pcapplusplus-sys 0.1.0

Compile PcapPlusPlus and make its library and header files available. See also https://github.com/seladb/PcapPlusPlus
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131

#define LOG_MODULE PacketLogModuleIPSecLayer

#include "EndianPortable.h"
#include "GeneralUtils.h"
#include "IPSecLayer.h"
#include "IPv4Layer.h"
#include "IPv6Layer.h"
#include "UdpLayer.h"
#include "TcpLayer.h"
#include "PayloadLayer.h"
#include <sstream>

namespace pcpp
{

// ---------------------------------
// AuthenticationHeaderLayer methods
// ---------------------------------

uint32_t AuthenticationHeaderLayer::getSPI() const
{
	return be32toh(getAHHeader()->spi);
}

uint32_t AuthenticationHeaderLayer::getSequenceNumber() const
{
	return be32toh(getAHHeader()->sequenceNumber);
}

size_t AuthenticationHeaderLayer::getICVLength() const
{
	// payloadLen = 3 (fixed ipsec_authentication_header size 32-bit words) + ICV - 2
	// ICV = (payloadLen + 2 - 3) in 32-bit words
	return (getAHHeader()->payloadLen - 1)*4;
}

uint8_t* AuthenticationHeaderLayer::getICVBytes() const
{
	size_t icvLength = getICVLength();
	if (icvLength > 0)
		return m_Data + sizeof(ipsec_authentication_header);
	return nullptr;
}

std::string AuthenticationHeaderLayer::getICVHexStream() const
{
	uint8_t* bytes = getICVBytes();
	if (bytes == nullptr)
		return "";

	return byteArrayToHexString(bytes, getICVLength());
}

void AuthenticationHeaderLayer::parseNextLayer()
{
	size_t headerLen = getHeaderLen();
	if (m_DataLen <= headerLen)
		return;

	uint8_t* payload = m_Data + headerLen;
	size_t payloadLen = m_DataLen - headerLen;

	switch (getAHHeader()->nextHeader)
	{
	case PACKETPP_IPPROTO_UDP:
		if (payloadLen >= sizeof(udphdr))
			m_NextLayer = new UdpLayer(payload, payloadLen, this, m_Packet);
		break;
	case PACKETPP_IPPROTO_TCP:
		m_NextLayer = TcpLayer::isDataValid(payload, payloadLen)
			? static_cast<Layer*>(new TcpLayer(payload, payloadLen, this, m_Packet))
			: static_cast<Layer*>(new PayloadLayer(payload, payloadLen, this, m_Packet));
		break;
	case PACKETPP_IPPROTO_IPIP:
	{
		uint8_t ipVersion = *payload >> 4;
		if (ipVersion == 4 && IPv4Layer::isDataValid(payload, payloadLen))
			m_NextLayer = new IPv4Layer(payload, payloadLen, this, m_Packet);
		else if (ipVersion == 6 && IPv6Layer::isDataValid(payload, payloadLen))
			m_NextLayer = new IPv6Layer(payload, payloadLen, this, m_Packet);
		else
			m_NextLayer = new PayloadLayer(payload, payloadLen, this, m_Packet);
		break;
	}
	case PACKETPP_IPPROTO_ESP:
		m_NextLayer = ESPLayer::isDataValid(payload, payloadLen)
			? static_cast<Layer*>(new ESPLayer(payload, payloadLen, this, m_Packet))
			: static_cast<Layer*>(new PayloadLayer(payload, payloadLen, this, m_Packet));
		break;
	default:
		m_NextLayer = new PayloadLayer(payload, payloadLen, this, m_Packet);
	}
}

std::string AuthenticationHeaderLayer::toString() const
{
	return "Authentication Header Layer";
}


// ----------------
// ESPLayer methods
// ----------------

uint32_t ESPLayer::getSPI() const
{
	return be32toh(getESPHeader()->spi);
}

uint32_t ESPLayer::getSequenceNumber() const
{
	return be32toh(getESPHeader()->sequenceNumber);
}

void ESPLayer::parseNextLayer()
{
	size_t headerLen = getHeaderLen();
	if (m_DataLen <= headerLen)
		return;

	m_NextLayer = new PayloadLayer(m_Data + headerLen, m_DataLen - headerLen, this, m_Packet);
}

std::string ESPLayer::toString() const
{
	std::ostringstream stream;
	stream << "ESP Layer, SPI: 0x" << std::hex << getSPI();
	return stream.str();
}

} // namespace pcpp