scapy.layers.lltd

LLTD Protocol

https://msdn.microsoft.com/en-us/library/cc233983.aspx

class scapy.layers.lltd.LLTD

Bases: scapy.packet.Packet

aliastypes
answer_hashret = {(0, 12): (0, 11), (1, 1): (0, 0)}
answers(other)
fields_desc
LLTD fields

version

ByteField

1

tos

ByteEnumField

0

reserved

ByteField

0

function

MultiEnumField (Depends on tos)

0

real_dst

MACField

None

real_src

MACField

None

xid

ShortField (Cond)

0

seq

ShortField (Cond)

0

hashret()
mysummary()
payload_guess

Possible sublayers: LLTDDiscover, LLTDEmit, LLTDHello, LLTDQueryLargeTlvResp, LLTDQueryLargeTlv, LLTDQueryResp

post_build(pkt, pay)
class scapy.layers.lltd.LLTDAttribute

Bases: scapy.packet.Packet

aliastypes
classmethod dispatch_hook(_pkt=None, *_, **kargs)
fields_desc
LLTDAttribute fields

type

ByteEnumField

0

len

FieldLenField

None

value

StrLenField

b''

payload_guess

Possible sublayers: LLTDAttribute, Padding

show_indent = False
show_summary = False
class scapy.layers.lltd.LLTDAttribute80211MaxRate

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttribute80211MaxRate fields

type

ByteEnumField

9

len

ByteField

2

rate

ShortField

0

class scapy.layers.lltd.LLTDAttribute80211PhysicalMedium

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttribute80211PhysicalMedium fields

type

ByteEnumField

21

len

ByteField

1

medium

ByteEnumField

0

class scapy.layers.lltd.LLTDAttributeCharacteristics

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeCharacteristics fields

type

ByteEnumField

2

len

FieldLenField

None

flags

FlagsField (5 bits)

<Flag 0 ()>

reserved1

BitField (11 bits)

0

reserved2

StrLenField

b''

class scapy.layers.lltd.LLTDAttributeDeviceUUID

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeDeviceUUID fields

type

ByteEnumField

18

len

FieldLenField

None

uuid

StrLenField

b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'

class scapy.layers.lltd.LLTDAttributeEOP

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeEOP fields

type

ByteEnumField

0

class scapy.layers.lltd.LLTDAttributeHostID

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeHostID fields

type

ByteEnumField

1

len

ByteField

6

mac

MACField

'00:00:00:00:00:00'

mysummary()
class scapy.layers.lltd.LLTDAttributeIPv4Address

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeIPv4Address fields

type

ByteEnumField

7

len

ByteField

4

ipv4

IPField

'0.0.0.0'

class scapy.layers.lltd.LLTDAttributeIPv6Address

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeIPv6Address fields

type

ByteEnumField

8

len

ByteField

16

ipv6

IP6Field

'::'

class scapy.layers.lltd.LLTDAttributeLargeTLV

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeLargeTLV fields

type

ByteEnumField

14

len

ByteField

0

class scapy.layers.lltd.LLTDAttributeLinkSpeed

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeLinkSpeed fields

type

ByteEnumField

12

len

ByteField

4

speed

IntField

0

class scapy.layers.lltd.LLTDAttributeMachineName

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeMachineName fields

type

ByteEnumField

15

len

FieldLenField

None

hostname

StrLenFieldUtf16

b''

mysummary()
class scapy.layers.lltd.LLTDAttributePerformanceCounterFrequency

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributePerformanceCounterFrequency fields

type

ByteEnumField

10

len

ByteField

8

freq

LongField

0

class scapy.layers.lltd.LLTDAttributePhysicalMedium

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributePhysicalMedium fields

type

ByteEnumField

3

len

ByteField

4

medium

IntEnumField

6

class scapy.layers.lltd.LLTDAttributeQOSCharacteristics

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeQOSCharacteristics fields

type

ByteEnumField

20

len

ByteField

4

flags

FlagsField (3 bits)

<Flag 0 ()>

reserved1

BitField (13 bits)

0

reserved2

ShortField

0

class scapy.layers.lltd.LLTDAttributeSeesList

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes
fields_desc
LLTDAttributeSeesList fields

type

ByteEnumField

25

len

ByteField

2

max_entries

ShortField

0

class scapy.layers.lltd.LLTDDiscover

Bases: scapy.packet.Packet

aliastypes
fields_desc
LLTDDiscover fields

gen_number

ShortField

0

stations_count

FieldLenField

None

stations_list

FieldListField

[]

mysummary()
class scapy.layers.lltd.LLTDEmit

Bases: scapy.packet.Packet

aliastypes
fields_desc
LLTDEmit fields

descs_count

FieldLenField

None

descs_list

PacketListField

[]

mysummary()
class scapy.layers.lltd.LLTDEmiteeDesc

Bases: scapy.packet.Packet

aliastypes
fields_desc
LLTDEmiteeDesc fields

type

ByteEnumField

0

pause

ByteField

0

src

MACField

None

dst

MACField

'00:00:00:00:00:00'

payload_guess

Possible sublayers: Padding

class scapy.layers.lltd.LLTDHello

Bases: scapy.packet.Packet

aliastypes
fields_desc
LLTDHello fields

gen_number

ShortField

0

current_mapper_address

MACField

'00:00:00:00:00:00'

apparent_mapper_address

MACField

'00:00:00:00:00:00'

payload_guess

Possible sublayers: LLTDAttribute

show_summary = False
class scapy.layers.lltd.LLTDQueryLargeTlv

Bases: scapy.packet.Packet

aliastypes
fields_desc
LLTDQueryLargeTlv fields

type

ByteEnumField

14

offset

ThreeBytesField

0

mysummary()
class scapy.layers.lltd.LLTDQueryLargeTlvResp

Bases: scapy.packet.Packet

aliastypes
fields_desc
LLTDQueryLargeTlvResp fields

flags

FlagsField (2 bits)

<Flag 0 ()>

len

BitField (14 bits)

None

value

StrLenField

b''

mysummary()
post_build(pkt, pay)
class scapy.layers.lltd.LLTDQueryResp

Bases: scapy.packet.Packet

aliastypes
fields_desc
LLTDQueryResp fields

flags

FlagsField (2 bits)

<Flag 0 ()>

descs_count

BitField (14 bits)

None

descs_list

PacketListField

[]

mysummary()
post_build(pkt, pay)
class scapy.layers.lltd.LLTDRecveeDesc

Bases: scapy.packet.Packet

aliastypes
fields_desc
LLTDRecveeDesc fields

type

ShortEnumField

0

real_src

MACField

'00:00:00:00:00:00'

ether_src

MACField

'00:00:00:00:00:00'

ether_dst

MACField

'00:00:00:00:00:00'

payload_guess

Possible sublayers: Padding

class scapy.layers.lltd.LargeTlvBuilder

Bases: object

An object to build content fetched through LLTDQueryLargeTlv / LLTDQueryLargeTlvResp packets.

Usable with a PacketList() object: >>> p = LargeTlvBuilder() >>> p.parse(rdpcap(‘capture_file.cap’))

Or during a network capture: >>> p = LargeTlvBuilder() >>> sniff(filter=”ether proto 0x88d9”, prn=p.parse)

To get the result, use .get_data()

get_data()

Returns a dictionary object, keys are strings “source > destincation [content type]”, and values are the content fetched, also as a string.

parse(plist)

Update the builder using the provided plist. plist can be either a Packet() or a PacketList().