wader/fq
1
1
Fork 0
mirror of https://github.com/wader/fq.git synced 2024-12-26 23:15:04 +03:00
Code Issues Projects Releases Wiki Activity
e843e31b20
fq/format/inet/testdata/ether8023_frame.fqtest

32 lines
3.3 KiB
Plaintext
Raw Normal View History

inet: Add tcp and ipv4 reassembly Also add tcp_stream and udp_payload to decode content
2021-11-24 23:20:46 +03:00
# fq 'first(.. | select(format=="ether8023")) | tobytes' many_interfaces.pcapng > ether8023_frame
fqtest: Cleanup path usage Make cwd for a test script the directory where the script is. Use relative paths
2022-05-21 20:33:52 +03:00
$ fq -d ether8023_frame dv ether8023_frame
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: ether8023_frame (ether8023_frame) 0x0-0xb1.7 (178)
pcap: Add pcap, pcapng, ether8023, ipv4, udp, udp
2021-11-23 00:08:36 +03:00
0x00|ff ff ff ff ff ff |...... | destination: "ff:ff:ff:ff:ff:ff" (0xffffffffffff) 0x0-0x5.7 (6)
0x00| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x6-0xb.7 (6)
0x00| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xc-0xd.7 (2)
ipv6,icmpv6: Add decoder Refactor to use groups between network layers to make them less coupled and reusable: link_frame (ethernet etc) inet_packet (ipv4,ipv6 etc) ip_packet (tcp packet (not stream), udp segment etc) Rename data to payload as i think it makes more sense for network data
2022-04-01 17:31:55 +03:00
| | | payload{}: (ipv4_packet) 0xe-0xb1.7 (164)
pcap: Add pcap, pcapng, ether8023, ipv4, udp, udp
2021-11-23 00:08:36 +03:00
0x00| 45 | E | version: 4 0xe-0xe.3 (0.4)
0x00| 45 | E | ihl: 5 0xe.4-0xe.7 (0.4)
0x00| 00| .| dscp: 0 0xf-0xf.5 (0.6)
0x00| 00| .| ecn: 0 0xf.6-0xf.7 (0.2)
0x10|00 a4 |.. | total_length: 164 0x10-0x11.7 (2)
0x10| c6 ce | .. | identification: 50894 0x12-0x13.7 (2)
0x10| 00 | . | reserved: 0 0x14-0x14 (0.1)
0x10| 00 | . | dont_fragment: false 0x14.1-0x14.1 (0.1)
0x10| 00 | . | more_fragments: false 0x14.2-0x14.2 (0.1)
0x10| 00 00 | .. | fragment_offset: 0 0x14.3-0x15.7 (1.5)
0x10| 40 | @ | ttl: 64 0x16-0x16.7 (1)
inet: Add tcp and ipv4 reassembly Also add tcp_stream and udp_payload to decode content
2021-11-24 23:20:46 +03:00
0x10| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x17-0x17.7 (1)
0x10| f1 47 | .G | header_checksum: 0xf147 (valid) 0x18-0x19.7 (2)
pcap: Add pcap, pcapng, ether8023, ipv4, udp, udp
2021-11-23 00:08:36 +03:00
0x10| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x1a-0x1d.7 (4)
0x10| ff ff| ..| destination_ip: "255.255.255.255" (0xffffffff) 0x1e-0x21.7 (4)
0x20|ff ff |.. |
ipv6,icmpv6: Add decoder Refactor to use groups between network layers to make them less coupled and reusable: link_frame (ethernet etc) inet_packet (ipv4,ipv6 etc) ip_packet (tcp packet (not stream), udp segment etc) Rename data to payload as i think it makes more sense for network data
2022-04-01 17:31:55 +03:00
| | | payload{}: (udp_datagram) 0x22-0xb1.7 (144)
pcap: Add pcap, pcapng, ether8023, ipv4, udp, udp
2021-11-23 00:08:36 +03:00
0x20| 44 5c | D\ | source_port: 17500 0x22-0x23.7 (2)
0x20| 44 5c | D\ | destination_port: 17500 0x24-0x25.7 (2)
0x20| 00 90 | .. | length: 144 0x26-0x27.7 (2)
0x20| ba 03 | .. | checksum: 0xba03 0x28-0x29.7 (2)
ipv6,icmpv6: Add decoder Refactor to use groups between network layers to make them less coupled and reusable: link_frame (ethernet etc) inet_packet (ipv4,ipv6 etc) ip_packet (tcp packet (not stream), udp segment etc) Rename data to payload as i think it makes more sense for network data
2022-04-01 17:31:55 +03:00
0x20| 7b 22 68 6f 73 74| {"host| payload: raw bits 0x2a-0xb1.7 (136)
pcap: Add pcap, pcapng, ether8023, ipv4, udp, udp
2021-11-23 00:08:36 +03:00
0x30|5f 69 6e 74 22 3a 20 34 30 39 34 35 31 34 34 38|_int": 409451448|
* |until 0xb1.7 (end) (136) | |
Reference in New Issue Copy Permalink