frameassembly 1.4.6

A DSL for creating custon .pcap files for testing firewalls, IDS rules, SNMP traps and pentesting.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

//! Stream Control Transmission Protocol (`SCTP`, RFC 4960) field parser for FrameAssembly.
//!
//! This module implements the winnow parser combinator for `SCTP` association and chunk modifiers.
//! It supports Verification Tag (`VTAG`), Stream Identifier (`STREAM`), Stream Sequence Number
//! (`SSN`), Payload Protocol Identifier (`PPID`), Transmission Sequence Number (`TSN`), explicit
//! chunk type (`CHUNK <type>`), and bare shorthand chunk keywords (`DATA`, `INIT`, `INIT_ACK`,
//! `SACK`, `HEARTBEAT`, `HEARTBEAT_ACK`, `ABORT`, `SHUTDOWN`, `COOKIE_ECHO`, `COOKIE_ACK`).

use alloc::string::ToString;
use winnow::ModalResult as PResult;
use winnow::combinator::{alt, cut_err};
use winnow::prelude::*;

use crate::ast::*;
use crate::lexer::Token;
use crate::parser::{ParsedField, Stream, parse_any_str, parse_u16, parse_u32, tag};

/// Parses an SCTP protocol declaration or transport parameter field.
pub(crate) fn parse_sctp_field<'i, 'a>(input: &mut Stream<'i, 'a>) -> PResult<ParsedField<'a>> {
    alt((
        tag(Token::Sctp).map(|(_, s)| ParsedField::Protocol(Protocol::Sctp, (s.start, s.len()))),
        (tag(Token::Vtag), cut_err(parse_u32))
            .map(|((_, s), v)| ParsedField::Vtag(v, (s.start, s.end - s.start))),
        (tag(Token::Stream), cut_err(parse_u16))
            .map(|((_, s), v)| ParsedField::Stream(v, (s.start, s.end - s.start))),
        (tag(Token::Ssn), cut_err(parse_u16))
            .map(|((_, s), v)| ParsedField::Ssn(v, (s.start, s.end - s.start))),
        (tag(Token::Ppid), cut_err(parse_u32))
            .map(|((_, s), v)| ParsedField::Ppid(v, (s.start, s.end - s.start))),
        (tag(Token::Tsn), cut_err(parse_u32))
            .map(|((_, s), v)| ParsedField::Seq(v, (s.start, s.end - s.start))),
        (tag(Token::Chunk), cut_err(parse_any_str))
            .map(|((_, s), v)| ParsedField::Chunk(v.to_string(), (s.start, s.end - s.start))),
        alt((
            tag(Token::Data).map(|(_, s)| ParsedField::Chunk("DATA".to_string(), (s.start, s.len()))),
            tag(Token::Init).map(|(_, s)| ParsedField::Chunk("INIT".to_string(), (s.start, s.len()))),
            tag(Token::InitAck)
                .map(|(_, s)| ParsedField::Chunk("INIT_ACK".to_string(), (s.start, s.len()))),
            tag(Token::Sack).map(|(_, s)| ParsedField::Chunk("SACK".to_string(), (s.start, s.len()))),
            tag(Token::Heartbeat)
                .map(|(_, s)| ParsedField::Chunk("HEARTBEAT".to_string(), (s.start, s.len()))),
        )),
        alt((
            tag(Token::HeartbeatAck)
                .map(|(_, s)| ParsedField::Chunk("HEARTBEAT_ACK".to_string(), (s.start, s.len()))),
            tag(Token::Abort)
                .map(|(_, s)| ParsedField::Chunk("ABORT".to_string(), (s.start, s.len()))),
            tag(Token::Shutdown)
                .map(|(_, s)| ParsedField::Chunk("SHUTDOWN".to_string(), (s.start, s.len()))),
            tag(Token::CookieEcho)
                .map(|(_, s)| ParsedField::Chunk("COOKIE_ECHO".to_string(), (s.start, s.len()))),
            tag(Token::CookieAck)
                .map(|(_, s)| ParsedField::Chunk("COOKIE_ACK".to_string(), (s.start, s.len()))),
        )),
    ))
    .parse_next(input)
}