hvvdZddlZddlZddlZddlmZmZddlmZm Z m Z m Z ddl m Z mZmZmZmZmZmZmZmZmZmZddlmZddlmZddlmZdd lmZid d d d ddddddddddddddddddd d!d"d#d$d%d&d'd(d)d*d+id,d-d.d/d0d1d2d+d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLidMdNdOdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdnidodpdqdrdsd+dtdudvdwdxdydzd{d|d}d~dddddddddddddddddiddddddddddddddddddddddddddddddddddidddddddddddddddd+dd“ddēddƓddȓddʓdd̓ddΓddГddғiddԓdd֓ddؓddړddܓddޓddddddddddddddddddddddiddddddddddddddddddddd d d d d dddddddddidddddddddd d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8id9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZid[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdndodpdqdrdsdtdudvdwdxdydzd{d|d}d~dd+dZ GddeZ!Gdde!Z"Gdde"Z#Gdde"Z$Gdde#Z%Gdde#Z&Gdde#Z'Gdde#Z(Gdde#Z)Gdde#Z*Gdde#Z+Gdde#Z,Gdde#Z-Gdde#Z.Gdde#Z/Gdde#Z0Gdde#Z1Gdde#Z2Gdde#Z3Gdde#Z4Gdde#Z5Gdde#Z6Gdde#Z7Gdde#Z8Gdde#Z9Gdde#Z:Gdde#Z;Gdde#Z<Gdde#Z=Gdde#Z>Gdde#Z?Gdde#Z@Gdde#ZAGdÄde#ZBGdńde#ZCGdDŽde#ZDGdɄde#ZEGd˄de"ZFGd̈́deFZGGdτdeFZHdфZIGd҄deFZJGdԄde"ZKGdքdeKZLGd؄deKZMGdڄdeKZNGd܄deKZOGdބdeKZPGddeKZQGddeKZRGddeKZSGddeKZTGddeKZUGddeKZVidid dd dddddddddddddddddddd dd"dd$dd&dd(dd*dddddddddddddddd d d d d"dd ddd d&dddddddd+dd dAddddWdddd+d+d+dd d!d"d#d$d%d&d'd(dad)d*d+d,d-diid d.d d/dd0dd1dd2dd3dd4dd5dd6dd7dd8d d9d"d:d$d;d&d<d(d=d*d>d?d@dAdBdCdDdEdiddFd dGd dHddIddJddKddLddMddNddOddPddQd dRd"dSd$dTd&dUd(dVid*dWd,dXd.dYd0dZd2d[d3d\d5d]d7d^d9d_d;d`d=dad?dbdAdcdCdddEdedGdfdIdgdhdidjdkdldmdndodpdqdr ddsdtdudvdwdxdydzd{d|d}d~dd ddddddddddddddddd(dddddd-dddddidddddddddddddddddddddddddddddddddddddddddddddddiddÐdĐdŐdƜdǐdȐdɐdʐdːd̐d͐dΐdϜdАdѐdҐdӜdԜZWGdՄde"ZXGdׄdeXZYGdلdeXZZGdۄdeXZ[Gd݄deXZ\Gd߄deXZ]GddeXZ^GddeZ_Gdde!Z`Gdde!Zaid dd dddddddddddddddddddd dd"dd2dd3dd5dd7did9dd;dd=dd?ddAddCddEddGddIddKddWddYdd[dd]dd_ddaddkd d d d d d d ddd ZbGddeZce eecde eecde eecde eecde eecde eecde eecdddS(z RADIUS (Remote Authentication Dial In User Service) To disable Radius-EAP defragmentation (True by default), you can use:: conf.contribs.setdefault("radius", {}).setdefault("auto-defrag", False) N)orbraw)PacketPadding bind_layersbind_bottom_up) ByteField ByteEnumFieldIntField StrLenField XStrLenFieldXStrFixedLenField FieldLenFieldPacketLenFieldPacketListFieldIPFieldMultiEnumField)UDP)EAP)conf)Scapy_Exceptionz User-Namez User-Passwordz CHAP-PasswordzNAS-IP-AddresszNAS-Portz Service-TypezFramed-ProtocolzFramed-IP-Address zFramed-IP-Netmask zFramed-Routing z Filter-Id z Framed-MTU zFramed-Compressionz Login-IP-Hostz Login-ServicezLogin-TCP-Port Unassignedz Reply-MessagezCallback-Numberz Callback-Idz Framed-RoutezFramed-IPX-NetworkStateClassVendor-SpecificzSession-Timeoutz Idle-TimeoutzTermination-ActionzCalled-Station-IdzCalling-Station-Id zNAS-Identifier!z Proxy-State"zLogin-LAT-Service#zLogin-LAT-Node$zLogin-LAT-Group%zFramed-AppleTalk-Link&zFramed-AppleTalk-Network'zFramed-AppleTalk-Zone(zAcct-Status-Type)zAcct-Delay-Time*zAcct-Input-Octets+zAcct-Output-Octets,zAcct-Session-Id-zAcct-Authentic.zAcct-Session-Time/zAcct-Input-Packets0zAcct-Output-Packets1zAcct-Terminate-Cause2zAcct-Multi-Session-Id3zAcct-Link-Count4zAcct-Input-Gigawords5zAcct-Output-Gigawords67zEvent-Timestamp8z Egress-VLANID9zIngress-Filters:zEgress-VLAN-Name;zUser-Priority-Table<zCHAP-Challenge=z NAS-Port-Type>z Port-Limit?zLogin-LAT-Port@z Tunnel-TypeAzTunnel-Medium-TypeBzTunnel-Client-EndpointCzTunnel-Server-EndpointDzAcct-Tunnel-ConnectionEzTunnel-PasswordFz ARAP-PasswordGz ARAP-FeaturesHzARAP-Zone-AccessIz ARAP-SecurityJzARAP-Security-DataKzPassword-RetryLPromptMz Connect-InfoNzConfiguration-TokenO EAP-MessagePzMessage-AuthenticatorQzTunnel-Private-Group-IDRzTunnel-Assignment-IDSzTunnel-PreferenceTzARAP-Challenge-ResponseUzAcct-Interim-IntervalVzAcct-Tunnel-Packets-LostWz NAS-Port-IdXz Framed-PoolYCUIZzTunnel-Client-Auth-ID[zTunnel-Server-Auth-ID\zNAS-Filter-Rule]^zOriginating-Line-Info_zNAS-IPv6-Address`zFramed-Interface-IdazFramed-IPv6-PrefixbzLogin-IPv6-HostczFramed-IPv6-RoutedzFramed-IPv6-Poolez Error-Causefz EAP-Key-NamegzDigest-Responsehz Digest-Realmiz Digest-NoncejzDigest-Response-AuthkzDigest-Nextnoncelz Digest-Methodmz Digest-URInz Digest-QopozDigest-AlgorithmpzDigest-Entity-Body-Hashqz Digest-CNoncerzDigest-Nonce-CountszDigest-Usernametz Digest-OpaqueuzDigest-Auth-ParamvzDigest-AKA-Autswz Digest-Domainxz Digest-Staleyz Digest-HA1zzSIP-AOR{zDelegated-IPv6-Prefix|zMIP6-Feature-Vector}zMIP6-Home-Link-Prefix~z Operator-NamezLocation-Informationz Location-DatazBasic-Location-Policy-RuleszExtended-Location-Policy-RuleszLocation-CapablezRequested-Location-InfozFramed-Management-ProtocolzManagement-Transport-ProtectionzManagement-Policy-IdzManagement-Privilege-Levelz PKM-SS-Certz PKM-CA-CertzPKM-Config-SettingszPKM-Cryptosuite-ListzPKM-SAIDzPKM-SA-Descriptorz PKM-Auth-KeyzDS-Lite-Tunnel-NamezMobile-Node-IdentifierzService-SelectionzPMIP6-Home-LMA-IPv6-AddresszPMIP6-Visited-LMA-IPv6-AddresszPMIP6-Home-LMA-IPv4-AddresszPMIP6-Visited-LMA-IPv4-AddresszPMIP6-Home-HN-PrefixzPMIP6-Visited-HN-PrefixzPMIP6-Home-Interface-IDzPMIP6-Visited-Interface-IDzPMIP6-Home-IPv4-HoAzPMIP6-Visited-IPv4-HoAzPMIP6-Home-DHCP4-Server-Addressz"PMIP6-Visited-DHCP4-Server-AddresszPMIP6-Home-DHCP6-Server-Addressz"PMIP6-Visited-DHCP6-Server-AddresszPMIP6-Home-IPv4-GatewayzPMIP6-Visited-IPv4-GatewayzEAP-Lower-LayerzGSS-Acceptor-Service-NamezGSS-Acceptor-Host-NamezGSS-Acceptor-Service-SpecificszGSS-Acceptor-Realm-NamezFramed-IPv6-AddresszDNS-Server-IPv6-AddresszRoute-IPv6-InformationzDelegated-IPv6-Prefix-PoolzStateful-IPv6-Address-PoolzIPv6-6rd-ConfigurationzAllowed-Called-Station-Idz EAP-Peer-Idz EAP-Server-IdzMobility-Domain-IdzPreauth-TimeoutzNetwork-Id-NamezEAPoL-Announcementz WLAN-HESSIDzWLAN-Venue-InfozWLAN-Venue-LanguagezWLAN-Venue-NamezWLAN-Reason-CodezWLAN-Pairwise-CipherzWLAN-Group-CipherzWLAN-AKM-SuitezWLAN-Group-Mgmt-Cipherz WLAN-RF-Band)ceZdZdZdZeddeeddddd edd d gZ iZ e dZ e ddZ dZdZdS)RadiusAttributez{ Implements a RADIUS attribute (RFC 2865). Every specific RADIUS attribute class should inherit from this one. zRadius AttributetyperlenNvalueBc0t|jdzSNrrrpktxs W/mounts/lovelace/software/anaconda3/lib/python3.11/site-packages/scapy/layers/radius.pyzRadiusAttribute.sC NNQ,>adjustc|jdz Srrrs rrzRadiusAttribute.s 1r length_fromcpt|dr||j|j<dS||j|jj<dS)zI Registers the RADIUS attributes defined in this module. valN)hasattrregistered_attributesrrdefault)clss rregister_variantz RadiusAttribute.register_variantsC 3   >14C %cg . . .:=C %ch&6 7 7 7rcj|r0t|d}|j||S|S)zM Returns the right RadiusAttribute class for the given data. r)rrget)r_pktargskargs attr_types r dispatch_hookzRadiusAttribute.dispatch_hooks:  ADG I,00C@@ @ rc|j}|:t|}|ddtjd|z|ddz}|S)Nr!Brrstructpackselfppaylengths r post_buildzRadiusAttribute.post_buildsI >VVF"1" D&111AabbE9ArctSN)r)r _s rguess_payload_classz#RadiusAttribute.guess_payload_class srr)__name__ __module__ __qualname____doc__namer _radius_attribute_typesrr fields_descr classmethodrrr rrrrrs D fa!899 eT7C>> @ @ @ GR-D-DEEE K>>[>[rrc.eZdZdZdgZdZdfd ZxZS) _SpecificRadiusAttrza Class from which every "specific" RADIUS attribute defined in this module inherits. rTrNrc ltt|j||||fi||j|jd<|jjd}t|dkr,td |jj|d dd|_ dSNr RadiusAttr_rzInvalid class name: {}rr-) superr__init__rfields __class__rsplitrrformatreplacerr rpost_transform _internal _underlayerr# name_partsr$s rr"z_SpecificRadiusAttr.__init__s1!4((1           #h F^,22=AA z??Q  !(//0GHH qM))#s33 rrNrN)rrrr __slots__match_subclassr" __classcell__r$s@rrrsU IN4444444444rrcZeZdZdZeddeeddeddgZdS) _RadiusAttrIntValueR Implements a RADIUS attribute which value field is 4 bytes long integer. rrrrrrN) rrrrr rr r rrrrr3r3.sQ  fa!899 %!KKKrr3ceZdZdZdZdS)RadiusAttr_User_NameRFC 2865rNrrrrrrrrr6r6:N CCCrr6ceZdZdZdZdS)RadiusAttr_NAS_Portr7rNr8rrrr;r;?r9rr;ceZdZdZdZdS)RadiusAttr_Framed_MTUr7r#Nr8rrrr=r=DN CCCrr=ceZdZdZdZdS)RadiusAttr_Login_TCP_Portr7r'Nr8rrrr@r@Ir>rr@ceZdZdZdZdS)RadiusAttr_Session_Timeoutr7r6Nr8rrrrBrBNr>rrBceZdZdZdZdS)RadiusAttr_Idle_Timeoutr7r7Nr8rrrrDrDSr>rrDceZdZdZdZdS) RadiusAttr_Framed_AppleTalk_Linkr7r@Nr8rrrrFrFXr>rrFceZdZdZdZdS)#RadiusAttr_Framed_AppleTalk_Networkr7rANr8rrrrHrH]r>rrHceZdZdZdZdS)RadiusAttr_Acct_Delay_TimeRFC 2866rDNr8rrrrJrJbr>rrJceZdZdZdZdS)RadiusAttr_Acct_Input_OctetsrKrENr8rrrrMrMgr>rrMceZdZdZdZdS)RadiusAttr_Acct_Output_OctetsrKrFNr8rrrrOrOlr>rrOceZdZdZdZdS)RadiusAttr_Acct_Session_TimerKrINr8rrrrQrQqr>rrQceZdZdZdZdS)RadiusAttr_Acct_Input_PacketsrKrJNr8rrrrSrSvr>rrSceZdZdZdZdS)RadiusAttr_Acct_Output_PacketsrKrKNr8rrrrUrU{r>rrUceZdZdZdZdS)RadiusAttr_Acct_Link_CountrKrNNr8rrrrWrWr>rrWceZdZdZdZdS)RadiusAttr_Acct_Input_GigawordsRFC 2869rONr8rrrrYrYr>rrYceZdZdZdZdS) RadiusAttr_Acct_Output_GigawordsrZrPNr8rrrr\r\r>rr\ceZdZdZdZdS)RadiusAttr_Egress_VLANIDzRFC 4675rSNr8rrrr^r^r>rr^ceZdZdZdZdS)RadiusAttr_Port_Limitr7rYNr8rrrr`r`r>rr`ceZdZdZdZdS)RadiusAttr_ARAP_SecurityrZrdNr8rrrrbrbr>rrbceZdZdZdZdS)RadiusAttr_Password_RetryrZrfNr8rrrrdrdr>rrdceZdZdZdZdS)RadiusAttr_Tunnel_PreferencezRFC 2868rpNr8rrrrfrfr>rrfceZdZdZdZdS) RadiusAttr_Acct_Interim_IntervalrZrrNr8rrrrhrhr>rrhceZdZdZdZdS)#RadiusAttr_Acct_Tunnel_Packets_LostzRFC 2867rsNr8rrrrjrjr>rrjceZdZdZdZdS)%RadiusAttr_Management_Privilege_LevelzRFC 5607rNr8rrrrlrlN CCCrrlceZdZdZdZdS)RadiusAttr_Mobility_Domain_IdRFC 7268rNr8rrrrorormrroceZdZdZdZdS)RadiusAttr_Preauth_TimeoutrprNr8rrrrrrrrmrrrceZdZdZdZdS)RadiusAttr_WLAN_Venue_InforprNr8rrrrtrtrmrrtceZdZdZdZdS)RadiusAttr_WLAN_Reason_CoderprNr8rrrrvrvrmrrvceZdZdZdZdS)RadiusAttr_WLAN_Pairwise_CipherrprNr8rrrrxrxrmrrxceZdZdZdZdS)RadiusAttr_WLAN_Group_CipherrprNr8rrrrzrzrmrrzceZdZdZdZdS)RadiusAttr_WLAN_AKM_SuiterprNr8rrrr|r|rmrr|ceZdZdZdZdS)!RadiusAttr_WLAN_Group_Mgmt_CipherrprNr8rrrr~r~rmrr~ceZdZdZdZdS)RadiusAttr_WLAN_RF_BandrprNr8rrrrrrmrrceZdZdZdgZdfd Zeddeed dd d d e d ddgZ xZ S)_RadiusAttrHexStringValzg Implements a RADIUS attribute which value field is a string that will be as a hex string. rrNrc ltt|j||||fi||j|jd<|jjd}t|dkr,td |jj|d dd|_ dSr) r!rr"rr#r$rr%rrr&r'rr(s rr"z _RadiusAttrHexStringVal.__init__s5%t,,5           #h F^,22=AA z??Q  !(//0GHH qM))#s33 rrr0rrrc0t|jdzSrrr rs rrz _RadiusAttrHexStringVal.AG q 0rrc(|jr |jdz ndS)Nrrrr s rrz _RadiusAttrHexStringVal. sQU8Q PQrrr-) rrrrr.r"r rrr rr0r1s@rrrs I444444"  fb"9::    00      Wb.Q.QRRR KKKKKrrceZdZdZdZdS)RadiusAttr_User_Passwordr7rNr8rrrrr r9rrceZdZdZdZdS)RadiusAttr_Stater7r0Nr8rrrrrr>rrctjd|j}|tjd|jz }|tjd|jz }d}|jD]}|t |z }||z|zS)zA Pack RADIUS data prior computing the authentication MAC r!Hr)rrcodeidr attributesr) radius_packetpacked_req_authenticator packed_hdr packed_attrsattrs rprepare_packed_datars T=#566J&+dM$4555J&+dM$5666JL(""D ! 0 0< ??rc|eZdZdZdZeddeeddddedd d gZ e d Z d S) RadiusAttr_Message_AuthenticatorrZrmrr0rr*rrzr')r c|t}t|jdz |_t ||}t j||tj}| S)zm Computes the "Message-Authenticator" of a given RADIUS packet. (RFC 2869 - Page 33) r) r bytearrayrrrhmacnewhashlibmd5digest)rr shared_secretrdata radius_hmacs rcompute_message_authenticatorz>RadiusAttr_Message_Authenticator.compute_message_authenticator6s[=>tx!|,, "=2JKKh}dGK@@ !!###rN) rrrrrr rrrr staticmethodrrrrrr'sN C  fb"9::       ';r::: K $ $\ $ $ $rrc`eZdZdZdgZeddeeddeddgZ d S) _RadiusAttrIPv4AddrValzM Implements a RADIUS attribute which value field is an IPv4 address. rrrrrrz0.0.0.0N) rrrrr.r rr rrrrrrrJsZI  fa!899 %##KKKrrceZdZdZdZdS)RadiusAttr_NAS_IP_Addressr7rNr8rrrrrXr9rrceZdZdZdZdS)RadiusAttr_Framed_IP_Addressr7rNr8rrrrr]r9rrceZdZdZdZdS)RadiusAttr_Framed_IP_Netmaskr7r Nr8rrrrrbr9rrceZdZdZdZdS)RadiusAttr_Login_IP_Hostr7r%Nr8rrrrrgr>rrceZdZdZdZdS)RadiusAttr_Framed_IPX_Networkr7r/Nr8rrrrrlr>rrceZdZdZdZdS)&RadiusAttr_PMIP6_Home_LMA_IPv4_AddressRFC 6572rNr8rrrrrqrmrrceZdZdZdZdS))RadiusAttr_PMIP6_Visited_LMA_IPv4_AddressrrNr8rrrrrvrmrrceZdZdZdZdS)*RadiusAttr_PMIP6_Home_DHCP4_Server_AddressrrNr8rrrrr{rmrrceZdZdZdZdS)-RadiusAttr_PMIP6_Visited_DHCP4_Server_AddressrrNr8rrrrrrmrrceZdZdZdZdS)"RadiusAttr_PMIP6_Home_IPv4_GatewayrrNr8rrrrrrmrrceZdZdZdZdS)%RadiusAttr_PMIP6_Visited_IPv4_GatewayrrNr8rrrrrrmrrLoginFramedzCallback LoginzCallback FramedOutboundAdministrativez NAS PromptzAuthenticate OnlyzCallback NAS Promptz Call CheckzCallback AdministrativeVoiceFaxz Modem Relayz IAPP-Registerz IAPP-AP-CheckzAuthorize OnlyzFramed-ManagementzAdditional-Authorization)r*r+PPPSLIPz'AppleTalk Remote Access Protocol (ARAP)z1Gandalf proprietary SingleLink/MultiLink protocolzXylogics proprietary IPX/SLIPzX.75 SynchronouszGPRS PDP Context)rrrrrrrNonezSend routing packetszListen for routing packetszSend and Listen)rrrrzVJ TCP/IP header compressionzIPX header compressionzStac-LZS compressionTelnetRloginz TCP ClearzPortMaster (proprietary)LATzX25-PADz X25-T3POSz=TCP Clear Quiet (suppresses any NAS-generated connect string)) rrrrrrrrrDefaultzRADIUS-Request)rrStartStopzInterim-Updatez Accounting-OnzAccounting-Offz Tunnel-Startz Tunnel-Stopz Tunnel-RejectzTunnel-Link-StartzTunnel-Link-StopzTunnel-Link-RejectFailed)rrrrrrrrr r!r"r#r$r%r&RADIUSLocalRemoteDiameter)rrrrz User Requestz Lost Carrierz Lost Servicez Idle TimeoutzSession Timeoutz Admin Resetz Admin Rebootz Port Errorz NAS Errorz NAS Requestz NAS Rebootz Port UnneededzPort PreemptedzPort SuspendedzService UnavailableCallbackz User Errorz Host RequestzSupplicant RestartzReauthentication FailurezPort ReinitializedzPort Administratively Disabledz Lost Power)r*r+r,r-r.r/AsyncSyncz ISDN SynczISDN Async V.120zISDN Async V.110VirtualPIAFSzHDLC Clear ChannelzX.25zX.75zG.3 FaxzSDSL - Symmetric DSLzAADSL-CAP - Asymmetric DSL, Carrierless Amplitude Phase Modulationz.ADSL-DMT - Asymmetric DSL, Discrete Multi-Tonez#IDSL - ISDN Digital Subscriber LineEthernetz.xDSL - Digital Subscriber Line of unknown typeCablezWireles - OtherzWireless - IEEE 802.11z Token-RingFDDIzWireless - CDMA2000zWireless - UMTSzWireless - 1X-EVIAPPzFTTP - Fiber to the PremiseszWireless - IEEE 802.16zWireless - IEEE 802.20zWireless - IEEE 802.22zPPPoA - PPP over ATMz$PPPoEoA - PPP over Ethernet over ATMz)PPPoEoE - PPP over Ethernet over Ethernetz(PPPoEoVLAN - PPP over Ethernet over VLANz2PPPoEoQinQ - PPP over Ethernet over IEEE 802.1QinQzxPON - Passive Optical NetworkzWireless - XGPz WiMAX Pre-Release 8 IWK Functionz'WIMAX-WIFI-IWK: WiMAX WIFI Interworkingz6WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2z*WIMAX-HA-LMA: WiMAX HA and or LMA functionzWIMAX-DHCP: WIMAX DHCP servicez'WIMAX-LBS: WiMAX location based servicezWIMAX-WVS: WiMAX voice service) r=r>r?r@rArBrCrDrErFz(Point-to-Point Tunneling Protocol (PPTP)zLayer Two Forwarding (L2F)z#Layer Two Tunneling Protocol (L2TP)z(Ascend Tunnel Management Protocol (ATMP)z Virtual Tunneling Protocol (VTP)z0IP Authentication Header in the Tunnel-mode (AH)zIP-in-IP Encapsulation (IP-IP)z*Minimal IP-in-IP Encapsulation (MIN-IP-IP)z:IP Encapsulating Security Payload in the Tunnel-mode (ESP)z!Generic Route Encapsulation (GRE)zBay Dial Virtual Services (DVS)zIP-in-IP TunnelingzVirtual LANs (VLAN)) rrrrrrrrr r!r"r#r$zIPv4 (IP version 4)zIPv6 (IP version 6)NSAPzHDLC (8-bit multidrop)zBBN 1822802z E.163 (POTS)zE.164 (SMDS, Frame Relay, ATM)z F.69 (Telex)zX.121 (X.25, Frame Relay)IPX Appletalkz Decnet IVz Banyan Vinez!E.164 with NSAP format subaddressz!Only allow access to default zonezUse zone filter inclusivelyzNot usedzUse zone filter exclusivelyzNo EchoEchoz Residual Session Context RemovedzInvalid EAP Packet (Ignored)izUnsupported AttributeizMissing AttributeizNAS Identification MismatchizInvalid RequestizUnsupported ServiceizUnsupported ExtensionizInvalid Attribute ValueizAdministratively ProhibitedizRequest Not Routable (Proxy)izSession Context Not FoundizSession Context Not RemovableizOther Proxy Processing ErrorizResources UnavailableizRequest Initiatediz&Multiple Session Selection UnsupportedzLocation-Info-RequiredzResponse Too Big)iiYTADIGREALME212ICCReserved)rKrLrMrNzRetransmission allowedCIVIC_LOCATION GEO_LOCATIONUSERS_LOCATION NAS_LOCATION)rrrrSNMPz Web-basedNETCONFFTPTFTPSFTPRCPSCP)rrrrrrrrz No-ProtectionzIntegrity-Protectionz$Integrity-Confidentiality-Protection)rrr)rrrc jeZdZdZdgZeddeeddedde dd gZ d S) _RadiusAttrIntEnumValr4rrrrrrc|jSr)rrs rrz_RadiusAttrIntEnumVal.srI) depends_onfmtN) rrrrr.r rr r_radius_attrs_valuesrrrrrrsqI  fa!899 %  ''     KKKrrceZdZdZdZdS)RadiusAttr_Service_Typer7rNr8rrrrrr9rrceZdZdZdZdS)RadiusAttr_Framed_Protocolr7rNr8rrrrrr9rrceZdZdZdZdS)RadiusAttr_Acct_Status_TyperKrCNr8rrrrrr>rrceZdZdZdZdS)RadiusAttr_Acct_AuthenticrKrHNr8rrrrrr>rrceZdZdZdZdS)RadiusAttr_Acct_Terminate_CauserKrLNr8rrrrrr>rrceZdZdZdZdS)RadiusAttr_NAS_Port_Typer7rXNr8rrrrrr>rrceZdZdZdZdS)_EAPPacketFieldzF Handles EAP-Message attribute value (the actual EAP packet). cd}tjd|ddd}|dkrt|}ntj|}|S)Nrrrr)runpackrr raw_layer)r rmreteap_packet_lens rm2iz_EAPPacketField.m2isStQqsV44Q7 C  a&&CC.##C rN)rrrrrrrrrrs-     rrczeZdZdZdZdZeddeedddd d e dd e d gZ dZ dS)RadiusAttr_EAP_Messagez< Implements the "EAP-Message" attribute (RFC 3579). rlTrrkrNrrc |dzSrrrs rrzRadiusAttr_EAP_Message.s !a%rrrc|jdz Srrrs rrzRadiusAttr_EAP_Message.s  rrc$tjdidds|St|jtjr|}|jj}|rtjd|ddddkrtjd|ddd}|s|S||d|z||d}}|d krt||_|S|r'tjd|ddddk|S) Nradiusz auto-defragTrrrrkrr ) rcontribsr isinstancerr loadrr r)r srbufr s r post_dissectz#RadiusAttr_EAP_Message.post_dissects}  2..22=$GG H dj$. 1 1 A*/C  dAbqbE2215;;tQqsV44Q7Hq6{*AfggJQC<:s#ci..1"4rr vendor_idr vendor_type vendor_lenc0t|jdzSrrrs rrz#RadiusAttr_Vendor_Specific.Crrrc|jdz Sr)r"rs rrz#RadiusAttr_Vendor_Specific.Es q|a7Grr) rrrrrr/r rrr r r rrrrrr,s DN fb"9::    44     a   -##    00      GR-G-GHHH%KKKrrzAccess-Requestz Access-Acceptz Access-RejectzAccounting-RequestzAccounting-Responsez*Accounting-Status (now Interim Accounting)zPassword-Requestz Password-AckzPassword-RejectzAccounting-MessagezAccess-ChallengezStatus-Server (experimental)zStatus-Client (experimental)zResource-Free-RequestzResource-Free-ResponsezResource-Query-RequestzResource-Query-Responsez"Alternate-Resource-Reclaim-RequestzNAS-Reboot-RequestzNAS-Reboot-Responsez Next-PasscodezNew-PinzTerminate-SessionzPassword-Expiredz Event-RequestzEvent-ResponsezDisconnect-RequestzDisconnect-ACKzDisconnect-NAKz CoA-RequestzCoA-ACKzCoA-NAKzIP-Address-AllocatezIP-Address-ReleasezProtocol-ErrorzExperimental Use)rNrOr rc eZdZdZdZeddeeddeddd d d e d dde d ge dgZ dZ dZdS)Radiusz0 Implements a RADIUS packet (RFC 2865). rrrrrrNrHc0t|jdzSNr,)rrrs rrzRadius.s#cn"5"5":rr authenticatorrr'c|jdz Sr-rrs rrzRadius.s CGbLrrcxt||}tj||z}|S)zI Computes the authenticator field (RFC 2865 - Section 3) )rrrr)r packed_request_authrr radius_macs rcompute_authenticatorzRadius.compute_authenticators: #4)<==[ !566   """rc||z }|j}|:t|}|ddtjd|z|ddz}|S)Nrrrrrs rr zRadius.post_buildsR S >VVF"1" D&111AabbE9Ar)rrrrrr _packet_codesr rrrrrr3r rrrr*r*xs D fa// $    ::     /2r22   00    K&###rr*i)sport)dportii)r6r7)drrrr scapy.compatrr scapy.packetrrrr scapy.fieldsr r r r r rrrrrrscapy.layers.inetrscapy.layers.eapr scapy.configr scapy.errorrrrrr3r6r;r=r@rBrDrFrHrJrMrOrQrSrUrWrYr\r^r`rbrdrfrhrjrlrorrrtrvrxrzr|r~rrrrrrrrrrrrrrrrrrrrrrrrrrrrrr5r*rrrr?s"   !!!!!!!!EEEEEEEEEEEE--------------------------"!!!!! ''''''@{@@@ @ z @ ~ @@@@@ @ @@@@ !@" #@@$%@&'@( )@* +@,-@./@01@23@45@67@89@:;@<=@>?@@A@B C@DE@@@FG@HI@JK@L"M@NO@PQ@RS@TU@VW@XY@Z[@\]@^_@`a@bc@de@fg@@@hi@jk@l m@no@pq@rs@tu@vw@xy@z{@| }@~@@ A@BC@D E@F G@H I@@@JK@LM@NO@PQ@RS@TU@VW@XY@Z[@\]@^ _@`a@b!c@de@fg@h!i@jk@@@l"m@n o@p q@rs@tu@vw@xy@z {@|}@~@@A@BC@DE@FG@H I@JK@LM@@@N O@PQ@RS@T U@V W@XY@Z[@\]@^ _@` "a@bc@d e@f g@hi@j k@l m@no@@@pq@rs@tu@v w@x y@z {@|}@~ @@A@B &C@D )E@F G@H "I@J %K@L *M@N O@P %Q@@@RS@TU@V W@X Y@Z[@\ ]@^_@` a@b !c@d e@f &g@h )i@j &k@l )m@n o@p "q@r "s@@@t %u@v w@x !y@z *{@| -}@~ *@@ -A@B "C@D %E@F G@H $I@J !K@L )M@N "O@P Q@R "S@T !U@@@V %W@X %Y@Z ![@\ $]@^_@`a@b c@d e@f g@h i@jk@l m@n o@p q@r s@t u@v w@@x  !  @@@F.....f...b44444/444<     -        .        -        /        3        !4        1        ':        *=        !4        #6        $7        #6        $7        %8        !4        &9        ':        2        /        2        3        #6        ':        *=   ,? $7 !4 !4 "5 &9 #6  3 (; 1"""""1"""J     6        .   @ @ @ $$$$$'>$$$F     0        6        #9        #9        5        $:   -C 0F 1G 4J )? ,B q 7 8    :    <   L % G E M O O!" #$ &'q4   4 > *  7qL  ! '  Oq^  ) # ! aqp    %     J  sqL  OqZ              ]qB     EqT > > > >    =  > < ; M L O   ! J!" L#$  & , /WqL- 7- 6- ;-  -  - 9 - 7- - 6- 6- I- "- O- <- 1- J!-" <#--$ G%-& '-( $)-* L+-, F--. !/-0 1-2 3-4 F5-6 *7-8 $9-: $;-< $=-> "?-@ 2A-B 7C-D 6E--F A ,  . 5 D 8 , 5 ,Y---Oqn 5 ' 0 5 - = + 7 G / - !qqR  #    +  '     /Uqz . (  ( }qL  OqZ / + $  *    " $ & * + ( , + $ !" 5#$& ']qJ Mq^ #aqn                 ! 1Y qqqh /(     3        !6        "7        5        &;        4   n""""""_"""J<++++ +  + 3 ++~++++&+&++ +  !+"!#++$,%+&'+()+* ++,-+. /+01+23+45+67+89+:;+<=+> ?+@ A+B C+DE++F       U+++ \(((((V(((VsF$''''sF$''''sF$''''sF$''''sF$''''sF$'''' Ct4000000r