frameassembly 1.2.2

Declarative Rust DSL and compiler to generate deterministic .pcap/.pcapng packet captures across 81 L2-L7 protocols for Wireshark, IDS & CI testing.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

//! IEEE 802.1X Extensible Authentication Protocol over LAN (`EAPOL`) parser for FrameAssembly.
//!
//! This module implements the winnow parser combinator for `EAPOL` port-based network access
//! control frames. It supports both explicit (`TYPE START`, `TYPE LOGOFF`, `TYPE KEY`,
//! `TYPE EAP_PACKET`) and bare shorthand packet types (`START`, `LOGOFF`, `KEY`, `EAP_PACKET`),
//! alongside protocol version (`VERSION`), EAP code (`EAP_CODE`), identifier (`EAP_ID`), method
//! (`EAP_METHOD`), and user identity string (`IDENTITY`).

use winnow::ModalResult as PResult;
use winnow::combinator::{alt, cut_err, opt};
use winnow::prelude::*;

use crate::ast::*;
use crate::lexer::Token;
use crate::parser::{ParsedField, Stream, parse_str_val, parse_u8, tag};

/// Parses an EAPOL protocol declaration or frame field.
pub(crate) fn parse_eapol_field<'i, 'a>(input: &mut Stream<'i, 'a>) -> PResult<ParsedField<'a>> {
    alt((
        tag(Token::Eapol).map(|(_, s)| ParsedField::Protocol(Protocol::Eapol, (s.start, s.len()))),
        (tag(Token::Version), parse_u8)
            .map(|((_, s), v)| ParsedField::VersionByte(v, (s.start, s.end - s.start))),
        (tag(Token::EapCode), cut_err(parse_u8))
            .map(|((_, s), v)| ParsedField::EapCode(v, (s.start, s.end - s.start))),
        (tag(Token::EapId), cut_err(parse_u8))
            .map(|((_, s), v)| ParsedField::EapId(v, (s.start, s.end - s.start))),
        (tag(Token::EapMethod), cut_err(parse_u8))
            .map(|((_, s), v)| ParsedField::EapMethod(v, (s.start, s.end - s.start))),
        (tag(Token::Identity), cut_err(parse_str_val))
            .map(|((_, s), v)| ParsedField::Identity(v, (s.start, s.end - s.start))),
        (
            opt(tag(Token::Type)),
            alt((
                tag(Token::Start).map(|(_, s)| (EapolType::Start, s)),
                tag(Token::Logoff).map(|(_, s)| (EapolType::Logoff, s)),
                tag(Token::Key).map(|(_, s)| (EapolType::Key, s)),
                tag(Token::EapPacket).map(|(_, s)| (EapolType::EapPacket, s)),
            )),
        )
            .map(|(opt_t, (t, s2))| {
                let start = opt_t.map(|(_, s1)| s1.start).unwrap_or(s2.start);
                ParsedField::EapolType(t, (start, s2.end - start))
            }),
    ))
    .parse_next(input)
}