mirror of
https://github.com/wader/fq.git
synced 2024-11-27 14:14:58 +03:00
2fc0a71a47
Move scalar into own package. Split scalar code into decode related scalar code (that reads etc) and scalar code that just transform the scalar value. Use a scalar.Mapper interface instead of just a function. Make mappers, assert and validat impement the interface.
58 lines
1.6 KiB
Go
58 lines
1.6 KiB
Go
package inet
|
|
|
|
// SLL stands for sockaddr_ll
|
|
// https://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL2.html
|
|
|
|
import (
|
|
"github.com/wader/fq/format"
|
|
"github.com/wader/fq/format/registry"
|
|
"github.com/wader/fq/pkg/decode"
|
|
"github.com/wader/fq/pkg/scalar"
|
|
)
|
|
|
|
var sllPacket2Ether8023Format decode.Group
|
|
|
|
func init() {
|
|
registry.MustRegister(decode.Format{
|
|
Name: format.SLL2_PACKET,
|
|
Description: "Linux cooked capture encapsulation v2",
|
|
Dependencies: []decode.Dependency{
|
|
{Names: []string{format.ETHER8023_FRAME}, Group: &sllPacket2Ether8023Format},
|
|
},
|
|
DecodeFn: decodeSLL2,
|
|
})
|
|
}
|
|
|
|
var sllPacket2FrameTypeFormat = map[uint64]*decode.Group{
|
|
format.EtherTypeIPv4: ðer8023FrameIPv4Format,
|
|
}
|
|
|
|
func decodeSLL2(d *decode.D, in interface{}) interface{} {
|
|
protcolType := d.FieldU16("protocol_type", format.EtherTypeMap, scalar.Hex)
|
|
d.FieldU16("reserved")
|
|
d.FieldU32("interface_index")
|
|
arpHdrType := d.FieldU16("arphdr_type", arpHdrTypeMAp)
|
|
d.FieldU8("packet_type", sllPacketTypeMap)
|
|
addressLength := d.FieldU8("link_address_length")
|
|
d.FieldU("link_address", int(addressLength)*8)
|
|
addressDiff := 8 - addressLength
|
|
if addressDiff > 0 {
|
|
d.FieldRawLen("padding", int64(addressDiff)*8)
|
|
}
|
|
|
|
// TODO: handle other arphdr types
|
|
switch arpHdrType {
|
|
case arpHdrTypeLoopback, arpHdrTypeEther:
|
|
_ = d.FieldMustGet("link_address").TryScalarFn(mapUToEtherSym, scalar.Hex)
|
|
if g, ok := sllPacket2FrameTypeFormat[protcolType]; ok {
|
|
d.FieldFormatLen("data", d.BitsLeft(), *g, nil)
|
|
} else {
|
|
d.FieldRawLen("data", d.BitsLeft())
|
|
}
|
|
default:
|
|
d.FieldRawLen("data", d.BitsLeft())
|
|
}
|
|
|
|
return nil
|
|
}
|