scapy.layers.lltd

LLTD Protocol

https://msdn.microsoft.com/en-us/library/cc233983.aspx

class scapy.layers.lltd.LLTD

Bases: scapy.packet.Packet

aliastypes

answer_hashret = {(0, 12): (0, 11), (1, 1): (0, 0)}

answers(other)

fields_desc

LLTD fields

version	ByteField	1
tos	ByteEnumField	0
reserved	ByteField	0
function	MultiEnumField (Depends on tos)	0
real_dst	MACField	None
real_src	MACField	None
xid	ShortField (Cond)	0
seq	ShortField (Cond)	0

hashret()

mysummary()

payload_guess

Possible sublayers: LLTDDiscover, LLTDEmit, LLTDHello, LLTDQueryLargeTlvResp, LLTDQueryLargeTlv, LLTDQueryResp

post_build(pkt, pay)

class scapy.layers.lltd.LLTDAttribute

Bases: scapy.packet.Packet

aliastypes

classmethod dispatch_hook(_pkt=None, *_, **kargs)

fields_desc

LLTDAttribute fields

type	ByteEnumField	0
len	FieldLenField	None
value	StrLenField	b''

payload_guess

Possible sublayers: LLTDAttribute, Padding

show_indent = False

show_summary = False

class scapy.layers.lltd.LLTDAttribute80211MaxRate

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttribute80211MaxRate fields

type	ByteEnumField	9
len	ByteField	2
rate	ShortField	0

class scapy.layers.lltd.LLTDAttribute80211PhysicalMedium

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttribute80211PhysicalMedium fields

type	ByteEnumField	21
len	ByteField	1
medium	ByteEnumField	0

class scapy.layers.lltd.LLTDAttributeCharacteristics

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeCharacteristics fields

type	ByteEnumField	2
len	FieldLenField	None
flags	FlagsField (5 bits)	<Flag 0 ()>
reserved1	BitField (11 bits)	0
reserved2	StrLenField	b''

class scapy.layers.lltd.LLTDAttributeDeviceUUID

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeDeviceUUID fields

type	ByteEnumField	18
len	FieldLenField	None
uuid	StrLenField	b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'

class scapy.layers.lltd.LLTDAttributeEOP

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeEOP fields

type

ByteEnumField

0

class scapy.layers.lltd.LLTDAttributeHostID

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeHostID fields

type	ByteEnumField	1
len	ByteField	6
mac	MACField	'00:00:00:00:00:00'

mysummary()

class scapy.layers.lltd.LLTDAttributeIPv4Address

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeIPv4Address fields

type	ByteEnumField	7
len	ByteField	4
ipv4	IPField	'0.0.0.0'

class scapy.layers.lltd.LLTDAttributeIPv6Address

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeIPv6Address fields

type	ByteEnumField	8
len	ByteField	16
ipv6	IP6Field	'::'

class scapy.layers.lltd.LLTDAttributeLargeTLV

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeLargeTLV fields

type	ByteEnumField	14
len	ByteField	0

class scapy.layers.lltd.LLTDAttributeLinkSpeed

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeLinkSpeed fields

type	ByteEnumField	12
len	ByteField	4
speed	IntField	0

class scapy.layers.lltd.LLTDAttributeMachineName

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeMachineName fields

type	ByteEnumField	15
len	FieldLenField	None
hostname	StrLenFieldUtf16	b''

mysummary()

class scapy.layers.lltd.LLTDAttributePerformanceCounterFrequency

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributePerformanceCounterFrequency fields

type	ByteEnumField	10
len	ByteField	8
freq	LongField	0

class scapy.layers.lltd.LLTDAttributePhysicalMedium

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributePhysicalMedium fields

type	ByteEnumField	3
len	ByteField	4
medium	IntEnumField	6

class scapy.layers.lltd.LLTDAttributeQOSCharacteristics

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeQOSCharacteristics fields

type	ByteEnumField	20
len	ByteField	4
flags	FlagsField (3 bits)	<Flag 0 ()>
reserved1	BitField (13 bits)	0
reserved2	ShortField	0

class scapy.layers.lltd.LLTDAttributeSeesList

Bases: scapy.layers.lltd.LLTDAttribute

aliastypes

fields_desc

LLTDAttributeSeesList fields

type	ByteEnumField	25
len	ByteField	2
max_entries	ShortField	0

class scapy.layers.lltd.LLTDDiscover

Bases: scapy.packet.Packet

aliastypes

fields_desc

LLTDDiscover fields

gen_number	ShortField	0
stations_count	FieldLenField	None
stations_list	FieldListField	[]

mysummary()

class scapy.layers.lltd.LLTDEmit

Bases: scapy.packet.Packet

aliastypes

fields_desc

LLTDEmit fields

descs_count	FieldLenField	None
descs_list	PacketListField	[]

mysummary()

class scapy.layers.lltd.LLTDEmiteeDesc

Bases: scapy.packet.Packet

aliastypes

fields_desc

LLTDEmiteeDesc fields

type	ByteEnumField	0
pause	ByteField	0
src	MACField	None
dst	MACField	'00:00:00:00:00:00'

payload_guess

Possible sublayers: Padding

class scapy.layers.lltd.LLTDHello

Bases: scapy.packet.Packet

aliastypes

fields_desc

LLTDHello fields

gen_number	ShortField	0
current_mapper_address	MACField	'00:00:00:00:00:00'
apparent_mapper_address	MACField	'00:00:00:00:00:00'

payload_guess

Possible sublayers: LLTDAttribute

show_summary = False

class scapy.layers.lltd.LLTDQueryLargeTlv

Bases: scapy.packet.Packet

aliastypes

fields_desc

LLTDQueryLargeTlv fields

type	ByteEnumField	14
offset	ThreeBytesField	0

mysummary()

class scapy.layers.lltd.LLTDQueryLargeTlvResp

Bases: scapy.packet.Packet

aliastypes

fields_desc

LLTDQueryLargeTlvResp fields

flags	FlagsField (2 bits)	<Flag 0 ()>
len	BitField (14 bits)	None
value	StrLenField	b''

mysummary()

post_build(pkt, pay)

class scapy.layers.lltd.LLTDQueryResp

Bases: scapy.packet.Packet

aliastypes

fields_desc

LLTDQueryResp fields

flags	FlagsField (2 bits)	<Flag 0 ()>
descs_count	BitField (14 bits)	None
descs_list	PacketListField	[]

mysummary()

post_build(pkt, pay)

class scapy.layers.lltd.LLTDRecveeDesc

Bases: scapy.packet.Packet

aliastypes

fields_desc

LLTDRecveeDesc fields

type	ShortEnumField	0
real_src	MACField	'00:00:00:00:00:00'
ether_src	MACField	'00:00:00:00:00:00'
ether_dst	MACField	'00:00:00:00:00:00'

payload_guess

Possible sublayers: Padding

class scapy.layers.lltd.LargeTlvBuilder

Bases: object

An object to build content fetched through LLTDQueryLargeTlv / LLTDQueryLargeTlvResp packets.

Usable with a PacketList() object: >>> p = LargeTlvBuilder() >>> p.parse(rdpcap(‘capture_file.cap’))

Or during a network capture: >>> p = LargeTlvBuilder() >>> sniff(filter=”ether proto 0x88d9”, prn=p.parse)

To get the result, use .get_data()

get_data()

Returns a dictionary object, keys are strings “source > destincation [content type]”, and values are the content fetched, also as a string.

parse(plist)

Update the builder using the provided plist. plist can be either a Packet() or a PacketList().