RDR2(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR sN(RRRR2R RR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR1 s  tConditionalFieldcBs;eZdZdZdZdZdZdZRS(cCs||_||_dS(N(R.tcond(R R.R7((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s cCs |i|S(N(R7(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt _evalcond scCs5|i|o|ii||Sn |dfSdS(N(R8R.R$R(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$ scCs2|i|o|ii|||Sn|SdS(N(R8R.R#(R RRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR# scCst|i|S(N(RDR.(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR sN( RRRR.R R8R$R#R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR6 s     tPadFieldcBs2eZdZdZddZdZdZRS(sgAdd bytes after the proxified field so that it ends at the specified alignment from its beginingcCs&||_||_|pd|_dS(NR(R2t_alignt_padwith(R R.taligntpadwith((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s  cCsE|ii|d|}||tidt| |i|iS(NRs%is(R2R#RRRqR:R;(R RRRBtsval((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR# scCst|i|S(N(RDR2(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR sN(RRRWRR2R R#R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR9 s   tMACFieldcBs>eZdZdZdZdZdZdZRS(cCsti|||ddS(Nt6s(RR (R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs|djodSnt|S(NR(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR! s cCs t|S(N(R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR  scCs@t|tjo)t|djo|i||}n|S(Ni(RRRqR (R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s&cCs<|i||}|tijotii|}n|S(N(RRRRR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR" scCstS(N(RA(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\ s(RRR R!R RR"R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR? s      t DestMACFieldcBs#eZdZdZdZRS(cCsti||ddS(N(R?R R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs*|djo d}t|ito|ii}nGt|ito|ii}n$t|ito|ii}nt|to|i i }n|dj o?t|itot |dd}qt |dd}n|djod}t d|qnti|||S(NRisff:ff:ff:ff:ff:ffs"Mac address to reach %s not found (RR`RRRR\RRR!RPR t getmacbyip6RRR?R(R RR6tdstip((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s$   cCsti|||i||S(N(R?R!R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s(RRR RR!(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRA s  tSourceMACFieldcBs#eZdZdZdZRS(cCsti||ddS(N(R?R R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsH|djo(d}t|ito|ii}nGt|ito|ii}n$t|ito|ii}nt|to|i i }n|dj ot|itot i i |\}}}nt i i |\}}}yt|}WnnX|djo d}q1q5nti|||S(Ns00:00:00:00:00:00(RR`RRRR\RRR!RPR Rtroute6RfRR?R(R RR6RCRsRtnhRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs*   cCsti|||i||S(N(R?R!R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!-s(RRR RR!(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRDs  tARPSourceMACFieldcBs#eZdZdZdZRS(cCsti||ddS(N(R?R R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 1scCs|djo|i}t|to|ii}n|dj oPtii|\}}}yt|}WnnX|djo d}qqnt i |||S(Ns00:00:00:00:00:00( RRR`R!RPR RRfRR?R(R RR6RCRsRRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR3s    cCsti|||i||S(N(R?R!R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!As(RRR RR!(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRG0s  tDot11AddrMACFieldcBs#eZdZdZdZRS(cCsdS(Ni((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt is_applicableEscCs2|i|oti||||Sn|SdS(N(RIR?R#(R RRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#GscCs5|i|oti|||Sn |dfSdS(N(RIR?R$R(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$Ls(RRRIR#R$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRHDs  tDot11Addr2MACFieldcBseZdZRS(cCs%|idjo|idjSndS(Nii i ii(i i ii(Rtsubtype(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRISs(RRRI(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJRstDot11Addr3MACFieldcBseZdZRS(cCs|idjodSndS(Niii(ii(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRIYs(RRRI(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRLXstDot11Addr4MACFieldcBseZdZRS(cCs4|idjo |id@djodSq0ndS(Niiii(RtFCfield(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRI_s (RRRI(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRM^stIPFieldcBsPeZdZdZdZdZdZdZdZdZ RS(cCsti|||ddS(Nt4s(RR (R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR fscCst|tjo7yt|Wqtij ot|}qXnEt|tjo1g}|D]}||i||qh~}n|S(N(RRR5R4RR?RR(R RR6RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRhs1cCsH|tijo4yti|d}WnqDX|o|SqDn|S(Ni(RRR4t gethostbyaddr(R R6R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRqs cCs t|S(N(R5(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!{scCs t|S(N(R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR }scCs|i||S(N(R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs|i|i||S(N(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"scCstS(N(R>(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\s( RRR RRR!R RR"R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyROes     t SourceIPFieldcBs#eZdZdZdZRS(cCs ti||d||_dS(N(ROR Rtdstname(R RRS((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsK|djo+tiit||i\}}}nti|||S(N(RRRfRDRSROR!(R RR6RsRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s +cCs|djot||i}t|tobttii|}|i|d|djo|dd}qt dt |dSqtii|\}}}nt i |||S(Niiis#More than one possible route for %s( RRDRSR`R!RNRRfRRRRROR(R RR6RRgRsRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  (RRR R!R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRRs  t ByteFieldcBseZdZRS(cCsti|||ddS(NRj(RR (R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRTst XByteFieldcBseZdZRS(cCs-|djo d}nt|i||S(Ni(RRR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"s  (RRR"(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRUst X3BytesFieldcBs#eZdZdZdZRS(cCsti|||ddS(Ns!I(RR (R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs*|ti|i|i||dd!S(Nii(RRRER!(R RRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#sc Cs5|d|i|ti|id|d dfS(NiRhi(R RRRE(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s(RRR R#R$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVs  t ShortFieldcBseZdZRS(cCsti|||ddS(NR/(RR (R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRWst LEShortFieldcBseZdZRS(cCsti|||ddS(Ns|djo d}n$t|tj ot|}n|S(NR(RRR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s   cCs||i||S(N(R!(R RRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR# scCsT|idjod|i||fSn'||i |i|||i fSdS(NiR(RR (R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$ scCsttddS(Nii(R;R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\s(RRR RR!R#R$R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRfs     t PacketFieldcBs8eZdZdddZdZdZdZRS(iicCs,ti|||d|d|||_dS(NRRg(RfR R(R RRRRRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs t|S(N(R(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!scCs |i|S(N(R(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsW|i||}d}|ito%|it}|i`|i}n||fS(NR(R R<RYRWt underlayerRR!(R RRRRRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s  (RRR,R R!R R$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRhs   tPacketLenFieldcBs)eZdZddddZdZRS(iicCsiti||||d|||_|dj p |djo&t|ii||d|_ndS(NRgicSst|||S((RD(RR.Rg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK,s(RhR t length_fromRReRRt count_from(R RRRR.RkRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 's  cCs3|i|}|i||| }|||fS(N(RkR (R RRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$-sN(RRR,RR R$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRj%stPacketListFieldcBs_eZdZdZd d d ddZdZdZdZdZ dZ dZ RS( iicCs|djo g}nti||||d|||_||_|dj p |djot|iin|dj o||d|_ndS(NRgicSst|||S((RD(RR.Rg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK@s(RRhR RlRkReRR(R RRRR.RlRkRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 6s     cCs&t|tj o |gSn|SdS(N(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRBs cCs%t|tjot|SndS(Ni(RRRq(R RRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRGscCstd|DS(Ncssx|]}t|VqWdS(N(Rq(RIRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pys Ls(R(R RRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKscCstd|S(NcSs |iS((R(Rc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKNs(RN(R R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR%Msc Cs$d}}|idj o|i|}n$|idj o|i|}ng}d}|}|dj o|| ||}}nx|o|dj o |djoPn|d8}n|i||}t|jo |t} | i}| i`nd}|i|qW|||fS(NRii( RRkRlR RYR!RiRRf( R RRRRRRRRcRV((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$Os.         cCs|ditt|S(NR(RURNR(R RRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#isN( RRR+R,RR RRRR%R$R#(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRm3s     tStrFixedLenFieldcBs5eZddddZdZdZdZRS(icCsFti|||d|||_|dj o|d|_ndS(NRgcSs|S(((Rtlength((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKrs(RfR RkR(R RRRoRkRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR ns  cCs-|i|}|||i||| fS(N(RkR (R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$sscCs3|i|}|tid||i||S(Ns%is(RkRRR!(R RRRBR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#vscCs6y|id}Wntdd}nXt|S(Nii(RkRRR;(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\ys N(RRRR R$R#R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRnms  tNetBIOSNameFieldcBs)eZdddZdZdZRS(iicCs ti||||d|dS(NRg(RnR (R RRRoRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsk|i|d}|djo d}n|d|7}|| }ditd|}d|}|S(NiRRTcSs0tdt|d?tdt|d@S(iAii(RR(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKs(RkRRURN(R RR6R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s    cCsN|idid}ditd|ddd|dddS(NRhRTRcSs.tt|dd@d>t|dd@S(iii(RR(R6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKsii(RnRURN(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR R!R (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRps t StrLenFieldcBs#eZddddZdZRS(icCsfti|||d|||_|dj p |djo&t|ii||d|_ndS(NRgicSst|||S((RD(RR.Rg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKs(RfR RkRReRR(R RRR.RkRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s  cCs-|i|}|||i||| fS(N(RkR (R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$sN(RRRR R$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRqstFieldListFieldcBsYeZdZd dd d dZdZdZdZdZdZ dZ RS( iicCs|djo g}nti|||||_||_||_|dj p |djo&t|ii||d|_ndS(NicSst|||S((RD(RR.Rg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKs( RRR RlRktfieldReRR(R RRRsR.RgRkRl((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s     cCs%t|tjot|SndS(Ni(RRRq(R RRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscstfd|DS(Nc3s(x!|]}ii|VqWdS(N(RsR(RIR (R R(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pys s(R(R RRB((R RsB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs|djo g}n|S(N(R(R RRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s  cCs&t|tj o |gSn|SdS(N(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cCs?|i||}x&|D]}|ii|||}qW|S(N(R!RsR#(R RRRBR ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s cCsd}}|idj o|i|}n$|idj o|i|}ng}d}|dj o|| ||}}nxa|oY|dj o |djoPn|d8}n|ii||\}}|i|qW|||fS(NRii(RRkRlRsR$Rf(R RRRRRBRR ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s"     N( RRR+RR RRR!RR#R$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRrs     t FieldLenFieldcBs,eZddddddZdZRS(R/cCs|S(((RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKscCs_ti||||||_||_||_|dj ot|ii||_ndS(N( RR t length_oftcount_oftadjustRReRR(R RRRuRERvRwR.((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s    cCs|djo~|idj o.|i|i\}}|i||}n+|i|i\}}|i||}|i||}n|S(N(RRutgetfield_and_valRRvRRw(R RR6R.tfvalR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s N(RRRR R!(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRtssDES-CBCsIDEA-CBCs Blowfish-CBCsRC5-R16-B64-CBCs3DES-CBCsCAST-CBCisAES-CBCs CAMELLIA-CBCt EncryptiontMD5tSHAtTigersSHA2-256sSHA2-384sSHA2-512tHashtPSKtDSSsRSA SigsRSA EncryptionsRSA Encryption RevisedsElGamal EncryptionsElGamal Encryption Reviseds ECDSA Sigit HybridInitRSAit HybridRespRSAit HybridInitDSSit HybridRespDSSitXAUTHInitPreShareditXAUTHRespPreSharedit XAUTHInitDSSit XAUTHRespDSSit XAUTHInitRSAit XAUTHRespRSAitXAUTHInitRSAEncryptionitXAUTHRespRSAEncryptionitXAUTHInitRSARevisedEncryptionitXAUTHRespRSARevisedEncryptiotAuthenticationt 768MODPgrt 1024MODPgrt EC2Ngr155t EC2Ngr185t 1536MODPgrit 2048MODPgrit 3072MODPgrt 4096MODPgrit 6144MODPgrit 8192MODPgrt GroupDesctMODPtECPtEC2Nt GroupTypet GroupPrimetGroupGenerator1tGroupGenerator2i t GroupCurveAi t GroupCurveBi tSecondst KilobytestLifeTypei t LifeDurationi tPRFt KeyLengtht FieldSizet GroupOrdertISAKMPTransformSetFieldcBs2eZdZdZdZdZdZRS(ic Cs|\}}ti||hdf\}}}|i||}d}|d @o`|ptd|nd}x4|o,t|d@|}|dL}|d7}quW|}n |dO}tid |||S( NiRis9%r should not be TLV but is too big => using TLV encodingiiiis!HHi(tISAKMPTransformTypesRRRRR( R t.1ttypRBttype_valtenc_dictttlvRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyttype2num;s $     cCs<ti||hf}|di||}|d|fS(Nii(tISAKMPTransformNumR(R RRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytnum2typeKscCs4|djodSnt|i|}di|S(NR(RRNRRU(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!Os c CsTg}x"t|djotid|d \}|d@ }|otid|dd!\}|dt|jotd|n|dd|!}tdtiddt|f|d }n-|d M}d }tid|dd!\}|d|}|i|i||q Wt|d jotd |n|S( Nis!Hiis(Bad length for ISAKMP tranform type=%#6xcSs |d>|BS(l((R6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKfss!%sRjiis2Extra bytes after ISAKMP transform dissection [%r](RqRRRtreduceRfR(R RRRt trans_typetis_tlvt value_lenR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR Ts$ 6 (RRR+RRR!R (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR9s    t StrNullFieldcBs#eZdZdZdZRS(cCs||i||dS(NRh(R!(R RRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#rscCsL|id}|djod|fSn||d|i||| fS(NRhiRi(RmR (R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$ts cCsttdddS(NiiRh(R<R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\zs(RRR#R$R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRqs  t StrStopFieldcBs&eZddZdZdZRS(icCs)ti|||||_||_dS(N(RR tstopt additionnal(R RRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR ~s cCsY|i|i}|djod|fSn|t|i|i7}|||| fS(NiR(RmRRqR(R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s  cCsttdd|iS(Nii(R<RR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\s(RRR R$R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR}s  tLenFieldcBseZdZRS(cCs$|djot|i}n|S(N(RRqR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s (RRR!(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRst BCDFloatFieldcBseZdZdZRS(cCstd|S(Ni(Rr(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!scCs|dS(Ngp@((R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR!R (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs tBitFieldcBs5eZdZdZdZdZdZRS(cCs5ti||||dj|_t||_dS(Ni(RR trevtabsR:(R RRR:((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsJ|idjoti|}n$|idjoti|}n|S(Nii (R:R4tntohsR(R RB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cCs|i||}t|tjo|\}}}n d}d}|io|i|}n||iK}||d|i>d@O}||i7}xH|djo:|d8}|tid||?}|d|>dM}qW|o|||fSn|SdS(Niliis!B(R!RRoRRR:RR(R RRRBtbitsdoneR ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s"    c CsSt|tjo|\}}nd}|i|ddd}|| }tid||}d}x8t|D]*}|t||||dd>O}quW|d|d|>dM}||d|i|?}|io|i|}n||i7}||d}|d}|i ||}|o||f|fSn ||fSdS(Niiis!%dBll( RRoR:RRRRRRR ( R RRtbntnb_bytesRtbytesRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s*  (   cCstdd|idS(Niii(RR:(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\s(RRR RR#R$R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs     !tBitFieldLenFieldcBs&eZddddZdZRS(cCs|S(((RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKscCs5ti||||||_||_||_dS(N(RR RuRvRw(R RRR:RuRvRw((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s  cCstii|||S(N(RtR!tim_func(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!sN(RRRR R!(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRst XBitFieldcBseZdZRS(cCst|i||S(N(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"s(RRR"(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRst EnumFieldcBs8eZddZdZdZdZdZRS(R/c Csh}|_h}|_t|tjott|}n |i}td|o||}}nx*|D]"}||||<||||s1(RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR=st LELongFieldcBseZdZRS(cCsti|||ddS(NsO}qIW|}n|S(NcSs|gS(((RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKYst+ii(RRRRNRpRRS(R RR6RJR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVs  cCst|tjpt|tjot|Sn|io g}nd}d}x@|o8|d@o||i|7}n|d7}|dL}qWW|iodi|}n|S(NRiiR(RRRoRRRRU(R RR6RgR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"_s&      (RRR RR"(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRNs  tIPoptionsFieldcBs#eZdZdZdZRS(cCs|ddt|ddS(NRhii(Rq(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!uscCsK|idd}|djotd|id}n|||| fS(Niiisbad ihl (%i). Assuming ihl=5(tihlR(R RRtopsz((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$ws   cCsttddS(Nii'(R;R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\}s(RRR!R$R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRts  tEOLtNOPtMSSs!HtWScales!BtSAckOKtSAckRRss!IIt AltChkSums!BHt AltChkSumOpttTCPOptionsFieldcBs2eZdZdZdZdZdZRS(icCsW|idd}|djotd|id}n|||i||| fS(Niiis$bad dataofs (%i). Assuming dataofs=5(tdataofsRR (R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s   c Csg}x|ot|d}|djo|id |d}Pn|djo|id |d}q nt|d}|djotd|d}n|d|!}tdi|otd|\}}|djo|dt|d 7}n|oSti|t|jo7ti ||}t|djo|d}qan|i||fn|i||f||}q W|S( NiRiRis-Malformed TCP option (announced length is %i)is%iIi(RN(RN( RRfRRt TCPOptionsRRqRRR( R RR6topttonumtolentovaltonametofmt((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s8           #cCsd}x|D]\}}t|tjo|djo|d7}q qk|djo|d7}q qktdi|otd|}td|d}|djo|d t|7}n|dj oVt|tj p d |jo6t|tj o |f}nti||}q9qkt d |q n/|}t|tj ot d |q n|t |t d t||7}q W|ddt|ddS(NRRsRRhiiis%iIRsoption [%s] unknown. Skipped.soption [%i] is not string.iii( RRRRRqRRoRRRR(R RR6RRRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s6      - ,cCsgS(N((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\s(RRR+R$R R!R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs    t DNSStrFieldcBseZdZdZRS(cCsrg}|idD]}||d q~}td|}di|}|ddjo|d7}n|S(NRi?cSstt||S((RRq(RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKsRiRh(RpRNRU(R RR6RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s .cCssd}x`t|d}|d}|pPn|d@otdq ||| d7}||}q ||fS(NRiiis.DNS message can't be compressed at this point!R(RR(R RRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s   (RRR!R$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs tDNSRRCountFieldcBs2eZdZdZdZdZdZRS(icCs ti|||||_dS(N(RWR trr(R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsWt||i}d}x8t|tpt|to|i}|d7}qW|S(Nii(RDRR`tDNSRRtDNSQRR(R RR6R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt_countRRs # cCs$|djo|i|}n|S(N(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s cCs$|djo|i|}n|S(N(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs (RRR,R RR!R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs    cCsPd}d}|g}x|t|jotd|t|fPnt||}|d7}|d@o|p|d}n|t|jotd|Pn|d@d>t||d }||jotd Pn|i|qn8|djo*|||||!d 7}||7}qnPq|o |}n||fS( NRis&DNS RR prematured end (ofs=%i, len=%i)iis%DNS incomplete jump token at (ofs=%i)i?ii sDNS decompression loop detectedR(RqRRRf(RRcRRtjpathR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt DNSgetstr s:          t DNSRRFieldcBs5eZdZddZdZdZdZRS(icCs)ti||d||_||_dS(N(RfR Rtcountfldtpasson(R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR /s cCs|djodSnt|S(NR(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!3s c Cs|||d!}tid|\}}}}|d7}td|||||!} | id jot||d| _n| `||7}|| _| |fS( Ni s!HHIHRhiiiii(iiii(RRRRRtrdatatrdlentrrname( R RRRcRRRRQRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytdecodeRR7s   cCst|tjo|\}}nd}d}t||i}|t|jo%td|i|f|dfSnxj|ob|d8}t||\}}|i|||\}}|djo |}q||i |q|W|i o||f|fSn|||fSdS(Niswrong value: DNS.%s=%iRi( RRoRRDRRqRRRt add_payloadR(R RRRcRRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$Ds$     (RRR,R R!RR$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR-s    t DNSQRFieldcBseZdZdZRS(icCs>|||d!}|d7}td|}||_||fS(NiRh(Rtqname(R RRRcRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR^s   (RRR,R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\st RDataFieldcBseZdZdZRS(cCsd}|idjo ti}nE|idjo ti}n(|idjot|dd}n|dj ot||}n|S(Niii i(RRR4RZtAF_INET6Rt inet_ntop(R RRtfamily((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR hs   cCs|idjo|ot|}qn|idjo!|otti|}qnX|id joGditd|id }t|d o|d 7}qn|S( NiiiiiiRcSstt||S((RRq(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK{sRiRh(iiii( RR5t inet_ptonR4RRURNRpR(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!ss$(RRR R!(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRgs t RDLenFieldcBs#eZdZdZdZRS(cCsti||dddS(NR/(RR R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs?|djo.|id}t|i||i}n|S(NR(Rt get_fieldRqR!R(R RR6trdataf((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s cCs?|djo.|id}t|i||i}n|S(NR(RR RqR!R(R RR6R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs (RRR R!R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s  I~tTimeStampFieldcBs#eZdZdZdZRS(cCs#ti||||||_dS(N(RR R:(R RRR:((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsuti|||\}}|oC|dL}|t8}ddkl}l}|d||}nd}||fS(Ni i(RcRbs%a, %d %b %Y %H:%M:%S +0000R(RR$t ntp_basetimeRRcRb(R RRt timestampRcRbR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s  cCsd}t|tjo:ddkl}l}t|||td}n;|djo'ddkl}t|t}n|}|dK}ti||||S(Ni(tstrptimetmktimei(Ri ( RRRRRRrRRR#(R RRRBRTRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s$  (RRR R$R#(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  tICMPTimeStampFieldcBs)eZeidZdZdZRS(sM([0-2]?[0-9])[Hh:](([0-5]?[0-9])([Mm:]([0-5]?[0-9])([sS:.]([0-9]{0,3}))?)?)?$cCsr|djodSnZt|d\}}t|d\}}t|d\}}d|||t|fSdS(Ns--ii<s %d:%d:%d.%d(RtdivmodRr(R RRBtsectmilliRthour((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"s  c Cst|tjo|ii|}|o|i\}}}}}}}}t|pddd }t|dt|pddt|pdd|}qd}n,|djottid d}n|S( NRt000ii<iiiiiQ(RRtre_hmsmRLRRrRR( R RRBthmsmsRRLRRtms((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs%B  (RRRjRkRR"R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs t FloatFieldcBseZdZRS(cCsUti|||\}}|d?}|dd>d@}|d:}||}||fS(Nili ig@i!(RR$(R RRRRtfrac((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s    (RRR$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRst Dot11SCFieldcBs#eZdZdZdZRS(cCs |idjS(Ni(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRIscCs2|i|oti||||Sn|SdS(N(RIRXR#(R RRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#scCs5|i|oti|||Sn |dfSdS(N(RIRXR$R(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s(RRRIR#R$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  tASN1F_badsequencecBseZRS((RR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR st ASN1F_elementcBseZRS((RR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!stASN1F_optionnalcBs,eZdZdZdZdZRS(cCs ||_dS(N(t_field(R Rs((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCst|i|S(N(RDR#(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsqy|ii||SWnStj o|ii|d|Sn+tj o|ii|d|SnXdS(N(R#tdissectR tset_valRR(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$scCs+|ii|odSn|ii|S(NR(R#tis_emptytbuild(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR's(RRR RR$R'(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"s   t ASN1F_fieldcBseZdZdZeiZeZddZ dZ dZ dZ dZ dZdZdZd Zd Zd Zd Zd ZdZdZdZdZRS(icCs0|dj o ||_n||_||_dS(N(RRyRR(R RRRy((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s   cCs!|djo d}nt|S(Ni(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR" s  cCs|S(N((R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs|S(N((R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs%|ii|ii|d|iS(NRy(tASN1_tagRt ASN1_codecR{Ry(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs|djo d}nt|to|itijp9|itijp&|itijp|i|ijo|i |i Sqt d||i|i fn|ii |i i |S(Nis6Encoding Error: got %r instead of an %r for field [%s](RR`RR)RNRRRRRR*RqRR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s  #cCst|do|iSnt|tjoT|}xJtt|D]2}t||to||i||scCs|iS(N(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR@scCs |i|jS(N(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRBscCs|iS(N(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVDscCstS(N(R/(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\FsN(RRR,R+RNRR)RyRR R"RRR R!R%R'R%R&R$R+R0RRRVR\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR(s*               t ASN1F_INTEGERcBseZeiZdZRS(cCs tddS(Nii@illll(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\Ls(RRRNRR)R\(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR,Js t ASN1F_NULLcBseZeiZRS((RRRNRR)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR-OstASN1F_enum_INTEGERcBs5eZdZdZdZdZdZRS(cCsti|||h}|_h}|_t|tjott|}n |i}t d|o||}}nx*|D]"}||||<||||(RRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVscCs(x!|iD]}|i||q WdS(N(RR%(R RRBR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR%s cCs0x)|iD]}|i|ptSq q WtS(N(RR&RZR[(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR&s   cCstd|igS(NcSs||iS((R+(R6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKs(RR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR+scs.tfd|id}|i|S(Ncs||iS((R'(R6RJ(R(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKsR(RRR!(R RR((RsB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR'scCs|ii|i}y_|i|\}}}x#|iD]}|i||}q:W|otd|n|SWn!tj o}t|nXdS(Ns'Too many bytes to decode sequence: [%r]( R)RR*RRR$RRqR (R RRRRRR*R|((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s ( RRRNRR)R RVR%R&R+R'R$(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR4s       t ASN1F_SETcBseZeiZRS((RRRNRR)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR5stASN1F_SEQUENCE_OFcBsqeZdZdZddZdZdZdZdZdZ dZd Z d Z d Z RS( ii0cCs.||_t||_||_||_dS(N(tasn1pktRRRR(R RRR7R)((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s  cCs|djogSn|S(N(R(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"s cCs|gS(N((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR+scCsti|||dS(N(R(R%(R RRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR%scCsti||S(N(R(R&(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR&scCs~t||i}t|to|itijo |}n0|djo d}ndit t |}|i ||S(NR( RDRR`RRRNRRRURNRR!(R RRBR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR's#   cCsti|||dS(N(R(R%(R RRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR%sc Cs|ii|i}|i|\}}}g}x|o|y|i|}Wn)tj o} |it|PnX|i|t|jo|ti}|ti ` q6Pq6W|i |||S(N( R)RR*RR7R RfRVR!RiRR%( R RRRRts1RRRcR|((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s     cCst|iS(N(tfuzzR7(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\scCsd|ii|ifS(Ns<%s %s>(RRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVs( RRR,R+R R"R+R%R&R'R$R\RV(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR6s        t ASN1F_PACKETcBs2eZdZdZdZdZdZRS(icCs ti|||||_dS(N(t ASN1_fieldR R(R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCs!|djo d}nt|S(NR(RR(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s  cCsoy||}Wntj ot|}nX|t}d}|dj o|i}|i`n||fS(NR(R RVRYRR!RiR(R RR6Rtcpad((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytextract_packets    cCs|i|i|S(N(R=R(R RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRR,R R!R=R (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR:s    t ASN1F_CHOICEcBs,eZeiZdZdZdZRS(cGsC||_h|_x!|D]}||i|iis   tPacket_metaclasscBseZdZdZRS(cCsFtt|i||||}x|iD]}|i|q+W|S(N(RR@RRcR(RRRRytnewclsR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs ! cCs<x)|iD]}|i|jo|Sq q Wt|dS(N(RcRR(R RERR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs   (RRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR@s tNewDefaultValuescBseZdZdZRS(sNewDefaultValues metaclass. Example usage: class MyPacket(Packet): fields_desc = [ StrField("my_field", "my default value"), ] class MyPacket_variant(MyPacket): __metaclass__ = NewDefaultValues my_field = "my new default value" c Csd}x,|D]$}t|do|i}Pq q W|djotdng}xU|D]M}|i|jo*|i}||i|_||i=n|i|q_W||ddJd3Z?d4Z@d5ZAd6ZBd7ZCd8ZDd9ZEd:ZFd;ZGddJd<ZHd=ZId>ZJd?ZKd@dddAZLdBZMddCZNdDZOddEZPdJdFZQdGZRdHZSdIZTRS(KiicCs |tS(N(t import_hexcap(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt from_hexcapIscCsIxB|iD]7\}}d|idid|iDfGHq WdS(Ns %-20s %ss, css!x|]}dd|VqWdS(s%-12ss%s=%rN((RIR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pys Ps(t payload_guessRRUR(R RyR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt upper_bondsMs cCsOxH|iiD]7\}}d|idid|iDfGHqWdS(Ns %-20s %ss, css!x|]}dd|VqWdS(s%-12ss%s=%rN((RIR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pys Us(toverload_fieldsRRRU(R tlowerRy((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt lower_bondsRs RcKsati|_d|_|idjo|ii|_n|ig|i|_h|_h|_h|_ h|_ g|_ t |i d<|i||_d|_|o)|i||p|i|qnx:|iD],}|i|i||||i ||i|\}}|dj o|i||Sn|Snt|dS(N(RTRxRRR(R RER.R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs   cCs|ii|oU|i|}|djo d}n |i}||||i|t layer_nameRRRR(R RRRRBtncoltvcol((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVs2  !         cCs |iS(N(R'(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsvt|to-|i}|i}|i||Sn6t|tjo|td|Sn|i|SdS(NR!(R`R(RRRRRVt__rdiv__(R RtcloneAtcloneB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__div__s   cCs2t|tjotd||SntdS(NR!(RRRVR4(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRo'scCs,t|tjo|g|SntdS(N(RRrR4(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__mul__,scCs |i|S(N(Rs(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__rmul__1scCstS(N(R[(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt __nonzero__4scCst|iS(N(RqR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__len__6scCs?d}x2|iD]'}|i|||i|i}qW|S(NR(RcR#RbR(R RcR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytdo_build8s  %cCs||S(s3DEV: called right after the current layer is build.((R Rtpay((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt post_build>scCs|iiddS(Ntinternali(RR'(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt build_payloadBscCs|ip|ii}n|i}x|iD]}||}q6W|i}y|i||}Wn3tj o'ti d|i||}nX|p@|i i t }|o||i 7}n|i|}n|S(NsjAPI changed! post_build() now takes 2 arguments. Compatibility is only assured for a short transition time(RaRPR RwRVR{RyR4RRRRWRYR't build_done(R RzRRTRxRcRV((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR'Es$     cCs|ii|S(N(RR|(R Rc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR|XscCsd}g}d}x|iD]}|i|||i|i}t|tjo|t|}|}nd}|i||i||i|i|fqW|i i dd\}}||7}|i||f||fS(NRRzi( RcR#RbRRRRqRfR"Rtbuild_ps(R RctplRRRgRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt do_build_ps[s ! 2 cCs|i\}}||fS(N(R(R RzRcR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR}nscKsk|i|}|djo>dti}|i|tidtii|fn|i|dS(spsdump(filename=None, layer_shift=0, rebuild=1) Creates an EPS file describing a packet. If filename is not provided a temporary file is created and gs is called.s /tmp/scapy.%is %s '%s.eps' &N( R{RRRt writeEPSfileRNRRR(R RwRAtcanvasR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRzs   !cKsk|i|}|djo>dti}|i|tidtii|fn|i|dS(spdfdump(filename=None, layer_shift=0, rebuild=1) Creates a PDF file describing a packet. If filename is not provided a temporary file is created and xpdf is called.s /tmp/scapy.%is %s '%s.pdf' &N( R{RRRRRNRRR(R RwRARR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs   !c%s6tii}|o%|it|i\}}n|i\}}t|}x$|D]\}}|t|7}q`Wt|}|d} dd} d} d} ddtddd d tii } td d dd tii }d fdd}ddddddfd}d\}}x|o| i }|i \}}| d 7} ti i | || d|iti iig}| d7} |i}|itiid|i|itii itii|gg|i|x|D]\}}}|i }ti i | || dt|i}|dj o)t|djo|d d}qnd}ti i | d|| dt|}| d 7} |o ||||||\}}}}|i} |} |i}!||!}"|| }#| itiiyW| djo%tii|"|#dddd}$n"tii|"|#dddd}$Wnn,X|i|$tiii tii!i"|g|i|n|i||i|q8W||7}q^W|S(Nii gig?g?g333333?g?g?Rg?g?cSs;g}x%|D]}|idt|q Wdi|S(Ns%02xRT(RfRRU(R6RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cs?tii||d|tiiigS(Ns\tt{%s}(RyRR:tLarge(R6RJR(tXMULtYDUMPtYMULRtXDSTART(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt make_dump_txtscSs7tii|i|i|i|iddS(Nt relcenterg?(g?g?(RyRtrectRtbottomtwidththeight(Rb((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytmake_boxsc Ss9t|djo1|di}|itii|iSn|di}|itii|di}|itiit|djo|i|ijotiitii |i|i tii |i|i tii |i|i tii |i|i tii |i|i tii |i|i tii |i|i tii |i|i Sn|di}||jo|itiin|di}||jo$||jo|itiintiitii |i|i tii |i|i tii |i|i tii |i|i tii |i|i tii |i|i tii |i|i tii |i|i tii SdS(Niiiii(RqR|tenlargeRyRtu_ptRaRRtmovetoRtlinetoRt closepath(RRtfbtlbtgbR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt make_frames@,'& 'ic s@tii}g}xy|oq||| |||}}|||} |i| |t|7}|djod}|d7}qqW|djotiii}n|djotiii}n|i ||ti i |gti i igx|D]} |i| qW||di||fS(Niiii(RyRRfRqRRtrgbtredtwhitetstroketdecotfilledtstylet linewidthtThickR:R|( RRgRJRtbkcoltlargRttlisttdmpR(RR(sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt make_dumps&     7s"\font\cmssfont=cmss10\cmssfont{%s}iis[...]Rit absangle1t absangle2iiZ(ig(#RyRRRR}RqRgRRRRR tpopRRR:RR|RRRRRatblackRRR:Rt connectortcurveRRtthintearrowtsmall(%R t layer_shifttrebuildRRcRTtYTXTRRtXSTARTRJRRt backcolort forecolorRRt last_shifttlast_yRRRCtpttptbbRRytfdumpRtfttvttdtRtdtbtvtbtbxvttbxdttcnx((RRRRRRRsB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{s%      &!    6  4  - . $     %%+ cCs |dfS(slDEV: to be overloaded to extract current layer's padding. Return a couple of strings (actual layer, padding)N(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytextract_padding$scCs|S(s?DEV: is called right after the current layer has been dissected((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt post_dissect(scCs|S(s:DEV: is called right before the current layer is dissected((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt pre_dissect,scCsb|i}|ixG|o?|o8|i}|i||\}}||i|i other).iN(R`R(RRR4(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__gt__s cCsRt|to|i|Sn.t|tjodSnt||fdS(s6True if self is an answer from other (other ==> self).iN(R`R(RRRR4(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__lt__s cCst||iptSnxV|iD]K}||ijotSn|i|i|i|ijotSq%q%W|i|ijS(N(R`RRZRcRbRR(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs % cCs|i| S(N(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__ne__scCs |iiS(sKDEV: returns a string that has the same value for a request and its answer.(Rthashret(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs.|i|ijo|ii|iSndS(s)DEV: true if self is an answer from otheri(RRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs|i|jp|ii|jodSnx|iD]}|i|i}|djoq5n|ipt|dd}nx@|D]8}t|t o"|i |}|o|SqqqWq5W|i i |S(sXtrue if self has a layer that is an instance of cls. Superseded by "cls in self" syntax.iR#iN( RRRQRbRRR+R"R`R(R<R(R RRt fvalue_gentfvalueR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR<s #   c Cst|tjo)d|jo|idd\}}n|d}}|i|jp|ii|joA|djo&|djo|Sq|i|Sq|d8}nx|iD]}|i|i}|djoqn|ipt |dd}nx_|D]W}t |t oAg} |i ||d| } | dj o| Sn| d}q q WqW|i i ||d|S(s2Return the nb^th layer that is an instance of cls.RiR#it_trackN(RRRpRRRRbRQR+R"R`R(RWR( R RR RtcclsR.RRRttrackR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRWs2  #      cCst|tjoj|io|i|i|i}n|i|i}|djo|idj o |i}n|Sn|i|SdS(N(RRBRRWRRRh(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRFs  cCs |i|S(sK"cls in self" returns true if self has a layer which is an instance of cls.(R<(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRCscOs|i||dS(sDeprecated. Use show() method.N(R(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR sic Csti}d||id|i|i|idfGHxX|iD]M}t|to|i| oqFnt|t o|i }|i }n|i }|i }|i|i}t|tp'|io~|iott|tjoad||||ifGHt|dd} xm| D]$}|id|d||d q*WqFd ||||i|id ||i||fGHqFW|iid|d |d ||id|dS(s`Prints a hierarchical view of the packet. "indent" gives the size of indentation for each layer.s %s%s %s %ss###[s]###s %s \%-10s\R#itindentt label_lvls |s%s %-10s%s %sRgRRTN(RRR>RlRRcR`R6R8R-RhRiRjRkRbR(R+R,RRR"RR"Rt show_indent( R RRRRRRmRnRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s4   !    7&   cCs|it|idS(s{Prints a hierarchical view of an assembled version of the packet, so that automatic fields are calculated (checksums, etc.)N(RRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytshow2)sc CsKhdd<dd<dd<}xd|jo|id}||did}||d||d!}|id}|djotd |n|| ||d}}t} |dd jot} |d}n|i|o | } n| p d }n|| ||||d }q$Wd } xd|jo|id}| || 7} ||d}|o4|d|jo#| ||d7} |d}q<ny|id}|| } | id } t| djod} | d}n*t| d jo| \} }ntd|jo|id\}}n|i i }|}d}d|jo%|id\}}t |}n||d}Wn,td|d |dodfq<X|djo@t i dt i|i t |i t |i d}n||i i jot||o|djo3|iid| ||d|f|}d} q&| ddjo.t||}| d } | p d} qq&t||}||ijo|i|i||}q&n |iid| |}d} | d| |7} q<W| |7} | S(sssprintf(format, [relax=1]) -> str where format is a string that can include directives. A directive begins and ends by % and has the following format %[fmt[r],][cls[:nb].]field%. fmt is a classic printf directive, "r" can be appended for raw substitution (ex: IP.flags=0x18 instead of SA), nb is the number of the layer we want (ex: for IP/IP packets, IP:2.src is the src of the upper IP layer). Special case : "%.time%" is the creation time. Ex : p.sprintf("%.time% %-15s,IP.src% -> %-15s,IP.dst% %IP.chksum% " "%03xr,IP.proto% %r,TCP.flags%") Moreover, the format string can include conditionnal statements. A conditionnal statement looks like : {layer:string} where layer is a layer name, and string is the string to insert in place of the condition if it is true, i.e. if layer is present. If layer is preceded by a "!", the result si inverted. Conditions can be imbricated. A valid statement can be : p.sprintf("This is a{TCP: TCP}{UDP: UDP}{ICMP:n ICMP} packet") p.sprintf("{IP:%IP.dst% {ICMP:%ICMP.type%}{TCP:%TCP.dport%}}") A side effect is that, to obtain "{" and "}" characters, you must use "%(" and "%)". RRt(Rt)iRis8Bad condition in format string: [%s] (read sprintf doc!)RRiR&RRsBad format string [%%%s%s]is...Rs%H:%M:%S.%%06ii@Bs%%%s,%s:%s.%s%%iRgs%%%s%%(trindexRSRmRRZR[R<RpRqRRRrRRbt localtimeRMRRURDRPR"(R REtrelaxtescapeRRR7RRRRRtsfclsfldtfclsfldRtclsfldRR.tnumRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRU-s      #     ) @# )  ! cCsdS(s3DEV: can be overloaded to return a string that summarizes the layer. Only one mysummary() is used in a whole packet summary: the one of the upper layer, except if a mysummary() also returns (as a couple) a list of layers whose mysummary() must be called if they are present.R((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt mysummaryscCs|iidd\}}}|od|}nd}| p|i|jo=|i}t|tjo|\}}||7}qn|p|o d}n|p|ii}nd||f}|o|||fSn|SdS(s&Prints a one line summary of a packet.tinternis / Rs%s%sN(RR7RRRRoR(R RtfoundRtneededRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR7s"   cCs|ii|S(s&Returns the uppest layer of the packet(Rt lastlayer(R tlayer((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs"t|i}|||_dS(s@Reassembles the payload and decode it using another packet classN(RR(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytdecode_payload_asscCsd|iiiGH|it|}x|iD]t}|i|i}|djo d}n4t|tjot|}ndt|}d||ifGHq4WdGHdS(sbNot ready yet. Should give the necessary C code that interfaces with libnet to recreate the packetslibnet_build_%s(is"%s"s %s, /* %s */s);N( RRRJRRcRbRRRr(R tdetRRB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytlibnets   cCs g}x|iiD]\}}|i|}t|to|i}nW|io@|io6t|t jo#ddi t ti|}n t |}|i d||fqWd|iidi |f}|ii}|o|d|7}n|S(sTReturns a string representing the command you have to type to obtain the same packets[%s]R&s%s=%ss%s(%s)s, R(RCROR R`R(tcommandR+R,RRRURNRRfRRR(R RtfntfvR.Rtpc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs '# N(URRR@RRRRcRMRIRiRGRTRRaRRFRHRKR RSR[RUR]R RR`R^R_RRbRxRRcRdReRfRVRRrRoRsRtRuRvRwRyR{R'R|RR}RRR{RRRRRR$RRRRRPRRRRRRR<RWRFRCRRRRURR7RRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR(9s                                 %         i     t ASN1_PacketcBs/eZdZdZdZdZdZRS(cCs)|ii}|i|||_dS(N(R?R+R[Rc(R R\((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRSs cCs|ii|S(N(R?R'(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRwscCs|ii||S(N(R?R$(R R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRsN(RRRR?R*RSRwR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs   RRcBs7eZdZdZdZdZdZdZdZdZ dZ d Z d Z d d Z d Zd dZdZdZdZdZdZdZdZdZdZdZdZdd#dZddddZdZd d Zd!Z d"Z!RS($cOsP|iid}|djo-ti||_}ti|||n|S(Nt __singl__(R?RRtobjectRRR(R (RR\RAtsingl((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  cOsdS(N((R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsdS(N((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRUscCstddS(Ns'Can't add payload to NoPayload instance(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsdS(N((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR`scCsdS(N((R Ri((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR^scCsdS(N((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR_scCs|S(N((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsdS(NR((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVscCsdS(NR((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCstS(N(RZ(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRusicCsdS(NR((R Rz((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR'scCs|S(N((R Rc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR|scCs dgfS(NR((R Rz((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR}scCst|dS(N(R(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRb scCst|dS(N(R(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRx scCst|dS(N(R(R RERB((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRcscCst|dS(N(R(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRescCsQ||ijo|i|Sn/||iijo|ii|Sn t|dS(N(R?RR(R RE((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cCsdS(N((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs tgS(N(RM(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRPscCst|totSntS(N(R`RRR[RZ(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsdS(NR((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!scCst|tp t|tS(N(R`RRRY(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#scCsdS(Ni((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR<%sicCs"|dj o|i|ndS(N(RRf(R RR R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRW's iRcCsdS(N((R RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR+scCs#|odSntd|dS(Ns??sFormat not found [%s](R(R RER((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRU-scCs ddgfS(NiR((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR72scCs|S(N((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR4scCsdS(NR((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR6sN("RRRR RURR`R^R_RRVRRuR'R|R}RbRxRcReRRRPRRRR<RRWRRUR7RR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRRs>                            RVcBs)eZdZeddgZdZRS(RVR!RcCsdS(Ni((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRBs(RRRRfRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRV?sRYcBseZdZddZRS(RYicCs |odSnti|SdS(NR(RVR'(R Rz((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR'Ks(RRRR'(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRYIsRcBsPeZdZedededdegZdZdZ dZ RS(tEthernetRRORicCs tid|i|iiS(NR/(RRRRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVscCsBt|to.|i|ijo|ii|iSq>ndS(Ni(R`RRRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRXscCs |idS(Ns%src% > %dst% (%type%)(RU(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR]s( RRRRARDRt ETHER_TYPESRcRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRQs    tPPPoEc BskeZdZedddedddeddhdd<edded d gZd Z RS( sPPP over EthernettversioniiRtcodeitSessiont sessionidRqcCsT||7}|idjo6t|d}|d tid||d}n|S(Niis!H(RqRRR(R RcRxR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRyhs  &N( RRRRRRYRWRRcRy(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR`s tPPPoEDc BseZdZedddedddeddhdd<dd <d d <d d <dd<eddeddgZRS(sPPP over Ethernet DiscoveryRiiRRi tPADItPADOitPADRitPADSietPADTiRiRqN( RRRRRRYRWRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRos < tDot3cBsVeZdZedeedeedddgZdZ dZ dZ RS( s802.3RRORqR/cCs|i}|| ||fS(N(Rq(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR|s cCs+t|to|ii|iSndS(Ni(R`RRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsd|i|ifS(Ns 802.3 %s > %s(ROR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRsN( RRRR?Rt ETHER_ANYRRRcRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRws    tLLCcBs8eZdZeddeddeddgZRS(R tdsapitssapR(RRRRURTRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s  t CookedLinuxcBskeZdZeddhdd<dd<eddedded d d ed d egZ RS(s cooked linuxtpkttypeitunicasts sent-by-usit lladdrtypeit lladdrlenRORiRi( RRRRRYRWRnRRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s   tSNAPcBs/eZdZeddeddegZRS(RtOUIiR(RRRRVRRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs tDot1QcBs}eZdZegZedddedddedddeddegZd Z d Z d Z d Z RS( s802.1QtprioiiRitvlani RcCset|toA|i|ijo*|i|ijo|ii|iSqan|ii|SdS(Ni(R`RRRRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cCs|idjotSntS(Ni(RR RV(R Rx((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs6|idjo||i ||ifSn|dfS(Ni(RR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs8t|ito|iidSn|idSdS(NsA802.1q %Ether.src% > %Ether.dst% (%Dot1Q.type%) vlan %Dot1Q.vlan%s'802.1q (%Dot1Q.type%) vlan %Dot1Q.vlan%(R`RiRRU(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs( RRRRRMRRRRcRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs    tRadioTapc'BseZdZeddeddedd.dddded d.d d d d ddddddddddddddddddd d!d"d#d$d%d&d'd(d)d*g edd+d,d-gZRS(/sRadioTap dummyRiRVRqt notdecodeds@HRwcCs|dS(i((RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKstpresentitTSFTtFlagstRatetChanneltFHSSt dBm_AntSignalt dBm_AntNoiset Lock_QualitytTX_AttenuationtdB_TX_Attenuationt dBm_TX_PowertAntennat dB_AntSignalt dB_AntNoisetb14tb15tb16tb17tb18tb19tb20tb21tb22tb23tb24tb25tb26tb27tb28tb29tb30tExtRRkcCs |idS(i(Rq(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKsN( RRRRTRtRRRqRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs    tSTPcBseZdZeddeddeddeddeddedeedded ded eed ded d eddeddeddgZ RS(sSpanning Tree ProtocolRiRtbpdutypet bpduflagstrootidtrootmactpathcosttbridgeidt bridgemactportidtageitmaxageit hellotimeitfwddelayi( RRRRWRTR?R RZRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR:s             tEAPOLc BseZdZeddeddddddd ged dd gZdZdZ d Z d Z dZ dZ dZdZdZRS(RGRiRit EAP_PACKETtSTARTtLOGOFFtKEYtASFRqR/iiicCs|i}|| ||fS(N(Rq(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cCst|i|iiS(N(RRRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsUt|toA|i|ijo*|i|ijo|ii|iSqQndS(Ni(R`RGRRHRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cCs |idS(NsEAPOL %EAPOL.type%(RU(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRsN(RRRRTRRRRcRHRIRJRKRLRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRGs    tEAPc BseZdZeddhdd<dd<dd<d d<ed d ed deed d hdd<dd<dgZdZ dZ dZ dZ dZ dZdZdZRS(RMRitREQUESTitRESPONSEitSUCCESSitFAILURERiRqRtIDR{cCs|ititigjS((RRMRPRQ(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKscCst|to|i|ijodSq|i|ijo2|i|ijo|i|ijodSqq|i|ijodSqndS(Nii(R`RMRRNROR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  cCsd|idjoLt|t|}|d t|d?d@t|d@|d}n||S(Niiii(RqRR(R RcRxR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRys6N(RRRRRTRWRR6RcRNRORPRQtTYPE_IDtTYPE_MD5RRy(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRMs3  3 Rc BseZdZeddeddeeddedded dhdd <d d <d d<dd<dd<dd<dd<dd<dd<ede dde de e ddg Z dZd ZdZdZd ZRS(!RthwtypeitptypeithwlenitpleniRswho-hasisis-atisRARP-reqsRARP-repis Dyn-RARP-reqs Dyn-RAR-repis Dyn-RARP-erris InARP-reqi s InARP-repRtpsrcRthwdsts0.0.0.0cCsYt|toE|i|ijo.|i|ijo|i|ijodSqUndS(Nii(R`RRtis_attwho_hasRYR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR&s  cCs d|fS(NR((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR-scCs^|i|ijod|i|ifSn0|i|ijod|i|ifSndSdS(NsARP is at %s says %ssARP who has %s says %ss$ARP %ARP.op% %ARP.psrc% > %ARP.pdst%(RR[RRYR\R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR/s (RRRRYRRRTRRGRRR?R RORcR\R[RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs   `     R\cBseZdZedddedddeddeddedded dd d d d gedddedde dde e dde e dde eddeddg ZdZdZddZdZdZdZRS( R\RiRttosiRqRiRitMFtDFteviltfragi RQi@RtchksumRORs 127.0.0.1RRcCs|i}|djo;t|d}t|id@d>|d@B|d}n|idjo<t|t|}|d tid||d}n|idjo>t|}|d t|d?t|d@|d }n||S( Niiiis!Hi iii ( RRRqRRRRRbR(R RcRxRRtck((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRyHs  +& 2cCs&|i|id>}|| ||fS(Ni(RqR(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRUscCsxxq|D]i}y#|it||idfWn%tij o}ti|nX|oti|qqWdS(Ni(tsendtoRRR4RRRtsleep(R RtslpRcR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRYs#cCs|itijo:t|ito'|iidjo|iiiSnxti oMti oCt t |i t |itid|i|iiSn!tid|i|iiSdS(Niiii i Rj(iiii i (RR4t IPPROTO_ICMPR`RR2RRRt checkIPsrct checkIPaddrRR5RORRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRasCcCst|tpdSntio|i|ijodSn|itijo=t|i t o*|i i djo|i i i |SnLtio|i|ijp|i|ijodSn|i i |i SdS(Niiiii i (iiii i ( R`R\RRiRRORR4RgRR2RR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRkscCs2|id}|io|d|i7}n|S(Ns%IP.src% > %IP.dst% %IP.proto%s frag:%i(RURa(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{s N(RRRRRRURWRRTRt IP_PROTOSRYR-RRRORRcRyRRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\8s(        R0c BseZdZeddeeddeeddeddeddd ed dd ed d d de dde dde dde dhg Z dZ dZdZdZRS(R0tsportiRaiPRitackRitreservedRiitFSRPAUECtwindowi RbturgptrRcCs||7}|i}|djofdt|idi||idd}|d t|d>t|dd@B|d}n|idjo't |i t o|i idj o|i id}n t|}t i d t|i it|i i|i i|}t||}|d t i d ||d }qt |i tpt |i to>tti|i |}|d t i d ||d }qtd n|S(NiRiii ii is!4s4sHHis!His3No IP underlayer to compute checksum. Leaving null.(RRRqR R!RRRRbR`RiR\RRR5RORRRRt_IPv6OptionHeadert in6_chksumR4t IPPROTO_TCPR(R RcRxRtlntpsdhdrRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRys,   06    &&&cCsFtio+tid|i|iA|iiSn|iiSdS(NR/(RRhRRRkRaRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs +cCst|tpdSntio2|i|ijo|i|ijpdSqTnt|i|idt |i jodSndS(Niii( R`R0RRhRkRaRRRlRqR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  *cCs_t|ito|iidSn5t|ito|iidSn|idSdS(Ns;TCP %IP.src%:%TCP.sport% > %IP.dst%:%TCP.dport% %TCP.flags%s?TCP %IPv6.src%:%TCP.sport% > %IPv6.dst%:%TCP.dport% %TCP.flags%s)TCP %TCP.sport% > %TCP.dport% %TCP.flags%(R`RiR\RUR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs N(RRRRt TCP_SERVICESRZRRRRWRYRRcRyRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR0s         R1cBsweZdZeddeeddeedd edd gZdZ dZ dZ d Z d Z RS( R1Rki5RaRqRbcCs||7}|i}|djo2t|}|d tid||d}n|idjo't|ito|iidj o|iid}n t|}tidt|ii t|ii |ii |}t ||}|d tid||d}qt|it pt|ito>tti|i|}|d tid||d}qtdn|S(Nis!Hiis!4s4sHHis3No IP underlayer to compute checksum. Leaving null.(RqRRRRbR`RiR\R5RORRRRRqRrR4t IPPROTO_UDPR(R RcRxRRtRuRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRys,    &    &&&cCs|id}|| ||fS(Ni(Rq(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cCs |iiS(N(RR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsTt|tpdSntio|i|ijodSqAn|ii|iS(Ni(R`R1RRhRaRkRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs   cCs_t|ito|iidSn5t|ito|iidSn|idSdS(Ns/UDP %IP.src%:%UDP.sport% > %IP.dst%:%UDP.dport%s3UDP %IPv6.src%:%UDP.sport% > %IPv6.dst%:%UDP.dport%sUDP %UDP.sport% > %UDP.dport%(R`RiR\RUR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs N(RRRRt UDP_SERVICESRWRRYRcRyRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR1s     s echo-replys dest-unreachs source-quenchtredirects echo-requestsrouter-advertisementsrouter-solicitations time-exceededsparameter-problemstimestamp-requeststimestamp-replysinformation-requestsinformation-responsesaddress-mask-requestsaddress-mask-replyR2cBs@eZdZeddeeddeddeedddeeddd ee d dd ee d dd ee dddee dddeedddee dddee dddg Z dZdZdZdZdZRS(R2RiRiRbRcCs |idjS(iii iii(iii iii(R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKsRcCs |idjS(iii iii(iii iii(R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK stts_oricCs |idjS(i i(i i(R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK stts_rxcCs |idjS(i i(i i(R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK stts_txcCs |idjS(i i(i i(R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK sRcs0.0.0.0cCs |idjS(i(R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK stptrcCs |idjS(i (R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKsRmcCs |idjS(i (R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKstunusedc Cs |idjS( iiii i iii(iiii i iii(R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKscCs\||7}|idjo>t|}|d t|d?t|d@|d}n|S(Niiii(RbRRR(R RcRxRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRys   2cCs&tid|i|i|iiS(NtHH(RRRRRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCsot|tpdSn|i|ifd d d d gjo.|i|ijo|i|ijod SndS(Niii iiiiii(ii(i i(ii(ii(R`R2RRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs%cCs |idjotSndSdS(Niiii i (iiii i (RtIPerrorR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$scCs8t|ito|iidSn|idSdS(Ns0ICMP %IP.src% > %IP.dst% %ICMP.type% %ICMP.code%sICMP %ICMP.type% %ICMP.code%(R`RiR\RU(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR)sN(RRRRt icmptypesRTRYRR6RRORVRZRcRyRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR2s$     RcBs eZdZdZdZRS(s IP in ICMPcCst|tpdSntidjp|i|ijor|i|ijo_tidjp?|i|ijp,tidjo,|iti |ijo|i |i jpdSn|i i |i S(Nii( R`R\RRhRROt checkIPIDRR4thtonsRRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR5s#,cCs ti|S(N(R(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR@s(RRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR3s tTCPerrorcBs eZdZdZdZRS(s TCP in ICMPcCst|tpdSntio2|i|ijo|i|ijpdSqTntiob|idj o|i|ijodSqn|i dj o|i |i jodSqqndS(Nii( R`R0RRhRkRatcheck_TCPerror_seqackRRRl(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRFs    cCs ti|S(N(R(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRUs(RRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRDs tUDPerrorcBs eZdZdZdZRS(s UDP in ICMPcCsXt|tpdSntio2|i|ijo|i|ijpdSqTndS(Nii(R`R1RRhRkRa(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR[s  cCs ti|S(N(R(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRcs(RRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRYs t ICMPerrorcBs eZdZdZdZRS(s ICMP in ICMPcCst|tpdSn|i|ijo|i|ijpdSn|idjo6|i|ijo|i|ijodSqdSndSdS( Niii iiii(iii iii(R`R2RRRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRjscCs ti|S(N(R(R(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRxs(RRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRhs RcBs&eZdZdZdZdZRS(s,See http://namabiiru.hongo.wide.ad.jp/scapy6sIPv6 not implemented here.cOsti|idS(N(RRR(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR ~scCsdS(Ns((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVs(RRRWRR RV(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{s RqcBs&eZdZdZdZdZRS(s,See http://namabiiru.hongo.wide.ad.jp/scapy6sIPv6 not implemented here.cOsti|idS(N(RRR(R R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR scCsdS(Ns((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRVs(RRRWRR RV(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRqs tL2TPc BsweZeddhdd<edd eddeddeddedded dgZd ZRS( tpkt_typeiRRqt tunnel_idit session_idtnstnrtoffsetcCsT|idjo<t|t|}|d tid||d}n||S(Nis!Hi(RqRRR(R RRxR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRys&N(RRRRWRRcRy(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs     sPadding ProtocolsROHC small-CID [RFC3095]sROHC large-CID [RFC3095]sInternet Protocol version 4i!sOSI Network Layeri#s Xerox NS IDPi%sDECnet Phase IVi't Appletalki)s Novell IPXi+sVan Jacobson Compressed TCP/IPi-s Van Jacobson Uncompressed TCP/IPs Bridging PDUi1sStream Protocol (ST-II)i3s Banyan Vinesi5s'reserved (until 1993) [Typo in RFC1172]i7sAppleTalk EDDPi9sAppleTalk SmartBufferedi;sMulti-Link [RFC1717]i=sNETBIOS Framingi?s Cisco SystemsiAsAscom TimeplexiCs-Fujitsu Link Backup and Load Balancing (LBLB)iEsDCA Remote LaniGs)Serial Data Transport Protocol (PPP-SDTP)iIsSNA over 802.2iKtSNAiMsIPv6 Header CompressioniOsKNX Bridging Data [ianp]iQsEncryption [Meyer]iSs"Individual Link Encryption [Meyer]iUs$Internet Protocol version 6 [Hinden]iWsPPP Muxing [RFC3153]iYs1Vendor-Specific Network Protocol (VSNP) [RFC3772]i[sRTP IPHC Full Header [RFC3544]ias!RTP IPHC Compressed TCP [RFC3544]ics%RTP IPHC Compressed Non TCP [RFC3544]ies#RTP IPHC Compressed UDP 8 [RFC3544]igs#RTP IPHC Compressed RTP 8 [RFC3544]iisStampede BridgingiosReserved [Fox]iqsMP+ Protocol [Smith]iss#reserved (Control Escape) [RFC1661]i}s+reserved (compression inefficient [RFC1662]s!Reserved Until 20-Oct-2000 [IANA]iisNTCITS IPI [Ungar]isreserved (PPP NLID)is.single link compression in multilink [RFC1962]iscompressed datagram [RFC1962]is"reserved (compression inefficient)is802.1d Hello PacketsisIBM Source Routing BPDUisDEC LANBridge100 Spanning Treeis!Cisco Discovery Protocol [Sastry]isNetcs Twin Routing [Korfmacher]i s)STP - Scheduled Transfer Protocol [Segal]i s*EDP - Extreme Discovery Protocol [Grosser]i s3Optical Supervisory Channel Protocol (OSCP)[Prasad]iitLuxcomi1sSigma Network Systemsi3s'Apple Client Server Protocol [Ridenour]i5sMPLS Unicast [RFC3032] isMPLS Multicast [RFC3032]is1IEEE p1284.4 standard - data packets [Batchelder]is-ETSI TETRA Network Protocol Type 1 [Nieminen]is-Multichannel Flow Treatment Protocol [McCann]is*RTP IPHC Compressed TCP No Delta [RFC3544]ic s RTP IPHC Context State [RFC3544]ie s$RTP IPHC Compressed UDP 16 [RFC3544]ig s$RTP IPHC Compressed RTP 16 [RFC3544]ii s,Cray Communications Control Protocol [Stage]i@s1CDPD Mobile Network Registration Protocol [Quick]i@s&Expand accelerator protocol [Rachmani]i@sODSICP NCP [Arvind]i@sDOCSIS DLL [Gaedtke]i @s,Cetacean Network Detection Protocol [Siller]i @sStacker LZS [Simpson]i!@sRefTek Protocol [Banfill]i#@sFibre Channel [Rajagopal]i%@sEMIT Protocols [Eastham]i'@s(Vendor-Specific Protocol (VSP) [RFC3772]i[@s"Internet Protocol Control Protocoli!s"OSI Network Layer Control Protocoli#sXerox NS IDP Control Protocoli%s DECnet Phase IV Control Protocoli'sAppletalk Control Protocoli)sNovell IPX Control Protocoli+Rmi-i/s Bridging NCPi1s Stream Protocol Control Protocoli3sBanyan Vines Control Protocoli5sreserved (until 1993)i7i9i;sMulti-Link Control Protocoli=s NETBIOS Framing Control Protocoli?sCisco Systems Control ProtocoliAiCsFujitsu LBLB Control ProtocoliEs/DCA Remote Lan Network Control Protocol (RLNCP)iGs'Serial Data Control Protocol (PPP-SDCP)iIsSNA over 802.2 Control ProtocoliKsSNA Control ProtocoliMs'IP6 Header Compression Control ProtocoliOs$KNX Bridging Control Protocol [ianp]iQs#Encryption Control Protocol [Meyer]iSs3Individual Link Encryption Control Protocol [Meyer]iUsIPv6 Control Protovol [Hinden]iWs%PPP Muxing Control Protocol [RFC3153]iYs:Vendor-Specific Network Control Protocol (VSNCP) [RFC3772]i[s"Stampede Bridging Control ProtocoliosMP+ Control Protocol [Smith]isiqsNot Used - reserved [RFC1661]i}iis#NTCITS IPI Control Protocol [Ungar]iiπs6single link compression in multilink control [RFC1962]is&Compression Control Protocol [RFC1962]iis)Cisco Discovery Protocol Control [Sastry]ii sSTP - Control Protocol [Segal]i s7EDPCP - Extreme Discovery Protocol Ctrl Prtcl [Grosser]i s/Apple Client Server Protocol Control [Ridenour]i5sMPLSCP [RFC3032]is5IEEE p1284.4 standard - Protocol Control [Batchelder]is+ETSI TETRA TNP1 Control Protocol [Nieminen]iisLink Control Protocoli!s Password Authentication Protocoli#sLink Quality Reporti%s&Shiva Password Authentication Protocoli's CallBack Control Protocol (CBCP)i)s4BACP Bandwidth Allocation Control Protocol [RFC2125]i+s BAP [RFC2125]i-s8Vendor-Specific Authentication Protocol (VSAP) [RFC3772]i[s Container Control Protocol [KEN]is+Challenge Handshake Authentication Protocoli#s&RSA Authentication Protocol [Narayana]i%s,Extensible Authentication Protocol [RFC2284]i's0Mitsubishi Security Info Exch Ptcl (SIEP) [Seno]i)s(Stampede Bridging Authorization Protocolios)Proprietary Authentication Protocol [KEN]is/Proprietary Authentication Protocol [Tackabury]is1Proprietary Node ID Authentication Protocol [KEN]itHDLCcBs&eZeddeddgZRS(taddressitcontroli(RRRURc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR3s t PPP_metaclasscBseZddZRS(cOsc|}|o|ddjo t}n|i||i|i|i}|id||||S(NisRW(RRRt __bases__R?R (R RWR\RARR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt__call__8s  !N(RRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR7stPPPcBs)eZeZdZeddegZRS(sPPP Link LayerRi!(RRRRRRt _PPP_protoRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRAssConfigure-Requests Configure-Acks Configure-NaksConfigure-RejectsTerminate-Requests Terminate-Acks Code-RejectsProtocol-Rejects Echo-Requests Echo-ReplysDiscard-Requests Reset-Requests Reset-AcktPPP_Option_metaclasscBs#eZhZddZdZRS(cOsq|}|o)t|d}|ii||}n|i||i|i|i}|id||||S(NiRW(Rt_known_optionsRRRRR?R (R RWR\RARRTR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRWs!cCs||i|idid}|idjo't|itod|ii }nd||fS(NtQrytAnsRis "%s"s DNS %s%s ( RRR`RRRRRRR(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs ##N( RRRRWRRRRRRRcRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs( -H    RtALLtAtNStMDtCNAMEtSOAtMBtMGtMRRtWKStPTRtHINFOtMINFOtMXtTXTtRPtAFSDBtAAAAitSRVtA6i&tDNAMEtIXFRtAXFRitMAILBtMAILAitINtCStCHtHSRcBsDeZdZdZeddeddeeddegZRS(sDNS Question RecordiRRtqtypeitqclass( RRRRRRt dnsqtypest dnsclassesRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  Rc BsneZdZdZeddeddeeddeedde de d dd d gZ RS( sDNS Resource RecordiRRRitrclassRQRRRkcCs|iS((R(R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK#s( RRRRRRtdnstypesRRZR RRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs   scSctBOOTPcBseZdZeddhdd<dd<eddedded d ed d ed d ed d ddeddeddeddedde ddde ddde ddde ddgZ dZ dZ dZd ZRS(!RRit BOOTREQUESTt BOOTREPLYithtypethleniRVitxidtsecsRis???????????????Btciaddrs0.0.0.0tyiaddrtsiaddrtgiaddrtchaddrRt16stsnamet64stfilet128sRcCs6|itt tjotSnti||SdS(N(RRqt dhcpmagictDHCPR(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR9scCsY|itt tjo7|itt}|itt |_|dfSndSdS(NR(RN(RRqRR(R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR>s cCstid|iS(NtL(RRR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRFscCs(t|tpdSn|i|ijS(Ni(R`RR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRHs(RRRRRTRZRWRRORRfRcRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR(s(!            tdiscovertoffertrequesttdeclineRltnaktreleasetinformt force_renewt lease_querytlease_unassignedt lease_unknownt lease_activeRVt subnet_masks0.0.0.0t time_zonetroutert time_servertIEN_name_servert name_servert log_servert cookie_servert lpr_serverthostnamet dump_pathtdomaintroot_disk_pathtmax_dgram_reass_sizeit default_ttlt pmtu_timeoutitbroadcast_addresstarp_cache_timeoutt ether_or_dot3i$ttcp_ttlttcp_keepalive_intervalttcp_keepalive_garbaget NIS_domaini(t NIS_servert NTP_serveri*tvendor_specifictNetBIOS_serveri,tNetBIOS_dist_servertrequested_addri2t lease_timeit server_idi6tparam_req_listt max_dhcp_sizeit renewal_timei`Ti:trebinding_timeitvendor_class_idi<t client_idtNISplus_domaintNISplus_servert SMTP_servert POP3_serveriFt NNTP_servert WWW_serveriHt Finger_servert IRC_serveriJtStreetTalk_servertStreetTalk_Dir_AssistanceiLtrelay_agent_InformationiRs message-typeRWtDHCPOptionsFieldcBs2eZdZdZdZdZdZRS(icCsg}x|D]}t|tjot|d joti|doHtt|ddto,t|dd}|i||d}nt|d}d|d|f}t|djo|d|d7}n|i |q |i t |q Wddi |S( Niiiis%s=%ss (garbage=%r)s[%s]RT(ii( RRoRqtDHCPRevOptionsRR`RR"RRfRRU(R RR6RR RtvvRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"s&0cCsd|i||fS(NR(R (R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$sc Csg}x|ot|d}|djo|id|d}q n|djo|id|d}q nt|djp!t|t|ddjo|i|Pq ti|ot|}t|to@t|d}|i||d|d!f||d}qt|d}y'|i||d|d!\}}Wn|i|PnX|o|i||f} n|i|f} |i| ||d}q t|d}|i||d|d!f||d}q W|S(NiiRWiRVi( RRfRqRYRR`RR$R( R RR6RRbRRRRBtotuple((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR sF       4  '  c Cst|tjo|Snd}x|D]}t|tjo t|d jo|d \}}t|to||}}nnti|oLt|\}} | djo |}q| i |d| i ||}nt d|q(t|djo||d7}n|t |7}|t t|7}||7}q(t|tjoAti|o1t|ddjo|t t|d7}q(t|tjo|t |d7}q(t|tjo||7}q(t d|q(W|S( NRiisUnknown field option %siiRhsMalformed option %s(ii( RRRoRqR`RrR8RRR#RRR( R RR6RRbRRBRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR!s<&  %#(RRR+R"R$R R!(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR7s    (RcBs eZdZeddgZRS(s DHCP optionsRR(RRRR7Rc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRsRcBseZdZedddeddddddd ged dded dd d dddddddgeddedee dee dee dde deg Z dZdZdZd ddZRS(!s802.11RKiiRit ManagementtControlRNtReservedRRNisto-DSsfrom-DSR^tretryspw-mgtRtweptorderRRtaddr1taddr2taddr3tSCtaddr4cCs |idS(NsA802.11 %Dot11.type% %Dot11.subtype% %Dot11.addr2% > %Dot11.addr1%(RU(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR"scCsr|idjo8|idjo(|idjo|idjotSn'|id@otSnti||SdS(Niiii i@(RRKtDot11QoSRNRR(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s @cCst|to|idjo|ii|iijodSn|i|ifdd d gjodSn|i|ijo djno|ii|iSqq |idjodSq |idjo|ii|iSq |idjodSq ndS( Niiiiiii (ii(ii(ii( R`RRRARJRBRKRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR+s"$ icCs|id@djo|otdndSnt|iito\|p tio|ii|nt|iito|otdndSqn|idM_|ii|_dS(Ni@isNo WEP to removes,Dot11 can't be decrypted. Check conf.wepkey.i(RNRR`RRRRtwepkeytdecrypt(R Rtwarn((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR;s N(RRRRRRRWR?R RJRLRRMRcRRRRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs*        RFcBseeZdZedd dedd dedd dedd dedd gZd ZRS( s 802.11 QoStTIDitEOSPis Ack PolicyiR=tTXOPcCs@t|ito|iid@otSq0nti||S(Ni@(R`RiRRNRR(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRRs N(RRRRRRTRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRFKstres8tres9s short-slottres11tres12s DSSS-OFDMtres14tres15tESStIBSStCFPsCFP-reqtprivacysshort-preambletPBCCtagilitytunspecs auth-expiredsdeauth-ST-leavingt inactivitysAP-fullsclass2-from-nonauthsclass3-from-nonasssdisas-ST-leavings ST-not-authtsuccesstfailurescannot-support-all-caps inexist-assos asso-deniedsalgo-unsupporteds bad-seq-numschallenge-failureRsrate-unsupportedRcBs>eZdZeddeddedddegZRS(s 802.11 BeaconRitbeacon_intervalidtcapi(RRRRRXRtcapability_listRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRis  tDot11EltcBseZdZeddhdd<dd<dd<dd <d d <d d <dd<dd<dd<dd<dd<dd<dd<dd<dd<edd&d d!ed d"d#d$gZd%ZRS('s802.11 Information ElementRRitSSIDtRatesitFHsetitDSsetitCFsetitTIMitIBSSsetit challengeitERPinfoi*sQoS Capabilityi.i/tRSNinfoi0tESRatesi2tvendoriRmiDRqRuRjRRkcCs|iS((Rq(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKuscCs6|idjodt|itgfSndSdS(NisSSID=%sR(RRRRuR(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRvsN( RRRRRtRRqRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR`ps UAt Dot11ATIMcBseZdZRS(s 802.11 ATIM(RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRm|st Dot11DisascBs#eZdZeddegZRS(s802.11 Disassociationtreasoni(RRRRt reason_codeRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRnst Dot11AssoReqcBs2eZdZedddeeddgZRS(s802.11 Association RequestR^iitlisten_intervali(RRRRR_RXRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRqst Dot11AssoRespcBs>eZdZedddeeddeddgZRS(s802.11 Association ResponseR^iitstatustAID(RRRRR_RXRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRss tDot11ReassoReqcBs>eZdZedddeedeeddgZRS(s802.11 Reassociation RequestR^iit current_APRri( RRRRR_R?R RXRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRvs tDot11ReassoRespcBseZdZRS(s802.11 Reassociation Response(RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRxst Dot11ProbeReqcBseZdZRS(s802.11 Probe Request(RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRystDot11ProbeRespcBs>eZdZeddeddedddegZRS(s802.11 Probe ResponseRiR]idR^i(RRRRRXRR_Rc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRzs  t Dot11AuthcBsMeZdZeddddgeddeddegZdZRS(s802.11 AuthenticationtalgoiRlt sharedkeytseqnumRtcCs#|i|idjodSndS(Nii(R~(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs(RRRRRXt status_codeRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{s  t Dot11DeauthcBs#eZdZeddegZRS(s802.11 DeauthenticationRoi(RRRRRpRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRsRcBsteZdZedddeddedddded dgZd Z d Z d Z dd Z RS(s802.11 WEP packettivtitkeyiditwepdataRiticvcCs|idS(N(RH(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs%|idjoti|SndS(NR(RRR(R{(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{scCs|idjoti}|ox|idjo&|tidt|7}d}n|dd!}ti |i |}|d |i ||}qt dn|S(Nsd?<d@dA<dBdC<dDdE<dFdG<dHdI<dHdJ<edKdLedMdRedNdOdPgZdQZ RS(SRRisAccess-Requests Access-Acceptis Access-RejectisAccounting-RequestisAccounting-AcceptisAccounting-StatusisPassword-Requestis Password-AckisPassword-Rejecti sAccounting-Messagei sAccess-Challengei s Status-Serveri s Status-Clienti sResource-Free-RequestisResource-Free-ResponseisResource-Query-RequestisResource-Query-Responseis"Alternate-Resource-Reclaim-RequestisNAS-Reboot-RequestisNAS-Reboot-Responseis Next-PasscodeisNew-PinisTerminate-SessionisPassword-Expiredi s Event-Requesti!sEvent-Responsei"sDisconnect-Requesti(sDisconnect-ACKi)sDisconnect-NAKi*s CoA-Requesti+sCoA-ACKi,sCoA-NAKi-sIP-Address-Allocatei2sIP-Address-Releasei3sExperimental-useiR=iiRiRqt authenticatorRicCsV||7}|i}|djo2t|}|d tid||d}n|S(Nis!Hi(RqRRR(R RcRxR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRys     &N( RRRRRTRWRRnRcRy(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRZsT                                      tRIPcBseZdZeddhdd<dd<dd<dd <d d <d d <dd<dd<dd<dd<dd<eddeddgZRS(s RIP headerRitreqtrespittraceOnittraceOffitsunittrigReqittrigRespittrigAckit updateReqi t updateRespi t updateAcki Rtnulli(RRRRRTRWRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs :$ tRIPEntryc BsteZdZeddhdd<eddeddedded ded d hd d <gZRS(s RIP entrytAFiR\tRouteTagiRes0.0.0.0RtnextHoptmetricitUnreachi(RRRRRWRORRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs    RtSAtProposalt TransformtKERRtCERTtCRtSIGtNoncet NotificationtDeletetVendorIDR_sidentity prot.s auth onlyt aggressiveRut ISAKMP_classcBseZdZRS(cCs^|i}|djotSn=|ttjo%t|}tid|tSntSdS(NisISAKMP_payload_%s(t next_payloadRVRqtISAKMP_payload_typetglobalsRtISAKMP_payload(R RtnpR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs   (RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRstISAKMPcBseZdZedddedddeddeedded deed ddd d d dddddge dde ddgZ dZ dZ dZRS(Rt init_cookieRit resp_cookieRiRit exch_typeRt encryptiontcommitt auth_onlytres3tres4tres5tres6tres7RRocCs&|id@otSnti||S(Ni(RRVRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRscCs3t|to|i|ijodSq/ndS(Nii(R`RR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs cCsJ||7}|idjo,|d tidt||d}n|S(Nis!Ii(RoRRRRq(R RcRx((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRys ,N(RRRRnRRRUtISAKMP_exchange_typeRRZRRcRRRy(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs *   tISAKMP_payload_Transformc BseZdZeddeeddeddeddeddhdd<ed ded dd d gZ d Z RS(s IKE TransformRRiRoRRitKEY_IKEtres2t transformsRkcCs |idS(i(Ro(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKscCs`|idjoBt|}|d t|d?d@t|d@|d}n||7}|S(Niiii(RoRRqR(R RcRxR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRys  6 N( RRRRRRRTRWRRcRy(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs     tISAKMP_payload_ProposalcBseZdZeddeeddedddddded d ed d hd d <ed dddeddedddde de e ddg Z RS(s IKE proposalRRiRoRR/RwcCs|dS(i((RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKstproposaliRRtSPIsizetSPIRjttrans_nbRRkcCs|iS((R (R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKscCs |idS(i(Ro(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKsN( RRRRRRRTRtRqRjRVRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s   Rc Bs_eZdZedd eeddedd ddddedd d d gZ RS( sISAKMP payloadRRiRoR!R/RwcCs|dS(i((RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK sRRkcCs |idS(i(Ro(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK sN( RRRRRRRTRtRqRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRs  tISAKMP_payload_VendorIDc BsweZdZhhdd<e sN( RRRRZRnRtRRqRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR4 s     tSebekV2cBseZdZRS(cCs8t|ito|iidSn|idSdS(Ns?Sebek v%SebekHead.version% %SebekHead.type% (%SebekV2.command%)sSebek v2 (%SebekV2.command%)(R`RiRRU(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRE s(RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRD st SebekV3SockcBs eZdZeddeddeddeddeddeddd ed d ed d eddedd eddeddhdd<dd<dd<dd<dd<dd<dd<d d <ed!de g Z d"Z RS(#sSebek v2 socketRiRRRRRRi Ritdips 127.0.0.1RatsipRktcallitbindiRitlistenitacceptitsendmsgitrecvmsgi RdtrecvfromRcCs8t|ito|iidSn|idSdS(NsCSebek v%SebekHead.version% %SebekHead.type% (%SebekV3Sock.command%)s'Sebek v3 socket (%SebekV3Sock.command%)(R`RiRRU(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR^ s( RRRRZRnRORWRRRjRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK s&           t SebekV2SockcBseZdZRS(cCs8t|ito|iidSn|idSdS(NsCSebek v%SebekHead.version% %SebekHead.type% (%SebekV2Sock.command%)s'Sebek v2 socket (%SebekV2Sock.command%)(R`RiRRU(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRe s(RRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRd stMGCPc BseZdZdZeddddedddedd dded dded d dded ddeddddedddgZRS(RsMedia Gateway Control ProtocolRtAUEPRTitsep1ittransaction_idt1234567tsep2tendpointsdummy@dummy.nettsep3RsMGCP 1.0 NCS 1.0s tsep4(RRRtlongnameRRnRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRk stGPRScBs&eZdZeddddgZRS(t GPRSdummytdummyRtei(RRRRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR stHCI_HdrcBsYeZdZeddhdd<dd<dd<dd <d d <gZd ZRS( s HCI headerRiRitACLdatatSCOdataiRhiRlicCs |idS(Ns HCI %type%(RU(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRRRRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR sBt HCI_ACL_HdrcBsAeZdZeddeddeddgZdZRS(sHCI ACL headerthandleiRRqcCsd||7}|idjoFt|d}|d t|d@t|d?d@|d}n|S(Niiii(RqRR(R RcRxR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRy s  6N(RRRRTRXRRcRy(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s   t L2CAP_HdrcBsAeZdZeddeddhdd<gZdZRS(s L2CAP headerRqtcidiRicCsd||7}|idjoFt|d}|d t|d@t|d?d@|d}n|S(Niiii(RqRR(R RcRxR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRy s  6N(RRRRXRRRcRy(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s t L2CAP_CmdHdrcBseZdZeddhdd<dd<dd<d d <d d <d d<dd<dd<dd<dd<dd<eddeddgZdZdZ RS(sL2CAP command headerRitrejitconn_reqit conn_respitconf_reqit conf_respit disconn_reqit disconn_respitecho_reqt echo_respi tinfo_reqi t info_respi RiRqcCsd||7}|idjoFt|d}|d t|d@t|d?d@|d}n|S(Niiii(RqRR(R RcRxR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRy s  6cCs|i|ijor|idjodSn|idjoF|i|idjo/|idjodSn|ii|iSqndS( Niiiiii i(iiiii (RRRR(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s'N( RRRRRTRXRRcRyR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(  t L2CAP_ConnReqcBsJeZdZeddhdd<dd<dd<ed dgZRS( sL2CAP Conn ReqtpsmitSDPitRFCOMMistelephony controlitscid(RRRRRXRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s*tL2CAP_ConnRespc BskeZdZeddeddedddddgeddd d d d d ggZdZRS(sL2CAP Conn ResptdcidiR tresulttno_infot authen_pendt author_pendRtR[tpendtbad_psmt cr_sec_blockt cr_no_memcCs|i|ijS(N(R (R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRRRXRRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s  t L2CAP_CmdRejcBs eZdZeddgZRS(sL2CAP Command RejRoi(RRRRXRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR st L2CAP_ConfReqcBs,eZdZeddeddgZRS(sL2CAP Conf ReqR iR(RRRRXRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s tL2CAP_ConfRespc BsPeZdZeddeddeddddddggZd ZRS( sL2CAP Conf RespR iRR R[tunaccepttrejecttunknowncCs|i|ijS(N(R (R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRRRXRRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s   !tL2CAP_DisconnReqcBs,eZdZeddeddgZRS(sL2CAP Disconn ReqR iR (RRRRXRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s tL2CAP_DisconnRespcBs5eZdZeddeddgZdZRS(sL2CAP Disconn RespR iR cCs|i|ijS(N(R (R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s(RRRRXRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s t L2CAP_InfoReqcBsAeZdZeddhdd<dd<eddgZRS( sL2CAP Info ReqRitCL_MTUit FEAT_MASKiRR(RRRRRfRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR s!tL2CAP_InfoRespcBsJeZdZeddeddddgeddgZdZRS( sL2CAP Info RespRiR R[tnot_suppRRcCs|i|ijS(N(R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR !s(RRRRXRRfRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR !s  t NetBIOS_DSc BseZdZeddhdd<eddeddedded d ed ded de d de ddg Z dZ RS(sNetBIOS datagram serviceRit direct_groupRiRROs 127.0.0.1RkiRqtofstsrcnameRRScCsT||7}|idjo6t|d}|d tid||d}n|S(Nii s!Hi (RqRRR(R RcRxR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRy!s  &N( RRRRRTRYRORWRRpRcRy(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR !s       t IrLAPHeadc BsGeZdZedddedddhdd<dd<gZRS( s IrDA Link Access Protocol HeadertAddressiitTypeiitResponsetCommand(RRRRRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 3!st IrLAPCommandc BsteZdZeddeddeddeddedded d hd d <ed dgZRS( s!IrDA Link Access Protocol CommandR<isFormat identifiersSource addresssDestination addresslsDiscovery flagsis Slot numberitfinaltVersion(RRRRUR^RRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR! 9!s     tIrLMPcBs8eZdZeddeddeddgZRS(sIrDA Link Management Protocols Service hintsis Character sets Device nameR(RRRRYRURfRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$ D!s  tNBNSQueryRequestcBseZdZeddeddeddeddedded ded d ed d hdd <dd!<dd"<dd#<dd$<dd%<eddeddhdd<dd<eddhd d<g ZRS(&sNBNS query requestt NAME_TRN_IDitFLAGSitQDCOUNTitANCOUNTtNSCOUNTtARCOUNTt QUESTION_NAMEtwindowstSUFFIXiAAt workstationsmessenger serviceisfile server serviceisdomain master browseri sdomain controlleri sbrowser election serviceiRt QUESTION_TYPEi tNBtNBSTATi!tQUESTION_CLASStINTERNETiDAiACiLBiMBiOB(RRRRWRpRRTRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR% P!s       E !t NBNSRequestcBseZdZeddeddeddeddedded ded d ed d hdd <dd7<dd8<dd9<dd:<dd;<eddeddhdd<dd<eddhd d<ed!d"hd#d"<ed$dhdd<dd<ed%dhd d<ed&ded'd(ed)ddhd*d<d+d<ed,dd-hd.d<d/d<d0d-<d1d<ed2dd3hd4d<e d5d6gZ RS(<s NBNS requestR& iR' i)R( iR) R* R+ R, R- R. iAAR/ smessenger serviceisfile server serviceisdomain master browseri sdomain controlleri sbrowser election serviceiRR0 i R1 R2 i!R3 R4 tRR_NAMEi s%Label String Pointer to QUESTION_NAMEtRR_TYPEtRR_CLASStTTLtRDLENGTHiRs Unique names Group namesOWNER NODE TYPEisB nodesP nodesM nodesH nodetUNUSEDi Rt NB_ADDRESSs 127.0.0.1iDAiACiLBiMBiOB( RRRRWRpRRTRZRRORc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR5 a!s*       E !!  $6tNBNSQueryResponsecBs"eZdZeddeddeddeddedded ded d ed d hdd <dd(<dd)<dd*<dd+<dd,<eddeddhdd<dd<eddhd d<ed!d"ed#d$ed%ded&d'gZ RS(-sNBNS query responseR& iR' iR( R) iR* R+ R6 R- R. iAAR/ smessenger serviceisfile server serviceisdomain master browseri sdomain controlleri sbrowser election serviceiRR0 i R1 R2 i!R3 R4 R9 iR: itNB_FLAGSR< s 127.0.0.1iDAiACiLBiMBiOB( RRRRWRpRRTRZRORc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR= z!s        E !   tNBNSQueryResponseNegativecBseZdZeddeddeddeddedded ded d ed d hdd <dd2<dd3<dd4<dd5<dd6<eddeddhdd<dd<eddhd d<ed!ded"d#ed$ddhd%d<d&d<ed'dd(hd)d<d*d<d+d(<d,d<ed-dd.hd/d<e d0d1gZ RS(7sNBNS query response (negative)R& iR' iR( R) iR* R+ R6 R- R. iAAR/ smessenger serviceisfile server serviceisdomain master browseri sdomain controlleri sbrowser election serviceiRR7 i R1 R2 i!R8 R4 R9 R: iRs Unique names Group namesOWNER NODE TYPEisB nodesP nodesM nodesH nodeR; i RR< s 127.0.0.1iDAiACiLBiMBiOB( RRRRWRpRRTRZRRORc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR? !s$       E !  $6tNBNSNodeStatusResponsecBseZdZeddeddeddeddedded ded d ed d hdd <dd%<dd&<dd'<dd(<dd)<eddeddhdd<dd<eddhd d<ed!ded"d#ed$dgZRS(*sNBNS Node Status ResponseR& iR' iR( R) iR* R+ R6 R- R. iAAR/ smessenger serviceisfile server serviceisdomain master browseri sdomain controlleri sbrowser election serviceiRR7 i!R1 i R2 R8 R4 R9 R: iSt NUM_NAMESiDAiACiLBiMBiOB( RRRRWRpRRTRZRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR@ !s       E !  tNBNSNodeStatusResponseServicec BseZdZedddeddhdd<dd<d d <d d <d d<dd<eddeddhdd<gZRS(s!NBNS Node Status Response Servicet NETBIOS_NAMEsWINDOWS iR. iR/ smessenger serviceisfile server servicei sdomain master browserisdomain controllerisbrowser election serviceit NAME_FLAGSiR; R~(RRRRnRRTRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRB !s E tNBNSNodeStatusResponseEndcBs,eZdZededddgZRS(sNBNS Node Status Responset MAC_ADDRESSt STATISTICSii9ii(RRRRDRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRE !s tNBNSWackResponsecBseZdZeddeddeddeddedded ded d ed d hdd <dd'<dd(<dd)<dd*<dd+<eddeddhdd<dd<eddhd d<ed!d"ed#d"ed$d%d&gZ RS(,s&NBNS Wait for Acknowledgement ResponseR& iR' iR( R) iR* R+ R6 R- R. iAAR/ smessenger serviceisfile server serviceisdomain master browseri sdomain controlleri sbrowser election serviceiRR7 i R1 R2 i!R8 R4 R9 iR: tRDATAi)iiDAiACiLBiMBiOB( RRRRWRpRRTRZRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRH !s       E !  t NBTDatagramcBs"eZdZeddeddeddedded d ed d ed deddeddhdd<dd <dd!<dd"<dd#<dd$<eddeddeddhdd<dd%<dd&<dd'<dd(<dd)<eddg ZRS(*sNBT Datagram PacketR iRiRRitSourceIPs 127.0.0.1t SourcePortitLengthitOffsett SourceNameR- tSUFFIX1iAAR/ smessenger serviceisfile server serviceisdomain master browseri sdomain controlleri sbrowser election serviceiRtDestinationNametSUFFIX2iDAiACiLBiMBiOBiDAiACiLBiMBiOB( RRRRTRWRORpRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ !s        E  Et NBTSessioncBsweZdZeddhdd<dd<dd<dd <d d <d d <edddedddgZRS(sNBT Session PackettTYPEisSession MessagesSession RequestisPositive Session ResponseisNegative Session ResponseisRetarget Session ResponseisSession KeepaliveitRESERVEDitLENGTHi(RRRRRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRS !sEt$SMBNetlogon_Protocol_Response_Headerc"BseZdZedddeddhdd<edded d ed ded d ed d edd edd edd edd edd edd edd eddedd eddedd edd edd edd edd edd ed!d"ed#d ed$d ed%d ed&d ed'ded(d)ed*d"ed+d g ZRS(,s$SMBNetlogon Protocol Response HeadertStartsSMBiR i%tTranst Error_ClassiR=it Error_codeRtFlags2tPIDHight SignatureRRJtPIDtUIDtMIDt WordCountitTotalParamCounttTotalDataCountipt MaxParamCountt MaxDataCountt MaxSetupCounttunused2tFlags3tTimeOut1itTimeOut2itunused3tunused4t ParamCount2t ParamOffsett DataCountt DataOffseti\t SetupCounttunused5( RRRRnRRTRXRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRW !sB                             t SMBMailSlotcBsPeZdZeddeddeddeddedd gZRS( sSMB Mail Slot ProtocolRiRtclassiR:iRs\MAILSLOT\NET\GETDC660(RRRRXRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRt "s     t&SMBNetlogon_Protocol_Response_Tail_SAMc*BseZdZeddhdd<dd<eddedded d ed ded d eddeddeddeddeddeddeddeddeddded ded!d"ed#d$ed%d&d$ed'd(ed)d*ed+d,ed-d.d$ed/ded0ded1d2ded3d(ed4d5ed6d(ed7d8ed9ded:d;ed<d=ed>ded?ded@dedAdedBdCedDdedEdFg(ZRS(Gs'SMB Netlogon Protocol Response Tail SAMR isSAM logon requestisSAM Active directory ResponseR~itData1tData2itData3tData4iެtData5itData6i tData7iL7tData8itData9i}tData10i:tData11istData12itData13trmfftData14tData16itData18i tData20s rmff-win2ktData21itData22itData23i tData24s RMFF-WIN2KtData25tData26tData27sDefault-First-Site-NametData28tData29i<tData30tData31itData32tData33itData34idtData35tData36tData37tData38tData39i tData40tData41i(RRRRRTRWRnRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRv "sR!                                  t'SMBNetlogon_Protocol_Response_Tail_LM20cBs_eZdZeddhdd<eddeddded d ed d gZRS( s(SMB Netlogon Protocol Response Tail LM20R is LM 2.0 Response to logon requestR~itDblSlashs\\it ServerNametWINt LM20Tokeni( RRRRRTRnRRXRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR F"s   t$SMBNegociate_Protocol_Request_HeadercBseZdZedddeddhdd<edded ded ded d ed deddeddeddeddeddeddeddeddeddgZRS(s$SMBNegociate Protocol Request HeaderRX sSMBiR irtSMB_COM_NEGOTIATERZ iR=R[ RiR\ R] R^ RRJR_ iR` Ra iRb t ByteCounti ( RRRRnRRTRXRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR O"s"             t"SMBNegociate_Protocol_Request_TailcBs,eZdZeddeddgZRS(s#SMB Negociate Protocol Request Tailt BufferFormatit BufferDatas NT LM 0.12(RRRRTRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR c"s t0SMBNegociate_Protocol_Response_Advanced_Securityc'BseZdZedddeddhdd<edded ded ded d ed deddeddeddeddeddeddeddeddeddeddeddedded d!ed"d#ed$ded%d&e d'dde d(dde d)dde d*dde d+dd,ed-d.ed/d0ed1d2ed3de d4d=d5d6d7e d8dd9e d5d:d;d<g#Z RS(>s0SMBNegociate Protocol Response Advanced SecurityRX sSMBiR irR RZ iR=t Error_CodeRiR\ R] R^ RRJR_ iR` Ra iRb it DialectIndexit SecurityModeit MaxMpxCounti2t MaxNumberVCt MaxBufferSizei?t MaxRawSizeit SessionKeytServerCapabilitiesitUnixExtensionst Reserved2tExtendedSecuritytCompBulkt Reserved3itServerTimeHighlE,t ServerTimeLowitServerTimeZonei<tEncryptionKeyLengthR t SecurityBlobRwcCs|dS(i((RR6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK"stGUIDiRRkcCs |idS(i(R (R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK"sN(RRRRnRRTRXRR\RRRRqRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR i"sH                         t*SMBNegociate_Protocol_Response_No_Securityc&BseZdZedddeddhdd<edded ded ded d ed deddeddeddeddeddeddeddeddeddeddeddedded d!ed"d#ed$ded%d&e d'dde d(dde d)dde d*ddd+e d,dd-ed.d/ed0d1ed2d3ed4d5ed6d7e d8dd9e d:d;e d<d=g$Z RS(>s*SMBNegociate Protocol Response No SecurityRX sSMBiR irR RZ iR=R RiR\ R] R^ RRJR_ iR` Ra iRb iR iR iR i2R R i?R iR R iR R R R tCBR iR lE,R iR i<R iR it EncryptionKeyi@t DomainNamet WORKGROUPR tRMFF1( RRRRnRRTRXRR\RRRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR "sJ                           t1SMBNegociate_Protocol_Response_No_Security_No_Keyc%BseZdZedddeddhdd<edded ded ded d ed deddeddeddeddeddeddeddeddeddeddeddedded d!ed"d#ed$ded%d&e d'dde d(dde d)dde d*ddd+e d,dd-ed.d/ed0d1ed2d3ed4ded5d6e d7d8e d9d:g#Z RS(;s1SMBNegociate Protocol Response No Security No KeyRX sSMBiR irR RZ iR=R RiR\ R] R^ RRJR_ iR` Ra iRb iR iR iR i2R R i?R iR R iR R R R R R iR lE,R iR i<R R iR R R R ( RRtnamezRnRRTRXRR\RRRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR "sH                           tSMBSession_Setup_AndX_Requestc1BseZdZedddeddhdd<edded ded ded d ed deddeddeddeddeddeddeddeddeddhdd<eddeddedd ed!d"ed#ded$de d%dLd&ed'ded(ded)d*e d+dde d,dd-e d.dde d/dde d0dd*ed1d2e d&d3d4d5e d6d7e d8d9e d:d;e d<d;ed=ded>d?hd@d?<edAdedBdedCdedDdedEdFedGde dHdIe dJdKg/ZRS(MsSession Setup AndX RequestRX sSMBiR istSMB_COM_SESSION_SETUP_ANDXRZ iR=R RiR\ iR] R^ RRJR_ R` Ra iRb i t AndXCommandiutSMB_COM_TREE_CONNECT_ANDXR t AndXOffseti`t MaxBufferSih t MaxMPXCounti2tVCNumberR tANSIPasswordLengtht ANSIPasswordtUnicodePasswordLengthR R iR t Reserved4iR R t Reserved5R i#tPassRkcCs|iS((R (R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK#stAccounttGUESTt PrimaryDomainRtNativeOSs Windows 4.0tNativeLanManagert WordCount2t AndXCommand2it SMB_COM_NONEt Reserved6t AndXOffset2Ri tPasswordLengtht ByteCount2itPasswordtPaths \\WIN2K\IPC$tServicetIPCN(RRRRnRRTRXRR\RRRRqRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR "s`                                   tSMBSession_Setup_AndX_Responsec!BseZdZedddeddhdd<edded ded ded d ed deddeddeddeddeddeddeddeddeddhdd<eddedded ded!d"ed#d$ed%d$ed&d'ed(ded)d*hd+d*<ed,ded-d.ed/ded0d1ed2d3ed4d'gZ RS(5sSession Setup AndX ResponseRX sSMBiR isR RZ iR=R RiR\ iR] R^ RRJR_ iR` Ra iRb iR iuR R R iBtActionR iR s Windows 4.0R R RR R iR R R iPtOptionalSupportR iR R tNativeFileSystem( RRRRnRRTRXRRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR #s@                          tMobileIPcBs5eZdZeddhdd<dd<gZRS(sMobile IP (RFC3344)RitRRQtRRPi(RRRRRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 8#st MobileIPRRQc Bs_eZdZeddeddeddeddedded d d gZRS( s(Mobile IP Registration Request (RFC3344)Ritlifetimeithomeaddrs0.0.0.0thaaddrtcoaddrRRR(RRRRURWRORRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR <#s     t MobileIPRRPcBsSeZdZeddeddeddeddedd d gZRS( s&Mobile IP Registration Reply (RFC3344)RiR iR s0.0.0.0R RRR(RRRRTRWRORRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR E#s     tMobileIPTunnelDatacBs,eZdZeddeddgZRS(s'Mobile IP Tunnel Data Message (RFC3519)tnexthdriRi(RRRRTRWRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR M#s t NetflowHeadercBs eZdZeddgZRS(sNetflow HeaderRi(RRRRWRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR T#stNetflowHeaderV1cBsDeZdZeddeddeddeddgZRS(sNetflow Header V1Rit sysUptimetunixSecstunixNanoSeconds(RRRRWRZRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR X#s    tNetflowRecordV1cBseZdZeddeddeddeddeddedded ded ded ded ded deddeddeddeddeddgZRS(sNetflow Recordtipsrcs0.0.0.0tipdsttnexthopt inputIfIndexit outpuIfIndextdpktstdbytest starttimetendtimetsrcporttdstportRZRR]tpadding1tpadding2(RRRRORWRZRTRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR `#s"               R tWRQtDATAtACKRtOACKtTFTPcBs#eZdZeddegZRS(s TFTP opcodeRi(RRRRtTFTP_operationsRc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR w#stTFTP_RRQcBs>eZdZeddeddgZdZdZRS(sTFTP Read RequestRwRRtoctetcCsdS(Ni((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#scCs|idtgfS(NsRRQ %filename%(RUR1(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s(RRRRRcRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR }#s   tTFTP_WRQcBs>eZdZeddeddgZdZdZRS(sTFTP Write RequestRwRRR cCsdS(Ni((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#scCs|idtgfS(NsWRQ %filename%(RUR1(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s(RRRRRcRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR #s   t TFTP_DATAcBs2eZdZeddgZdZdZRS(s TFTP DatatblockicCs|idjo t|tS(Ni(R R`R (R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#scCs|idtgfS(Ns DATA %block%(RUR1(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s(RRRRWRcRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR #s t TFTP_OptioncBs/eZeddeddgZdZRS(RRRcCs d|fS(NR((R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s(RRRRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR #s t TFTP_OptionscBs&eZedgeddgZRS(RRkcCsdS(N(R(R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK#s(RRRmR Rc(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR #stTFTP_ACKcBs2eZdZeddgZdZdZRS(sTFTP AckR icCsit|to|i|ijSnBt|tp t|tpt|to|idjSndS(Ni(R`R R R R t TFTP_OACK(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s 0cCs|idtgfS(Ns ACK %block%(RUR1(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s(RRRRWRcRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR #s s Not definedsFile not foundsAccess violations Disk full or allocation exceededsIllegal TFTP operationsUnknown transfer IDsFile already existss No such users,Terminate transfer due to option negotiationt TFTP_ERRORcBsAeZdZeddeeddgZdZdZRS(s TFTP Errort errorcodeiterrormsgRcCs=t|tp-t|tpt|tp t|tS(N(R`R R R R (R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#scCs|idtgfS(NsERROR %errorcode%: %errormsg%(RUR1(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s( RRRRtTFTP_Error_CodesRRcRR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR #s  R cBseZdZgZdZRS(sTFTP Option AckcCst|tp t|tS(N(R`R R (R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR#s(RRRRcR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR #stASN1_Class_SNMPcBs>eZdZdZdZdZdZdZdZdZ dZ RS( tSNMPiiiiiiii( RRRtPDU_GETtPDU_NEXTt PDU_RESPONSEtPDU_SETt PDU_TRAPv1tPDU_BULKt PDU_INFORMt PDU_TRAPv2(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR #stASN1_SNMP_PDU_GETcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR# #stASN1_SNMP_PDU_NEXTcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$ #stASN1_SNMP_PDU_RESPONSEcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR% #stASN1_SNMP_PDU_SETcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR& #stASN1_SNMP_PDU_TRAPv1cBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR' #stASN1_SNMP_PDU_BULKcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR( #stASN1_SNMP_PDU_INFORMcBseZeiZRS((RRR R! R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR) #stASN1_SNMP_PDU_TRAPv2cBseZeiZRS((RRR R" R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR* #stBERcodec_SNMP_PDU_GETcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR+ #stBERcodec_SNMP_PDU_NEXTcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR, #stBERcodec_SNMP_PDU_RESPONSEcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR- $stBERcodec_SNMP_PDU_SETcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR. $stBERcodec_SNMP_PDU_TRAPv1cBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR/ $stBERcodec_SNMP_PDU_BULKcBseZeiZRS((RRR R R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR0 $stBERcodec_SNMP_PDU_INFORMcBseZeiZRS((RRR R! R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR1 $stBERcodec_SNMP_PDU_TRAPv2cBseZeiZRS((RRR R" R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR2 $stASN1F_SNMP_PDU_GETcBseZeiZRS((RRR R R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR3 $stASN1F_SNMP_PDU_NEXTcBseZeiZRS((RRR R R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR4 $stASN1F_SNMP_PDU_RESPONSEcBseZeiZRS((RRR R R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR5 $stASN1F_SNMP_PDU_SETcBseZeiZRS((RRR R R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR6 $stASN1F_SNMP_PDU_TRAPv1cBseZeiZRS((RRR R R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR7 "$stASN1F_SNMP_PDU_BULKcBseZeiZRS((RRR R R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR8 %$stASN1F_SNMP_PDU_INFORMcBseZeiZRS((RRR R! R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR9 ($stASN1F_SNMP_PDU_TRAPv2cBseZeiZRS((RRR R" R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR: +$stno_errorttoo_bigt no_such_namet bad_valuet read_onlyt generic_errort no_accesst wrong_typet wrong_lengthtwrong_encodingt wrong_valuet no_creationtinconsistent_valuetressource_unavailablet commit_failedt undo_failedtauthorization_errort not_writabletinconsistent_namet cold_startt warm_startt link_downtlink_upt auth_failuretegp_neigh_losstenterprise_specifict SNMPvarbindcBs8eZeiZeeddededZ RS(RIs1.3Ri( RRR~RR*R4R3R(RR?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRU P$s tSNMPgetcBsPeZeiZeeddeddeedde dge Z RS(RiRt error_indext varbindlist( RRR~RR*R3 R,R.t SNMP_errorR6RU R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRV W$s   tSNMPnextcBsPeZeiZeeddeddeedde dge Z RS(RiRRW RX ( RRR~RR*R4 R,R.RY R6RU R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRZ _$s   t SNMPresponsecBsPeZeiZeeddeddeedde dge Z RS(RiRRW RX ( RRR~RR*R5 R,R.RY R6RU R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR[ g$s   tSNMPsetcBsPeZeiZeeddeddeedde dge Z RS(RiRRW RX ( RRR~RR*R6 R,R.RY R6RU R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR\ o$s   t SNMPtrapv1c BsweZeiZeeddeddedde dde eddede e d ge ZRS( Rit enterprises1.3t agent_addrRt generic_trapt specific_trapt time_stampRX (RRR~RR*R7 R,R3R/R.tSNMP_trap_typesR`R6RU R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR] w$s    tSNMPbulkcBsMeZeiZeeddeddeddedgeZ RS(Rit non_repeaterstmax_repetitionsRX ( RRR~RR*R8 R,R6RU R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRd $s    t SNMPinformcBsPeZeiZeeddeddeedde dge Z RS(RiRRW RX ( RRR~RR*R9 R,R.RY R6RU R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRg $s   t SNMPtrapv2cBsPeZeiZeeddeddeedde dge Z RS(RiRRW RX ( RRR~RR*R: R,R.RY R6RU R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRh $s   R cBseZeiZeeddhdd<dd<dd<dd<ed d ed e e e e e e eee Zd ZRS( Ritv1itv2ctv2itv3it communitytpublictPDUcCsbt|itoOt|itp&t|itpt|ito|ii|iijS(N(R`Ro R[ RV RZ R\ R(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR$s (RRR~RR*R4R.R/R>RV RZ R[ R\ R] Rd Rg Rh R?R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR $s 3   tASN1_Class_X509cBs&eZdZdZdZdZdZRS(tX509iiii(RRRtCONT0tCONT1tCONT2tCONT3(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRp $s tASN1_X509_CONT0cBseZeiZRS((RRRp Rr R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRv $stASN1_X509_CONT1cBseZeiZRS((RRRp Rs R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRw $stASN1_X509_CONT2cBseZeiZRS((RRRp Rt R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRx $stASN1_X509_CONT3cBseZeiZRS((RRRp Ru R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRy $stBERcodec_X509_CONT0cBseZeiZRS((RRRp Rr R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRz $stBERcodec_X509_CONT1cBseZeiZRS((RRRp Rs R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR{ $stBERcodec_X509_CONT2cBseZeiZRS((RRRp Rt R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR| $stBERcodec_X509_CONT3cBseZeiZRS((RRRp Ru R(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR} $stASN1F_X509_CONT0cBseZeiZRS((RRRp Rr R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR~ $stASN1F_X509_CONT1cBseZeiZRS((RRRp Rs R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR $stASN1F_X509_CONT2cBseZeiZRS((RRRp Rt R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR $stASN1F_X509_CONT3cBseZeiZRS((RRRp Ru R)(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR $stX509RDNcBs8eZeiZeeeddeddZ RS(RIs2.5.4.6RR( RRR~RR*R5R4R3R0R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR $s t X509v3ExtcBs&eZeiZededZRS(RBi(RRR~RR*R(RR?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR $s tX509CertcBs2eZeiZeeeeeddeddee dde de de dge eed ed ed ed e d ge eee dde de deddeee dgeee dde de deddZRS(Ritsnit sign_algos1.2.840.113549.1.1.5tsa_valueitissuert not_beforeit not_afteriQtsubjectt pubkey_algos1.2.840.113549.1.1.1tpk_valuetpubkeyRt x509v3extt sign_algo2t sa2_valuet signature(RRR~RR*R4R"R~ R,R3R(RR6R R2RaR1R R R?(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR $s&  cKsE|dj o|i|n|i|_|ii||fdS(N(RR@RGRf(RJRt__fvalRy((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytbind_bottom_up%s  cKsA|dj o|i|n|ii|_||i||ddd}g}x|D]}t|ti}t||d|}xt|D]}|i}|t`|t`|t`||djo|tidM_n|tidO_||d|t_t d||||d|!}|tii i|_ |i ||i |q]WqW|S(NiiiR!i( RR\RRqRRRbRRaRVRIRRf( RtfragsizeRRcRR RRRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytfragment%s*     " cCsu|djo |}n|i}|t`|ti|t||}|dtidO_|t||S(Nii(RRR\RRR R(RctoverlapR toverlap_fragsizeRtqfrag((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt overlap_frag%s    c Cs\h}t}x|D]}|t}t|jo|i|qn|idjo(|id@djo|i|qn|i|i|i|if}||jo||i|qt|g||} t} x|dD] } | | id>joT| | id>jo(td| | id>|| | fn|i|d} Pn| tidjp| tidjo| t| ti7} n!| | ti| tid>7} t | jo| t i `n| i| tii qW| djoqn|idM_|`|`|| }|i|qWt} x*|D]"}| i|it|q)W|| |fS( spdefrag(plist) -> ([not fragmented], [defragmented], [ [bad fragments], [bad fragments], ... ])iicSst|i|iS((RRa(R6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK&siis*Fragment overlap (%i > %i) %r || %r || %rNi(R%R\RfRaRRRORRt itervaluesRRRRYRiRRqRRRVRRRbRR( tplisttfragstnofragRcRRXtdefragtmissfragRtclenRRtdefrag2((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR &st    $           ( (      c Csh}g}d}x|D]}||_|d7}t|jo|t}|idjp|id@o^|t}|i|i|i|if}||jo||i|q|g|||i D]0} | i d| d}|idjo|| 7}qn|i }t |jo|t i `n|t}|id jp|id jot|i} n|i|id>} t} x| dD]} | | id>joQ| | id>jo(td| | id>|| | fn|| 7}d } Pn| tid jp| tid jo| t| ti7} n!| | ti| tid>7} t | jo| t i `n| i| tii qW| d joqn|idM_|`|`|| }| di|_|i|qWg} x<|D]4}|it|} |i| _| i| q4W|| 7}||7}|i dx|D] }|`qWt|d od |i}nd }t|d |S(s8defrag(plist) -> plist defragmented as much as possible iicSst|i|iS((RRa(R6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK[&siis*Fragment overlap (%i > %i) %r || %r || %ricSst|i|iS((Rt _defrag_pos(R6RJ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK&sR4sDefragmented %st DefragmentedRNi(R R\RaRRRORRRfR RRRRYRiRRqRRRVRRRbRRRMR4R%(R R R" RRcRRXR R RR RRR R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt defragmentC&s                 ( (        cKsht|tjoHt|djo5tid|dd!ddjot||Snt||S(Nis!Hi ii(RRRqRRRR(RRA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytEther_Dot3_Dispatcher&sJi!i"i#iwilsccCsjt|tj o|i}nx@t|gggd\}}}|oti|tq&Pq&dS(Ni(RRrtfilenoR&RR-tMTU(RRgRR|((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytflush_fd&s!t SuperSocketcBs\eZdZeieiddZdZdZdZ dZ dZ dZ RS(icCs1ti||||_|i|_d|_dS(N(R4tinstoutsRtpromisc(R R RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR &s cCs+t|}ti|_|ii|S(N(RRRLR R(R R6tsx((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR&s cCst|ii|S(N(RVR RJ(R R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ&scCs |iiS(N(R R (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR &scCs|iodSnd|_|i|ijo5|io'|iidjo|iiqcn|io'|iidjo|iindS(Nii(tclosedR R R R~(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR~&s    cCs|ii|dS(N(R R(R Re((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytbind_in&scCs|ii|dS(N(R R(R Re((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytbind_out&s( RRR R4RZRR RRJR R~R R (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR &s    t L3RawSocketcBs2eZedddddZdZdZRS(icCshtitititi|_|iititidtitititi ||_ dS(Ni( R4RZtSOCK_RAWt IPPROTO_RAWR RtSOL_IPt IP_HDRINCLt AF_PACKETRR (R RR"RdR R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR &s!cCst|ii|iS(N(RR RJR(R R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ&scCsgy;t|}ti|_|ii||idfWn%tij o}ti|nXdS(Ni( RRRLR RdRR4RR(R R6R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR&s   N(RRtETH_P_IPRR RJR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR &s tL3PacketSocketcBs;eZedddddZdZdZdZRS(icCs||_titititi||_|iititidt |i|o|ii ||fn|p^t i o/|od|t i f}qdt i }n|dj ot|i|qn|iititidtitititi||_|iititid|djo t i}n||_|ion|djot|_n*|itjo ||_n |g|_x%|iD]}t|i|qWndS(Nis(%s) and not (%s)snot (%s)iii@i@(RR4R R RR RRt SO_RCVBUFR RRt except_filterRRR t SO_SNDBUFR RRsRRR(R RR"R RdRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 's8 '   '        cCsa|iodSnd|_|io+x(|iD]}t|i|dq/Wnti|dS(Nii(R R RsRR R R~(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR~!'s    cCsH|ii|\}}|dtijodSnti|dot|d}d}n\ti|dot|d}d}n0td|d|d|dft }d}y||}Wn9t j o n%t i ont |}nX|djo |i}n|dj ot|i|_n|S(NiiisJUnable to guess type (interface=%s protocol=%#x family=%i). Using Etherneti(R RR4tPACKET_OUTGOINGRtLLTypesRtL3TypesRRRRRRVRRR(R R6Rtsa_llRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ)'s2  #    c st|to"tii|i\}}}n<t|do"tii|i\}}}n ti}||if}|i i ||i i d}dt t fjo|tf}ntidofd}ny8t||}ti|_|i i||Wntij op}ti|_tioK|ddjo:x:t|D]%} |i it|| |qwWqnXdS(NRcSs|S(((R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKQ'sicstd|S(i(R (R6(R (sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRKU'siiZ(R`RRRERfRRMRdRR Rt getsocknamet ARPHDR_PPPt ARPHDR_TUNR R RRRRLRdR4Rt auto_fragmentR ( R R6RsRRctsdtoRR RRc((R sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRG's0""   'N(RRt ETH_P_ALLRR R~RJR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 's  tL2SocketcBs&eZdedddZdZRS(icCs|djo ti}ntitititi||_|iiti ti dt |i|p^ti o/|od|ti f}qdti }n|dj ot |i|qn|ii||f|iiti ti d |i|_|iiti tid |ii}ti|dot|d|_nVti|dot|d|_n-td|d|d|dft|_dS( Nis(%s) and not (%s)snot (%s)iiiisJUnable to guess type (interface=%s protocol=%#x family=%i). Using Etherneti@i@(RRRdR4R R RR RRR R R RRR R R R RtLLR RR(R RdRR"RR ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR f's.  '    #cCs|ii|\}}|dtijodSny|i|}Wn9tj o n%tiont |}nXt |i|_ |S(Ni( R RR4R RR RRRRVRR(R R6RR R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ's N(RRRR R RJ(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR e'stL2ListenSocketcBs;eZdeddddZdZdZdZRS(icCs||_d|_titititi||_|iiti ti dt |i|dj o|ii ||fn|p^t io/|od|t if}qdt i}n|dj ot|i|qn|djo t i}n||_|djot|_n*|itjo ||_n |g|_|io(x%|iD]}t|i|qkWn|iiti ti ddS(Nis(%s) and not (%s)snot (%s)iii@(RRR R4R R RR RRR R RRR Rt sniff_promiscR RRsRRR(R RdRR R"RR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 's6  '            cCsF|io+x(|iD]}t|i|dqWnti|dS(Ni(R RsRR R R~(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR~'s   cCs|ii|\}}ti|dot|d}nPti|dot|d}n*td|d|d|dft}y||}Wn9tj o n%ti ont |}nXt |i|_ |S(NiisJUnable to guess type (interface=%s protocol=%#x family=%i). Using Etherneti( R RR RR RRRRRRVRR(R R6RR R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ's"# cCstddS(Ns'Can't send anything with L2ListenSocket(R(R R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR'sN(RRRR R R~RJR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 's  t L3dnetSocketcBsGeZedddddZdZedZdZdZ RS(ic CsGh|_ti|_|djo ti}n||_|ii|dddy)t|ii t t i ddWnnX|o%|t jod|}q"d}nptio/|od|tif}qdti}n|t jo)|od ||f}q"d|}n|o|ii|ddndS( Ni@iidRisether proto %is(%s) and not (%s)snot (%s)s(ether proto %i) and (%s)(tiflistRt pcapObjectR RRRdt open_liveR(R t BIOCIMMEDIATERRR R t setfilter(R RR"R RdR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 's0    )    cCst|to"tii|i\}}}n<t|do"tii|i\}}}n ti}|ii |}|djot i ||i|<}nt t|}ti|_|i|dS(NR(R`RRRERfRRMRdR RRRtethRRRRLR(R R6RsRRctifsR ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR's""  cCs|ii}ti|ot|}ntd|i|ft}|ii}|dj o|\}}}n|djodSny||}Wn9t j o n%t i ont |}nX||_ |iS(NsHUnable to guess datalink type (interface=%s linktype=%i). Using Ethernet(R tdatalinkR RRRdRR RRRRRVRR(R R6RRRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ's(    cCs0|iid|i}|iid|S(Nii(R t setnonblockRJ(R Rc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt nonblock_recv(s cCs8t|do |`nt|do |`ndS(NR R (RMR R (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR~(s N( RRR RR RR RJR R~(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 's   t L2dnetSocketcBs8eZdedddZdZdZdZRS(ic CsP|djo ti}n||_ti|_|ii|dddy)t|iit t i ddWnnX|o%|t jod|}qd}npti o/|od|ti f}qdti }n|t jo)|od ||f}qd|}n|o|ii|ddnti||_dS( Ni@iidRisether proto %is(%s) and not (%s)snot (%s)s(ether proto %i) and (%s)(RRRdRR R R R(R R RRR R R RR R (R RdRR"R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR !(s0   )    cCs|ii}ti|ot|}ntd|i|ft}|ii}|dj o|\}}}n|djodSny||}Wn9t j o n%t i ont |}nX||_ |S(NsHUnable to guess datalink type (interface=%s linktype=%i). Using Ethernet(R R R RRRdRR RRRRRVR(R R6RRRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ>(s(    cCs3|iid|it}|iid|S(Nii(R R RJR (R Rc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR W(scCs8t|do |`nt|do |`ndS(NR R (RMR R (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR~](s N(RRRR R RJR R~(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR (s  tL2pcapListenSocketcBs8eZdedddZdZdZdZRS(c Cs%||_d|_ti|_||_|djo ti}n|djo ti}n||_ |ii |d|i dy)t |ii t tiddWnnX|tjo^tio/|od|tif}qdti}n|o|ii|ddq!ndS(Ni@idRis(%s) and not (%s)snot (%s)i(RRR RR R RdRR R R R(R R RRR R R (R RdRR R"((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR h(s*        )  cCs |`dS(N(R (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR~(scCs|ii}ti|ot|}ntd|i|ft}d}xA|djo3|ii}|dj o|\}}}qSqSWy||}Wn9t j o n%t i ont |}nX||_ |S(NsHUnable to guess datalink type (interface=%s linktype=%i). Using Ethernet(R R R RRRdRRR RRRRVR(R R6RRRRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ(s(   cCstddS(Ns+Can't send anything with L2pcapListenSocket(R(R R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR(sN(RRRR R R~RJR(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR g(s  t SimpleSocketcBseZdZRS(cCs||_||_dS(N(R R (R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR (s (RRR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR (st StreamSocketcBs eZedZedZRS(cCsti||||_dS(N(R R tbasecls(R RR ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR (scCs|ii|ti}t|}|i|}|t}|dj o|idj o |i` nx?|dj o1t |t  o |t|i 8}|i }qjW|ii||S(N( R RJR4tMSG_PEEKRqR RYRRiRR`RRR!(R R6RRV((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ(s   !(RRRVR R RJ(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR (s tBluetoothL2CAPSocketcBseZdZdZRS(cCsEtitititi}|i|df||_|_dS(Ni(R4t AF_BLUETOOTHR t BTPROTO_L2CAPRR R (R tpeerR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR (s cCst|ii|S(N(RR RJ(R R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ(s(RRR RJ(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR (s tBluetoothHCISocketcBs eZdddZdZRS(ic Cstitititi}|ititid|ititid|ititit i ddddd|i |f||_ |_ dS(NitIIIh2xli(R4R R t BTPROTO_HCIRtSOL_HCIt HCI_DATA_DIRtHCI_TIME_STAMPt HCI_FILTERRRRR R (R RdRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR (s .cCst|ii|S(N(RR RJ(R R6((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ(sN(RRRR RJ(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR (s c&Cst|tpt|}n|djo ti}ntgdt_tgdt_ t gt_ d}g} g} |D] } | | q~ } } t | }h}xI| D]A}|i }||jo||i|q|g||RtnbrecvtansRRct all_stimulittobesenttnotansthsentRRtautostopRtrdpipetwrpipeRRJt sent_timeststoptimet remaintimetinmaskRgtinptoutRRthlsttacRTRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytsndrcv(s,  %               2                       3   &c Ost|tpt|}n|djo ti}nd}|dj o | }n|p d}ny~xw|ooxM|D]E} |i| |d7}|otiddnt i |q}W|djo|d7}qoqoWWnt j onX|i |o d|GHndS(NiiiRs Sent %i packets.( R`R!R"RRRRRRRReRR~( RR6R RRRR\RARRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt __gen_send)s2          c Os5tti|||d|d|d|d|dS(sWSend packets at layer 3 send(packets, [inter=0], [loop=0], [verbose=conf.verb]) -> NoneR RRRN(R RtL3socket(R6R RRRR\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR)sc Oso|djo'|dj otii|d}nttid||||d|d|d|d|dS(sXSend packets at layer 2 sendp(packets, [inter=0], [loop=0], [verbose=conf.verb]) -> NoneiRdR RRRN(RRRfR tL2socket( R6R RRdt iface_hintRRR\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytsendp)sc CsD|d jo ti}nd|g}|d j o|id|nR|d j o|id|n0|d j o|id|n|id|o|id|ntid}|i|t||zPy)tititi i ti i |Wn t j ot i dnXWd ti|Xd S( sSend packets at layer 2 using tcpreplay for performance pps: packets per second mpbs: MBits per second realtime: use packet's timestamp, bending time with realtime value loop: number of times to process the packet list iface: output interface s --intf1=%ss--pps=%is --mbps=%is--multiplier=%is --topspeeds --loop=%iR#sInterrupted by userN(RRRdRfRR*twrpcaptspawnlptP_WAITRt tcpreplayRRRutunlink(R6tppstmbpstrealtimeRRdRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt sendpfast)s*         )c Osn|idpd|d None(R+ R(R& R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytsrloopP*scOstt|||S(ssSend a packet at layer 2 in loop and print the answer each time srloop(pkts, [prn], [inter], [count], ...) --> None(R+ R (R& R\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytsrploopU*scCs|\}}|iS((R7(RIRRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRK[*sc Cs-t|tpt|}ng}|D] }||q+~}t} h} h} xI|D]A} | i} | | jo| | i| q]| g| | x7t|g|gg\}}}||jo|i|i n||jo|i t }|djoqn|i} | | jo| | }x|D]} |i | os|| |f}|o"|| joqlnd| |", force endiannessN(t PcapWriterR(RwRR\RA((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR *scCst|id|S(sJRead a pcap file and return a packet list count: read only packetsR(t PcapReadertread_all(RwR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytrdpcap*sR> cBsYeZdZdZdZdZdZdZddZdZ d Z RS( sA stateful pcap reader Based entirely on scapy.rdpcap(), this class allows for packets to be dispatched without having to be loaded into memory all at once c CsI||_y+ti|d|_|iid}Wn7tj o+t|d|_|iid}nX|djo d|_n$|djo d|_n td|iid}t|djo td nt i |id |\}}}}}} t i | t |_|it jotd | | fndS( NR isRsòRs#Not a pcap capture file (bad magic)isInvalid pcap file (too short)tHHIIIIs:PcapReader: unkonwon LL type [%i]/[%#x]. Using Raw packets(RwRRlRR-RvtendiantRuntimeWarningRqRRR RRVtLLclsR( R RwRthdrtvermajtverminttztsigtsnaplentlinktype((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR *s&       +cCs|S(N((R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRP*scCs'|i}|djo tn|S(sSimpliment the iterator protocol on a set of packets in a pcap file N(t read_packetRR.(R R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR *s   cCs|iid}t|djodSnti|id|\}}}}|ii|}y|i|}Wn9tj o n%t i ont |}nX|d||_ |S(ssreturn a single packet read from the file returns None when no more packets are available itIIIIgư>N( RR-RqRRRRB RD RRRRVR(R RE RtusectcaplenRRRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRL *s% cCs;|i}x(|djo|||i}qWdS(scall the specified callback routine for each packet read This is just a convienience function for the main loop that allows for easy launching of packet processing in a thread. N(RL R(R tcallbackRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytdispatch+s  icCsog}xG|djo9|d8}|i}|djoPn|i|q Wt|dtii|iS(s6return a list of all packets in the pcap file iiRN(RL RRfR%RRaR9Rw(R RRRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR? +s   cCs |iS(s Emulate a socket (RL (R R:((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRJ'+scCs |iiS(N(RR (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR ,+s( RRRWR RPR RL RQ R? RJR (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR> *s    R= cBs\eZdZd edeedZdZdZdZdZ dZ dZ RS( s4A stream PCAP writer with more control than wrpcap()RcCs||_d|_||_||_||_||_||_d}|o d}nttig|||odpd|odp||_ dS(s linktype: force linktype to a given value. If None, linktype is taken from the first writter packet gz: compress the capture on the fly endianness: force an endianness (little:"<", big:">"). Default is native append: append packets to the capture file instead of truncating it sync: do not bufferize writes to the capture file iitabR i N( RK theader_presentRftgzRB RwRRlRR(R RwRK RT t endiannessRfRtbufsz((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR 3+s        cCs |iiS(N(RR (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR L+sc Csd|_|idjoPt|tjpt|tjo|d}nti|id|_n|i o>t t i g|i |i d}|idodSqn|iiti|iddddddt|i|iidS( NiiR itIHHIIIIlCeCii(RS RK RRRRot LLNumTypesRRRfRlRRT RwR-RRRRRB R tflush(R RRO((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt _write_headerO+s & " cCs=|ip|i|nx|D]}|i|q"WdS(sdaccepts a either a single packet or a list of packets to be written to the dumpfile N(RS RZ t _write_packet(R RRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRe+s  cCst|}t|}t|i}t|i|d}|iiti|id|||||ii||i o|i o|ii ndS(s0writes a single packet to the pcap file i@BRM N( RRqRrRRRRRRB RT RRY (R tpacketRRRRN ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR[ n+s  ,cCs |iiS(N(RRY (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRY z+scCs |iiS(N(RR~(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR~|+sN( RRRWRRZR R RZ RR[ RY R~(((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR= 1+s   sh^(0x[0-9a-fA-F]{2,}[ : ]|(0x)?[0-9a-fA-F]{2,}:|(0x)?[0-9a-fA-F]{3,}[: ]|) *(([0-9a-fA-F]{2} {,2}){,16})c Csd}yQxJti}y!|ti|id7}Wq tdq q Xq Wntj onX|idd}d}xJtt |dD]2}|t t |d|d|d!d7}qW|S(NRisParsing error during hexcapRTii( t raw_inputRntre_extract_hexcapRLRRR RRRqRRr(RcRtp2R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRE+s"! 0cCsHtid}t||tititiitiid|dS(NR#s-r(RR*R R tP_NOWAITRRt wireshark(tpktlistR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRa +s cCsyt|}tid}t|di|tititii tii |t|i }ti ||S(NR#R( RRR*RlRR R RRthexeditR-R (R6R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRc +s % t KnowledgeBasecBs/eZdZdZddZdZRS(cCs||_d|_dS(N(RwRR_(R Rw((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR +s cCs d|_dS(NR(R_(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt lazy_init+scCsW|dj o ||_n|i}d|_|i|idjo ||_ndS(N(RRwR_Re (R Rwtoldbase((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytreload+s     cCs%|idjo|in|iS(N(R_RRe (R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytget_base+sN(RRR Re RRg Rh (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRd +s   tIPCountryKnowledgeBasecBseZdZdZRS(s How to generate the base : db = [] for l in open("GeoIPCountryWhois.csv").readlines(): s,e,c = l.split(",")[2:5] db.append((int(s[1:-1]),int(e[1:-1]),c[1:-1])) cPickle.dump(gzip.open("xxx","w"),db) cCst|i|_dS(N(R3RwR_(R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRe +s(RRRWRe (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRi +stCountryLocKnowledgeBasecBseZdZRS(cCst|i}h|_xx|i}|pPn|iid}t|djoqn|\}}}t|t|f|i||dd>|dd>}ti}ti}d}t|d}xI||djo7||d}|||djo |}qw|}qwW||\}}}||jo!||jo|i|dSndS( NRiililil( RNRrRptcountry_loc_kdbRh tIP_country_kdbRqRR( RtcloctdbRRtguessRR|R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR+s.    tp0fKnowledgeBasecBseZdZdZRS(cCsti||dS(N(Rd R (R Rw((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR ,scCs0yt|i}Wn(tj otd|idSnXyg|_x|D]}|ddjoqQnt|id}t|djoqQntt |dd!}|ii |d|d|d|d |d|d |d |d d fqQWWntdd|_nX|i dS(NsCan't open base %siRis Riiiiiiiis,Can't parse p0f database (new p0f version ?)(Ris ( RlRwRvRR_RoRpRqRNRrRfRR~(R RRtli((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRe ,s(  T  (RRR Re (((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyRq ,s c CsxU|itoD|ito4|it}t|itoPn|i}qWt|t pt|it otdn|iid@djotdn|i}|id@d}t |}|djo d}nd}d}t }t }|ti d>d }x|ii D]} |d 8}| dd jo4|d t | d d 7}| d }|d8}q+| ddjo*|dt | d d 7}|d8}q+| ddjoZ| d ddjo|d7}n |d7}| d d djo t}n|d8}q+| ddjo|d7}|d 8}q+| ddjo|d7}q+| ddjo%|d7}|djo t}qq+|d7}q+W|d }|djo d}n|ii} |djoj| |djodt | |} n2| |ddjodt | |d} nt | } nd} |o| d 7} n|tidjo| d!7} n|ti djo| d"7} n|tidjo| d#7} n|tidjo| d$7} n|tidjo| d%7} n|o| d7} n|tid@djo| d&7} nt|titp| d'7} n| djo d} n| ||||| fS((NsNot a TCP/IP packetiisNot a syn packetidiRiiiRReR&iRtWRssT0,sT,i RsS,RsN,RsE,s?,RtSi(tTtPtZRtUtXRtFtD(R<R\R0RWR`RR4RRQRqRZRRRR[RoRRpRmRlRR( RRQtdftsstoootmsstqqTtqqPtilentoptiontwintqq((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt packet2p0f,,s#%                 c Cssd}||d|djp]|ddjpL|dddjo7|dio&t|dt|dddj7}||d|djo|d|ddj7}x/dddgD]}|||||j7}qW|d id }|d id }t|t|joOt}x'tt|D]}||||jpt||djoIt||djo2||ddjo||d||djpt||djost||djo\||ddjoG||d||djo*t||dt||ddjp t}Pq9q9W|o|t|7}qon|S( NiR|Rii iiiiR&(tisdigitRrRpRqR[RRZ(R6RJRRtxopttyopttsame((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt p0f_correl,s.x1.2.2- cCsti}|ptdgSnt|dd}g}t|}t|didd}x[|D]S}t||}||jo1|i|d|d|d|ti fqoqoW|S( sfPassive OS fingerprinting: which OS emitted this TCP SYN ? p0f(packet) -> accuracy, [list of guesses] sp0f base empty.iiR&iiii( tp0f_kdbRh RRqR RpR RfR\RQ(RtpbRRgRI RRR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytp0f,s    5c CsEyt|}Wn dSnX|gjo3dddittt|ddf}n |d}d}yt|}WnnX|djo d}n|id|dd|d}|dj o)||id t|d d 7}n||id 7}|d dj o |dt|d d7}n|GHdS(NtUNKNOWNt[Rs:?:?]is%IP.src%:%TCP.sport% - RTis (up: is hrs) -> %IP.dst%:%TCP.dport%s -> %IP.dst%:%TCP.dport%is (distance R(R RURNRR Rt pkt2uptimeRU(RRgtuptimeR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytprnp0f,s* 3   # ) idcCst|tptdnt|totdnt|tpt|iSnx<|iD]1}|ddjo|dd|}|SqkqkWtddS(slCalculate the date the machine which emitted the packet booted using TCP timestamp pkt2uptime(pkt, [HZ=100])sNot a TCP packetiRsisNo timestamp optionN(R`R(R4RRR0R RR(RtHZRRT((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyR ,s  cCsQ|djodSnd}d}x%|D]}|d|i|O}q(Wd|S(NR~tFSRPAUXYiis%x(RS(RtflvR R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt quesoTCPflags,s tQuesoKnowledgeBasecBseZdZRS(c Csyt|i}Wntj o dSnXh|_d}y!x|D]}|i}| p|ddjoqFn|ddjo;|dj o||d list of best guesses with accuracy (R R (RR R R ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytnmap_fp-sc CsMddddddddd g }d d d d dddddddddddddddg}g}x2|iD]$}||jo|i|qsqsWx|D]}|i|}|djoqng}xH|D]@}|i|} | djoqn|id|| fqW|id|di|fqWd i|S(!NtTSeqtT1tT2tT3tT4tT5tT6tT7R tClasstgcdtSItIPIDtTSR R_Rs R RR R R R R R R R R s%s=%ss%s(%s)Rs (RQRfRRRU( RI ttordertkorderRRRTRiRRRR ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt nmap_sig2txt-s.!    $cOsd} |djo3|djo ti}n|dt||} n t|} g} |dj oti|} nd} x)y|dj o&| ti} | djoPqnt| ggg| }| |djo| it}|djoPn|o|| own|o| i |n| d7} |o&||}|dj o |GHqmn|djo| |joPqnWqt j oPqXq| i t | dS(sSniff packets sniff([count=0,] [prn=None,] [store=1,] [offline=None,] [lfilter=None,] + L2ListenSocket args) -> list of packets count: number of packets to capture. 0 means infinity store: wether to store sniffed packets or discard them prn: function to apply to each packet. If something is returned, it is displayed. Ex: ex: prn = lambda x: x.summary() lfilter: python function applied to each packet to determine if further action may be done ex: lfilter = lambda x: x.haslayer(Padding) offline: pcap file to read packets from, instead of sniffing them timeout: stop sniffing after a given time (default: None) L2socket: use the provided L2socket iRitSniffedN( RRtL2listenR R> RR&RJR RfRR~R%(RR( tofflineRERFR RtargtkargRRRR RtselRcRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytsniff.sH                cCst|}td|tddd|d|}yKxDt|d|tidjotiddnti |q:Wnt j onXd S( soPoison target's cache with (your MAC,victim's IP) couple arpcachepoison(target, victim, [interval=60]) -> None RRswho-hasRYRR iRN( RRRR RRRRRReR(RtvictimtintervalttmacRc((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytarpcachepoisonL.s (ic Ks |d jo ti}n|d jo d}n|d joettd|dtd||ftdtd|d|d|d |d || \} } nPd }ttd|dtd||f|d|d |d || \} } t| i } |o| i n| | fS( slInstant TCP traceroute traceroute(target, [maxttl=30,] [dport=80,] [sport=80,] [verbose=conf.verb]) -> None sq(icmp and (icmp[0]=3 or icmp[0]=4 or icmp[0]=5 or icmp[0]=11 or icmp[0]=12)) or (tcp and (tcp[13] & 0x16 > 0x10))RRRQRRkRaRR"RRN( RRRRR\R.R0R/RRR( RRatminttltmaxttlRktl4R"RRRARR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt traceroute[.s     C"+c Ks|d jo ti}nttddtd|d|ddd|d||\}}t|i}|oF|d j o9x6|D]*}|d it i ft |d i None Set cache=True if you want arping to modify internal ARP-CacheRsff:ff:ff:ff:ff:ffRRR"sarp and arp[7] = 2RR iN( RRRR RRRRRRRrRYR(RaRR\RRAR R* tpair((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytarpingw.s  %,cCs||idd}ttd|ttdddtd|dd gd td |d d d|d|gdddd}|o$|ito|iti SndSdS(sSend a DNS add message to a nameserver for "name" to have a new "rdata" dyndns_add(nameserver, name, rdata, type="A", ttl=10) -> result code (0=ok) example: dyndns_add("ns1.toto.com", "dyn.toto.com", "127.0.0.1") RFC2136 RiRRiRRRRRRRRRQRRiRiN( RmR R\R1RRRR<RWR(t nameserverRRRRQtzoneRg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt dyndns_add.s"cCs||idd}ttd|ttdddtd|dd gd td |d |d dddddgdddd}|o$|ito|iti SndSdS(sSend a DNS delete message to a nameserver for "name" dyndns_del(nameserver, name, type="ANY", ttl=10) -> result code (0=ok) example: dyndns_del("ns1.toto.com", "dyn.toto.com") RFC2136 RiRRiRRRRRRRRRRQiRRRRiN( RmR R\R1RRRR<RWR(R RRRQR Rg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt dyndns_del.s"sff:ff:00:00:00:00c KsMttd|tddd|dtd|ddd d |}|d j S( sLTry to guess if target is in Promisc mode. The target is provided by its ip.RRswho-hasRRR RiRiN(RRRRR(Rt fake_bcastRAt responses((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt is_promisc.sCsff:ff:ff:ff:ff:fec Ksfttd|td|ddd|d||\}}t|idd}|i||fS( sqSend ARP who-has requests to determine which hosts are in promiscuous mode promiscping(net, iface=conf.iface)RRR"sarp and arp[7] = 2RR Rt PROMISCPing(R RRRRR(RaRR RAR R* ((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt promiscping.s  cCsCttd|ttdtdddtdtS(NRRiRiR(RR\R1RR7RR (R((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytikescan.scKstidjotdn|djo ti}nt|\}}ttddtddddt dd d d t d |t d ddgd||S(Nis@conf.checkIPaddr is not 0, I may not be able to match the answerRsff:ff:ff:ff:ff:ffROs0.0.0.0s255.255.255.255RkiDRaiCRRs message-typeRRWRd(s message-typeR( RRiRRRdRRRR\R1RR(RdRAtfamthw((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt dhcp_request.s  RRn cCsyxttd|tdttd|dtdtd|gddd d d d d d}t|jot|GHPn|djo dGHPnd|ti i |ti fGH|ti }qWnt j onXdS(NRRkRm Ro RX RIRiRiRiR>s No answerss %-40s: %r(R R\R1R.R RZ RU R2RRRIRBRR(RRIRm Rg((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pytsnmpwalk.se    cCs7ttd|td|dd\}}d}xR|D]J\}}|itp.|iidjo||id7}qq;q;W|d7}xe|D]]\}}|ito||id 7}q|iidjo||id 7}qqW|d7}x!|D]}||id 7}q W|d 7}|S( sPportscan a target and output a LaTeX table report_ports(target, ports) -> stringRRaRis \begin{tabular}{|r|l|l|} \hline is%TCP.sport% & open & SA \\ s\hline sO%TCPerror.dport% & closed & ICMP type %ICMP.type%/%ICMP.code% from %IP.src% \\ s*%TCP.sport% & closed & TCP %TCP.flags% \\ s %TCP.dport% & ? & unanswered \\ s\hline \end{tabular} (RR\R0R<R2RRRU(RRR R* trepRRgR((sB/home/jmjones/local/Projects/psabook/oreilly/network/code/scapy.pyt report_ports.s(.     csphh}h} h} h} d} x|D]} tt|| \}}}tt|| } ti|dt|t||