net-parser-rs 0.3.0

Basic network parser leveraging Rust and nom for safe and efficient packet parsing. Design influenced by pktparse-rs.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

use crate::flow::Flow;
use crate::flow::errors::Error;
use crate::flow::info::layer2::{Info as L2Info};
use crate::flow::info::layer3::{Info as L3Info};
use crate::flow::info::layer4::{Id, Info as L4Info};
use crate::flow::layer4::FlowExtraction;
use crate::layer4::tcp::Tcp;

pub mod errors {
    use crate::errors::Error as NetParserError;
    use thiserror::{Error as ThisError};

    #[derive(Debug, ThisError)]
    pub enum Error {
        #[error("Error Parsing TCP: {0:?}")]
        NetParser(#[from] NetParserError),
    }

    unsafe impl Sync for Error {}
    unsafe impl Send for Error {}
}

impl<'a> FlowExtraction for Tcp<'a> {
    fn extract_flow(&self, l2: L2Info, l3: L3Info) -> Result<Flow, Error> {
        Ok(Flow::new(
            l2,
            l3,
            L4Info {
                id: Id::Tcp,
                dst_port: self.dst_port,
                src_port: self.src_port,
            }
        ))
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    use crate::common::MacAddress;
    use crate::flow::info::layer2::{Id as L2Id, Info as L2Info};
    use crate::flow::info::layer3::{Id as L3Id, Info as L3Info};
    use crate::flow::info::layer4::{Id as L4Id};
    use crate::layer4::tcp::Tcp;
    use crate::layer4::tcp::tests::RAW_DATA;

    #[test]
    fn convert_tcp() {
        let _ = env_logger::try_init();

        let (rem, l4) = Tcp::parse(RAW_DATA).expect("Unable to parse");

        assert!(rem.is_empty());

        let l2 = L2Info {
            id: L2Id::Ethernet,
            src_mac: MacAddress::default(),
            dst_mac: MacAddress::default(),
            vlan: 0
        };

        let l3 = L3Info {
            id: L3Id::IPv4,
            src_ip: "0.0.0.0".parse().expect("Could not parse"),
            dst_ip: "0.0.0.0".parse().expect("Could not parse")
        };

        let info = l4.extract_flow(l2, l3).expect("Could not convert to layer 4 info");

        assert_eq!(info.layer2, L2Id::Ethernet);
        assert_eq!(info.layer3, L3Id::IPv4);
        assert_eq!(info.layer4, L4Id::Tcp);
        assert_eq!(info.source.port, 50871);
        assert_eq!(info.destination.port, 80);
    }
}