flowscope 0.22.0

Passive flow & session tracking for packet capture (runtime-free, cross-platform)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88

//! Public types for the RADIUS parser.

use std::net::Ipv4Addr;

/// One parsed RADIUS message.
#[derive(Debug, Clone, PartialEq, Eq)]
#[cfg_attr(feature = "serde", derive(serde::Serialize, serde::Deserialize))]
#[non_exhaustive]
pub struct RadiusMessage {
    /// Decoded RFC 2865 §3 code.
    pub code: RadiusCodeKind,
    /// The 1-byte identifier — matches requests with their
    /// responses.
    pub identifier: u8,
    /// Authenticator length (always 16 octets — included
    /// for round-trip completeness).
    pub authenticator_len: usize,
    /// User-Name attribute (RFC 2865 §5.1). Cleartext.
    pub username: Option<String>,
    /// Calling-Station-Id (RFC 2865 §5.31) — typically a
    /// MAC address for wireless, or a calling phone number
    /// for dial-up. Cleartext.
    pub calling_station_id: Option<String>,
    /// Called-Station-Id (RFC 2865 §5.30) — typically NAS
    /// MAC + SSID for wireless.
    pub called_station_id: Option<String>,
    /// NAS-IP-Address (RFC 2865 §5.4) — the
    /// network-access-server's IP.
    pub nas_ip_address: Option<Ipv4Addr>,
    /// Framed-IP-Address (RFC 2865 §5.8) — the IP
    /// assigned to the user after authentication.
    pub framed_ip_address: Option<Ipv4Addr>,
    /// `true` when a User-Password attribute (RFC 2865
    /// §5.2) was present. The bytes are not surfaced —
    /// they're MD5(shared_secret || authenticator)-XOR'd
    /// per the RFC; cleartext recovery requires the
    /// shared secret which a passive observer doesn't
    /// have.
    pub has_user_password: bool,
}

/// RADIUS message code vocabulary per RFC 2865 §3.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash)]
#[cfg_attr(feature = "serde", derive(serde::Serialize, serde::Deserialize))]
#[cfg_attr(feature = "serde", serde(rename_all = "snake_case"))]
#[non_exhaustive]
pub enum RadiusCodeKind {
    AccessRequest,
    AccessAccept,
    AccessReject,
    AccessChallenge,
    AccountingRequest,
    AccountingResponse,
    StatusServer,
    StatusClient,
    Other(u8),
}

impl RadiusCodeKind {
    pub(crate) fn from_raw(code: u8) -> Self {
        match code {
            1 => Self::AccessRequest,
            2 => Self::AccessAccept,
            3 => Self::AccessReject,
            4 => Self::AccountingRequest,
            5 => Self::AccountingResponse,
            11 => Self::AccessChallenge,
            12 => Self::StatusServer,
            13 => Self::StatusClient,
            n => Self::Other(n),
        }
    }

    /// Stable slug for metric labels / logs.
    pub fn as_str(&self) -> &'static str {
        match self {
            Self::AccessRequest => "access_request",
            Self::AccessAccept => "access_accept",
            Self::AccessReject => "access_reject",
            Self::AccessChallenge => "access_challenge",
            Self::AccountingRequest => "accounting_request",
            Self::AccountingResponse => "accounting_response",
            Self::StatusServer => "status_server",
            Self::StatusClient => "status_client",
            Self::Other(_) => "other",
        }
    }
}