ht:dZddlZddlZddlZddlmZddlmZddlm Z m Z m Z m Z m Z mZmZmZddlmZmZmZddlmZmZddlmZmZdd lmZmZdd lmZm Z dd l!m"Z"m#Z#dd l$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*d Z+dZ,dZ-d@dZ.dZ/dZ0dZ1dAdZ2dZ3dZ4dZ5d@dZ6gdZ7dZ8dZ9dZ:de_;de_<d Z=d!Z>d"Z?d#Z@d$ZAd%ZBd&ZCd'ZDd(ZEd)ZFd*ZGd+ZHd,ZId-ZJd.ZKd/ZLd0ZMd1ZNd2ZOd3ZPd4ZQd5ZRd6ZSd7ZTd8ZUd9ZVd:ZWd;ZXd<ZYd=ZZGd>d?eZ[dS)Bz Utility functions for IPv6. N)conf)Net)IPV6_ADDR_GLOBALIPV6_ADDR_LINKLOCALIPV6_ADDR_SITELOCALIPV6_ADDR_LOOPBACKIPV6_ADDR_UNICASTIPV6_ADDR_MULTICASTIPV6_ADDR_6TO4IPV6_ADDR_UNSPECIFIED)strxorstrorstrand)orbchb) inet_pton inet_ntop)RandMACRandBin)warningScapy_Exception)reduce cmp_to_key)IteratorListOptionalTupleUnioncastcd}tg}t|st|r d|D}nt|r d|D}nt |r d|D}nt |r~t |rdddtjffD}nt|r d|D}nct|r d |D}nGt|r d |D}n+|d kr|d kr d |D}n|dkr d|D}d|D}| t||S)a Given all addresses assigned to a specific interface ('laddr' parameter), this function returns the "candidate set" associated with 'addr/plen'. Basically, the function filters all interface addresses to keep only those that have the same scope as provided prefix. This is on this list of addresses that the source selection mechanism will then be performed to select the best source address associated with some specific destination that uses this prefix. cd}t|rd}d}t|rd}||z }|dks|dkr|St|sdS| S)Nr) in6_isgladdrin6_isaddr6to4)xyx_globaly_globalress P/mounts/lovelace/software/anaconda3/lib/python3.11/site-packages/scapy/utils6.py cset_sortz1construct_source_candidate_set..cset_sort:sn ?? H ?? H! !88x1}}Ja   2t c3<K|]}|dtk|VdSr"Nr.0r&s r+ z1construct_source_candidate_set..L1==aAaD,<$<$<$<$<$<$<==r-c3<K|]}|dtk|VdSr/rr1s r+r3z1construct_source_candidate_set..N1@@aAaD,?$?$?$?$?$?$?@@r-c3<K|]}|dtk|VdSr/rr1s r+r3z1construct_source_candidate_set..Pr7r-c3K|]}|VdSNr1s r+r3z1construct_source_candidate_set..Ss"AA!AAAAAAAr-::1c3<K|]}|dtk|VdSr/r0r1s r+r3z1construct_source_candidate_set..Us1AA!!0@(@(@A(@(@(@(@AAr-c3<K|]}|dtk|VdSr/r6r1s r+r3z1construct_source_candidate_set..W1DD!!0C(C(CA(C(C(C(CDDr-c3<K|]}|dtk|VdSr/r9r1s r+r3z1construct_source_candidate_set..YrAr-::rc3<K|]}|dtk|VdSr/r0r1s r+r3z1construct_source_candidate_set..[r4r-c3<K|]}|dtk|VdSr/)rr1s r+r3z1construct_source_candidate_set..]s1??aAaD,>$>$>$>$>$>$>??r-cg|] }|d S)rr<r1s r+ z2construct_source_candidate_set..^s aQqT r-)key)iterr$ in6_isuladdr in6_islladdr in6_issladdr in6_ismaddr in6_ismnladdrr loopback_name in6_ismgladdr in6_ismlladdr in6_ismsladdrsortr)addrplenladdrr,csetaddrss r+construct_source_candidate_setrY)s" 88DD@\$//@==5=== d  @@@5@@@ d  @@@5@@@ T   @    EAAD,> ?@AAADD 4  EAAuAAADD 4  EDDuDDDDD 4  EDDuDDDD $!))==5=== ??5??? 4 E JJ:i((J))) Lr-cxdfd}|sdS|t|d|dS)a This function implement a limited version of source address selection algorithm defined in section 5 of RFC 3484. The format is very different from that described in the document because it operates on a set of candidate source address for some specific route. ctdtdtdtdi}t |}|dkrt}t |}|dkrt}||}||}||krdS||krdSdS)zd Given two addresses, returns -1, 0 or 1 based on comparison of their scope r"r#r)rrrr in6_getscope)ab scope_mappersasbs r+ scope_cmpz5get_source_addr_from_candidate_set..scope_cmpms )!+Q+Q*A/ !__ 88#B !__ 88#B "  "  881 771rr-c|krdS|krdS||}|dkr|dkrdSdS|dkr|dkrdSdSt|}t|}||krdS||krdSdS)z The function implements a limited version of the rules from Source Address selection algorithm defined section of RFC 3484. r"r#r)in6_get_common_plen)source_asource_btmptmp1tmp2dstres r+ rfc3484_cmpz7get_source_addr_from_candidate_set..rfc3484_cmps s??1 s??1i(++ "99y3''2--qr AXXy3''2--qr#8S11"8S11 $;;1 D[[2qr-T)rHreverser)rSr)rm candidate_setrnres` @r+"get_source_addr_from_candidate_setrrdsm4''''''R r:k22DAAA  r-cttj|}ttj|}d}t |ddzdkr(t t z}|dddkr |tz}nt |ddkrD|d}|dkrttz}n|d krt tz}nt tz}nqt |dd kr-t|dd d zd krt tz}n+|dkrt}n|dkrt}nt t z}|S)Nr r^ r]2er> r=rC) rsocketAF_INET6rrr rr rr intrr )rTnaddrpaddraddrType addrScopes r+in6_getAddrTypers: fot , ,E fou - -EH U1X $&&%(88 !9  &H U1X$  !H   +.AAHH #  (+>>HH(+>>HH uQx==D E!Hb(9(9C(?C'G'G%(;; %% $(%'88 Or-ct|dkrtdd|d}t|dkrtdt |ddd}| |dks|d ks gd |dz}|dz}d |d z|zz}||ddzdz|ddzdz|ddzdz|ddz}|S)a< Compute the interface ID in modified EUI-64 format associated to the Ethernet address provided as input. value taken by U/L bit in the interface identifier is basically the reversed value of that in given MAC address it can be forced to a specific value by using optional 'ulbit' parameter. z Invalid MACro:r{rr^r>Nr")r"rr%.02xr\zFF:FEr|)len ValueErrorjoinsplitrupper)maculbitmfirstfirst_beui64s r+in6_mactoifaceidrs 3xx2~~'''  #A 1vv||''' !A#OOE }UaZZ5A:: %$,' QJE%$,%/0G a!f s "QqsV +g 5!A# > Dq2w NE ;;==r-c ttjd|zdd}n#t$rYdSwxYw|dddkrdSt jd|dd d }d gd |d zz}t jd|d z|z}||d dz}|dd}dt||zD}d|S)z Extract the mac address from provided iface ID. Iface ID is provided in printable format ("XXXX:XXFF:FEXX:XXXX", eventually compressed). None is returned on error. rCr|r>Nr]sBr"rr^)r"-rrc2g|]}dt|zS)r)rr1s r+rGz$in6_ifaceidtomac.. s#;;;a3q66!;;;r-r) rr}r~ Exceptionstructunpackpacklistr) ifaceid_sifaceidrrouiend mac_bytess r+in6_ifaceidtomacrsFOTI-=>>qtD ttqs|{""t M#wrr{ + +A .E EDL) )E Kut|u4 6 6E '!A#, C !""+C;;4c ??;;;I 88I  s %( 66cttjd}t|ttj|}t tj|dd}t |S)zW Extract the mac address from provided address. None is returned on error. z::ffff:ffff:ffff:ffffr^N)rr}r~in6_andrr)rTmaskr&rs r+ in6_addrtomacrsY V_&= > >Di6677A++ABB/G G $ $$r-ct|}| tjsdStj|}t |dkr|ddkrd}|S)ad Extract the MAC address from a modified EUI-64 constructed IPv6 address provided and use the IANA oui.txt file to get the vendor. The database used for the conversion is the one loaded by Scapy from a Wireshark installation if discovered in a well-known location. None is returned on error, "UNKNOWN" if the vendor is unknown. NrrrUNKNOWN)rrmanufdb _get_manufrcount)rTrr*s r+in6_addrtovendorrsc   C {$,{t , ! !# & &C 3xx2~~#))C..A-- Jr-r^cf|dvrdS t|sdSttj|}n #t$rt dYdSwxYw|dd}|d}nd}t |ttfr t |tr't|dkrt|ddz}nKt |tr/t|d krtj d |d }ntnI#t$rt d YdSwxYwt |tr|}nt d dStjd |}tjd dd|zz}d}d} d|z| z|z|z|z} ttj| S)a Generate a Link-Scoped Multicast Address as described in RFC 4489. Returned value is in printable notation. 'addr' parameter specifies the link-local address to use for generating Link-scoped multicast address IID. By default, the function returns a ::/96 prefix (aka last 32 bits of returned address are null). If a group id is provided through 'grpid' parameter, last 32 bits of the address are set to that value (accepted formats : b'4Vx' or '12345678' or 0x12345678 or 305419896). By default, generated address scope is Link-Local (2). That value can be modified by passing a specific 'scope' value as an argument of the function. RFC 4489 only authorizes scope values <= 2. Enforcement is performed by the function (None will be returned). If no link-local address can be used to generate the Link-Scoped IPv6 Multicast address, or if another error occurs, None is returned. )rr"r^Nz8in6_getLinkScopedMcastPrefix(): Invalid address providedr|sr-r>lr\!Irz9in6_getLinkScopedMcastPrefix(): Invalid group id providedrrw0)rKrr}r~rr isinstancestrbytesrrrrrrr) rTgrpidscopebaddriidb_grpidi_grpidflgscoperUr*r`s r+in6_getLinkScopedMcastAddrr1s, ItD!! 4&/400 JKKKtt )C }% ec5\ * *  eS))%c%jjAoo!%nnz9GGu--%#e**//$mD%88;GG$$   tt   s # # GG    4+dG,,{3U(: ;<s3xx.H.H'H I I!"" MENNN||D5L))00222A26H V_g&8<&G H HHr-cXd}|ttd}n%ttjd|zdd}ttjd|zdd|z}ddl}||}|dd|dd}}tt|ddz|ddz}ttjd|zd d}ttjd|zd d}||fS) ap Implements the interface ID generation algorithm described in RFC 3041. The function takes the Modified EUI-64 interface identifier generated as described in RFC 4291 and an optional previous history value (the first element of the output of this function). If no previous interface identifier is provided, a random one is generated. The function returns a tuple containing the randomized interface identifier and the history value (for possible future use). Input and output values are provided in a "printable" format as depicted below. ex:: >>> in6_getRandomizedIfaceId('20b:93ff:feeb:2d3') ('4c61:76ff:f46a:a5f3', 'd006:d540:db11:b092') >>> in6_getRandomizedIfaceId('20b:93ff:feeb:2d3', previous='d006:d540:db11:b092') ('fe97:46fe:9871:bd38', 'eeed:d79c:2e3f:62e') r-Nr|rCrr"s) rrrr}r~rmd5rrrr) rpreviouss b_previousrs1s2bs1bs2s r+in6_getRandomizedIfaceIdrs( A71::&& vx@@D &/4'>221226CANNN AA rrUAabbEB SAZZ5 ! " "RV +B FO[2%5 6 6rss ;C FO[2%5 6 6rss ;C :r-)U01rx3456789ArCDEFGHIJKLMNOPQRSTUVWXYZr`racdryfghrrklrnopqrrtuvwr&r'z!#$%&()*+r;<=>?@^_`{|}~ct|dkstdd|DsdSd}|D]$}t|}d|z|z}%g}t dD]2}|t jd|d z|d z}3|ttj d |S) z Convert an IPv6 address in Compact Representation Notation (RFC 1924) to printable representation ;-) Returns None on error. rc |o|Sr;r<)r&r's r+zin6_ctop..s !'r-c g|] }|tv Sr<) _rfc1924mapr1s r+rGzin6_ctop..s%E%E%E1a;&6%E%E%Er-NrUr\rrr-) rrr.indexrangeappendrrrprr}r~r)rTrrrr*s r+in6_ctopr3s 4yyBf%9%9%E%E%E%E%EGGt A    a  FQJ C 1XX 6;tQY//000 %LKKMMM V_chhsmm 4 44r-c tjdttj|}n#t $rYdSwxYwd}ddzdddg}t d D]}|||||zz }g}|r*|t|d z|d z}|*| d |S) z Converts an IPv6 address in printable representation to RFC 1924 Compact Representation ;-) Returns None on error. z!IIIINrr^`lrr"r\r/ro) rrrr}r~rr1r2r.rpr)rTrremrrr*s r+in6_ptocr7s M'9V_d#C#C D D tt C Bua A 1XX qtad{ C  ;sRx()))Ri KKMMM 773<<s -0 >>cRttj|}|dddkS)zk Return True if provided address (in printable format) is a 6to4 address (being in 2002::/16). Nr^rvrr}r~)r&bxs r+r%r% s( 6?A & &B bqb6X r-z2001::i cttj|dd}ttjtjdd}||kS)z Return True if provided address is a Teredo, meaning it is under the /32 conf.teredoPrefix prefix value (by default, 2001::). Otherwise, False is returned. Address must be passed in printable format. rr\)rr}r~r teredoPrefix)r&ourr<s r+in6_isaddrTeredor>sF FOQ ' '! ,CV_d.?@@1EL 3 r-cttj|}ttj|dd}t jd|ddd}t jdt|dddd}ttjt|ddd }||||fS) a  Extract information from a Teredo address. Return value is a 4-tuple made of IPv4 address of Teredo server, flag value (int), mapped address (non obfuscated) and mapped port (non obfuscated). No specific checks are performed on passed address. r\r|z!H rr{sr>s)rr}r~rrrrr )r&rTserverflag mappedport mappedaddrs r+teredoAddrExtractInforE&s V_a ( (D v~tAaCy 1 1F =tAbDz * *1 -DtVDBK%E%EFFqIJ6>6$r"u+{+K+KLLJ 4Z //r-cttjd}tttj||}||kS)z Return True if provided address has an interface identifier part created in modified EUI-64 format (meaning it matches ``*::*:*ff:fe*:*``). Otherwise, False is returned. Address must be passed in printable format. z ::ff:fe00:0)rr}r~r)r&rr:s r+ in6_iseui64rG6s: fo} 5 5E 6?A.. 6 6B ;r-ct|rLd}ttj|}ttj|}t ||}||kSt ddS)Nz::fdff:ffff:ffff:ff80z in6_isanycast(): TODO not EUI-64F)rGrr}r~rr)r&rpacked_xpacked_sx_and_ss r+ in6_isanycastrLCsg1~~ #V_a00V_a00(H--("" 2333ur-c"t||S)z Provides a bit to bit OR of provided addresses. They must be passed in network format. Return value is also an IPv6 address in network format. )ra1a2s r+in6_orrQVs R==r-c"t||S)z Provides a bit to bit AND of provided addresses. They must be passed in network format. Return value is also an IPv6 address in network format. )rrNs r+rr` "b>>r-c"t||S)z Provides a bit to bit XOR of provided addresses. They must be passed in network format. Return value is also an IPv6 address in network format. )r rNs r+in6_xorrUjrSr-c $|dks|dkrtd|zg}tddD]A}|tddddt d|z zz |dz}Bdd |DS) u Return the mask (bitstring) associated with provided length value. For instance if function is called on 48, return value is b'ÿÿÿÿÿÿ'. rz.s.44QFKa((444444r-)rr1r2maxminr)rrrs r+ in6_cidr2maskr[ts 3ww!a%%\_``aaa A 1a[[ QBRO 4455666 R 8844!444 4 44r-ct|dkrtdtddD]W}tjd||dz|dzdzd}tdD]}|dd|z zzs |dz|zccSXd S) z# Opposite of in6_cidr2mask r>zvalue must be 16 octets longrr\rr"rurW)rrr1rr)rrrrs r+ in6_mask2cidrr^s  1vv||<=== 1a[["" M$!a%Q! "3 4 5 5a 8r " "Ab1f & "2vz!!!!! " " 3r-ct|ttjd}t ttjd|}|S)z Return link-local solicited-node multicast address for given address. Passed address must be provided in network format. Returned value is also in network format. z ::ff:ffffzff02::1:ff00:0)rrr}r~rQ)r`rs r+ in6_getnsmar`s@ 9V_k::;;Ay*:;;Q??A Hr-ctjd|dd}d}|dd|Dz }|S)z Return the multicast mac address associated with provided IPv6 address. Passed address must be in network format. 16BNz33:33:rc3 K|] }d|zV dS)z%.2xNr<r1s r+r3zin6_getnsmac..s&++1FQJ++++++r-)rrr)r`bars r+ in6_getnsmacrfsM ua  %B C388+++++ + ++C Jr-ctttj|t d}t |ttjd}t tj|S)z[ Return the anycast address associated with all home agents on a given subnet. @z::fdff:ffff:ffff:fffe)rrr}r~r[rQr)prefixrs r+ in6_getharjsU  &/622M"4E4EFFAq)FO-DEEFFA V_a ( ((r-cfttjttj|S)z Normalizes IPv6 addresses provided in printable format, returning the same address in printable format. (2001:0db8:0:0::1 -> 2001:db8::1) )rr}r~rrs r+in6_ptoprms" V_i&E&E F FFr-cttj|}t|}ttj|}|t ||kS)zK Returns True when 'addr' belongs to prefix/plen. False otherwise. )rr}r~r[r)rTrirUtempprefzeros r+in6_isincludedrrsH V_d + +D   D V_f - -D 74&& &&r-cbtdttj|}d}||kS)z Return True if provided address is a link-local solicited node multicast address, i.e. belongs to ff02::1:ff00:0/104. False is returned otherwise. ss)rrr}r~)rrotemp2s r+in6_isllsnmaddrrus/ -y#/N/N O OD OE 5=r-c$t|ddS)z Returns True if provided address in printable format belongs to 2001:db8::/32 address space reserved for documentation (as defined in RFC 3849). z 2001:db8::rurrrls r+ in6_isdocaddrrxs #|R 0 00r-c$t|ddS)z Returns True if provided address in printable format belongs to _allocated_ link-local unicast address space (fe80::/10) zfe80::r@rwrls r+rKrK #x , ,,r-c$t|ddS)z Returns True if provided address in printable format belongs to _allocated_ site-local address space (fec0::/10). This prefix has been deprecated, address being now reserved by IANA. Function will remain for historic reasons. zfec0::r@rwrls r+rLrLs #x , ,,r-c$t|ddS)zt Returns True if provided address in printable format belongs to Unique local address space (fc00::/7). zfc00::rwrls r+rJrJ #x + ++r-c$t|ddS)z Returns True if provided address in printable format belongs to _allocated_ global address space (2000::/3). Please note that, Unique Local addresses (FC00::/7) are not part of global address space, and won't match. z2000::r]rwrls r+r$r$s #x + ++r-c$t|ddS)z{ Returns True if provided address in printable format belongs to allocated Multicast address space (ff00::/8). zff00::r|rwrls r+rMrMr~r-c$t|ddS)zq Returns True if address belongs to node-local multicast address space (ff01::/16) as defined in RFC zff01::r>rwrls r+rNrNrzr-c$t|ddS)z\ Returns True if address belongs to global multicast address space (ff0e::/16). zff0e::r>rwrls r+rPrP%rzr-c$t|ddS)z_ Returns True if address belongs to link-local multicast address space (ff02::/16) zff02::r>rwrls r+rQrQ.rzr-c$t|ddS)z Returns True if address belongs to site-local multicast address space (ff05::/16). Site local address space has been deprecated. Function remains for historic reasons. zff05::r>rwrls r+rRrR7s #x , ,,r-cnttjdttj|kS)z^ Returns True if address is the link-local all-nodes multicast address (ff02::1). zff02::1r9rls r+in6_isaddrllallnodesrA, foy 1 1 fos + + ,-r-cnttjdttj|kS)z` Returns True if address is the link-local all-servers multicast address (ff02::2). zff02::2r9rls r+in6_isaddrllallserversrKrr-ct|st|rt}nt|rt}nt |rt }n~t|r_t|rt}nXt|rt}nAt|rt }n*t|rt}nd}n|dkrt}nd}|S)z+ Returns the scope of the address. r#r=) r$rJrrKrrLrrMrPrQrRrNr)rTrs r+r_r_Us D\$//  d  # d  # T      $EE 4  'EE 4  'EE 4  &EEEE " Lr-cd}ttj|}ttj|}tdD]D}|t ||t ||}|dkr d|z|zcSEdS)z@ Return common prefix length of IPv6 addresses a and b. cTtdD]}d|z }||z||zkr|cSdS)Nr|rW)r1)byte1byte2rcur_masks r+ matching_bitsz*in6_get_common_plen..matching_bitswsHq  AqyH eh&6778qr-r>r|rW)rr}r~r1r)r`rartmpAtmpBrmbitss r+rgrgrs  V_a ( (D V_a ( (D 2YY!! c$q'llCQLL99 A::q55=   3r-c^ ttj|dS#t$rYdSwxYw)zPReturn True if 'address' is a valid IPv6 address string, False otherwise.TF)rr}r~r)addresss r+ in6_isvalidrs@ &/7+++t uus  ,,cTeZdZdZdZejZdZe dZ e dZ dS)Net6z6Network object from an IP address or hostname and maskrWc tjdttj||\}}t t|dz|zS)N!QQrh)rrrr}r~ name2addrrr)clsrTval1val2s r+ip2intz Net6.ip2intsQ] 9V_cmmD.A.ABB  dC$"*,---r-c jttjtjd|dz |dzS)Nrrhl)rr}r~rr)vals r+int2ipz Net6.int2ips6 O Ksby#0B*B C C   r-N) __name__ __module__ __qualname____doc__namer}r~familymax_mask classmethodr staticmethodrr<r-r+rrs_@@ D _FH..[.  \   r-rr;)Nr^)\rr}rr scapy.configrscapy.base_classesr scapy.datarrrrr r r r scapy.utilsr rr scapy.compatrrscapy.pton_ntoprrscapy.volatilerr scapy.errorrr functoolsrrtypingrrrrrrrYrrrrrrrrrrrrr.r3r7r%r<teredoServerPortr>rErGrLrQrrUr[r^r`rfrjrmrrrurxrKrLrJr$rMrNrPrQrRrrr_rgrrr<r-r+rs """"""???????????????????? "!!!!!!!00000000++++++++00000000((((((((888vRRRpB.8 % % %*D)D)D)D)N    1 1 1III<    FAAA 555,.    0 0 0   &555&          )))GGG'''   111------,,,,,,,,,------------------:,        3     r-