suricata 7.0.0-alpha.1

The Suricata network IDS and NSM engine Rust code
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114

/* Copyright (C) 2017-2020 Open Information Security Foundation
 *
 * You can copy, redistribute or modify this Program under the terms of
 * the GNU General Public License version 2 as published by the Free
 * Software Foundation.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * version 2 along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
 * 02110-1301, USA.
 */

//! Nom parsers for NFSv2 records
use nom::combinator::rest;
use nom::number::streaming::be_u32;
use crate::nfs::nfs_records::*;

#[derive(Debug,PartialEq)]
pub struct Nfs2Handle<'a> {
    pub value: &'a[u8],
}

named!(pub parse_nfs2_handle<Nfs2Handle>,
    do_parse!(
        handle: take!(32)
        >> (
            Nfs2Handle {
                value:handle,
            }
        ))
);

#[derive(Debug,PartialEq)]
pub struct Nfs2RequestLookup<'a> {
    pub handle: Nfs2Handle<'a>,
    pub name_vec: Vec<u8>,
}

named!(pub parse_nfs2_request_lookup<Nfs2RequestLookup>,
    do_parse!(
            handle: parse_nfs2_handle
        >>  name_len: be_u32
        >>  name_contents: take!(name_len)
        >>  _name_padding: rest
        >> (
            Nfs2RequestLookup {
                handle,
                name_vec:name_contents.to_vec(),
            }
        ))
);

#[derive(Debug,PartialEq)]
pub struct Nfs2RequestRead<'a> {
    pub handle: Nfs2Handle<'a>,
    pub offset: u32,
}

named!(pub parse_nfs2_request_read<Nfs2RequestRead>,
    do_parse!(
            handle: parse_nfs2_handle
        >>  offset: be_u32
        >>  _count: be_u32
        >> (
            Nfs2RequestRead {
                handle,
                offset
            }
        ))
);

named!(pub parse_nfs2_reply_read<NfsReplyRead>,
    do_parse!(
            status: be_u32
        >>  attr_blob: take!(68)
        >>  data_len: be_u32
        >>  data_contents: rest
        >> (
            NfsReplyRead {
                status,
                attr_follows:1,
                attr_blob,
                count:data_len,
                eof:false,
                data_len,
                data:data_contents,
            }
        ))
);

#[derive(Debug,PartialEq)]
pub struct Nfs2Attributes<> {
    pub atype: u32,
    pub asize: u32,
}

named!(pub parse_nfs2_attribs<Nfs2Attributes>,
    do_parse!(
            atype: be_u32
        >>  _blob1: take!(16)
        >>  asize: be_u32
        >>  _blob2: take!(44)
        >> (
            Nfs2Attributes {
                atype,
                asize
            }
        ))
);