package inet // TODO: move to own package? import ( "encoding/binary" "fmt" "github.com/wader/fq/format" "github.com/wader/fq/format/registry" "github.com/wader/fq/pkg/decode" "github.com/wader/fq/pkg/scalar" ) var ether8023FrameIPv4Format decode.Group func init() { registry.MustRegister(decode.Format{ Name: format.ETHER8023_FRAME, Description: "Ethernet 802.3 frame", Dependencies: []decode.Dependency{ {Names: []string{format.IPV4_PACKET}, Group: ðer8023FrameIPv4Format}, }, DecodeFn: decodeEthernet, }) } var ether8023FrameTypeFormat = map[uint64]*decode.Group{ format.EtherTypeIPv4: ðer8023FrameIPv4Format, } // TODO: move to shared? var mapUToEtherSym = scalar.Fn(func(s scalar.S) (scalar.S, error) { var b [8]byte binary.BigEndian.PutUint64(b[:], s.ActualU()) s.Sym = fmt.Sprintf("%.2x:%.2x:%.2x:%.2x:%.2x:%.2x", b[2], b[3], b[4], b[5], b[6], b[7]) return s, nil }) func decodeEthernet(d *decode.D, in interface{}) interface{} { d.FieldU("destination", 48, mapUToEtherSym, scalar.Hex) d.FieldU("source", 48, mapUToEtherSym, scalar.Hex) etherType := d.FieldU16("ether_type", format.EtherTypeMap, scalar.Hex) if g, ok := ether8023FrameTypeFormat[etherType]; ok { d.FieldFormatLen("packet", d.BitsLeft(), *g, nil) } else { d.FieldRawLen("data", d.BitsLeft()) } return nil }