secdev / secdev/scapy

Support Inband Flow Analyzer (IFA)

Open
#4,234 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
12.6k
Forks
2.2k
Avg merge
1d 4h
Merged PRs (30d)
56

Description

Brief description

I would like to contribute Support Inband Flow Analyzer (IFA) to scapy.
Partly of the IFA layer has been implemented.
I hope everyone who are interested in this can join us to enhance it.

Inband Flow Analyzer (IFA)

References:
https://datatracker.ietf.org/doc/html/draft-kumar-ippm-ifa-07

Example Packet Format:
IFAoIPv4UDP = Ether/IP/IFA/UDP/IFAMetaHdr/IFAMetaHop/.../IFAMetaHop/Payload
IFAoIPv4TCP = Ether/IP/IFA/TCP/IFAMetaHdr/IFAMetaHop/.../IFAMetaHop/Payload
IFAoIPv4VxLAN = Ether/IP/IFA/UDP/IFAMetaHdr/IFAMetaHop/.../IFAMetaHop/VXLAN/Ether/IP/TCP/Payload
IFAoIPv4GRE = Ether/IP/IFA/GRE/IFAMetaHdr/IFAMetaHop/.../IFAMetaHop/Ether/IP/TCP/Payload
IFAoIPv6UDP = Ether/IPv6/IFA/UDP/IFAMetaHdr/IFAMetaHop/.../IFAMetaHop/Payload
IFAoIPv6TCP = Ether/IPv6/IFA/TCP/IFAMetaHdr/IFAMetaHop/.../IFAMetaHop/Payload
IFAoIPv6VxLAN = Ether/IPv6/IFA/UDP/IFAMetaHdr/IFAMetaHop/.../IFAMetaHop/VXLAN/Ether/IP/TCP/Payload
IFAoIPv6GRE = Ether/IPv6/IFA/GRE/IFAMetaHdr/IFAMetaHop/.../IFAMetaHop/Ether/IP/TCP/Payload

Scapy version

2.5.0

Python version

3.7

Operating system

Linux 5.10.27-051027-generic

Additional environment information

No response

How to reproduce

ignore

Actual result

No response

Expected result

No response

Related resources

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the partly implemented IFA layer in Scapy and read the referenced IFA draft to establish the required packet structure. Compare the implementation with the listed IPv4 and IPv6 UDP, TCP, VXLAN, and GRE formats; done means those advertised encapsulations are supported consistently.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
networking
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.