On Thu, Jun 07, 2012 at 09:47:21AM +0900, FUJITA Tomonori wrote: > On Thu, 7 Jun 2012 09:40:02 +0900 > Isaku Yamahata <[email protected]> wrote: > > > On Thu, Jun 07, 2012 at 08:03:31AM +0900, FUJITA Tomonori wrote: > >> On Thu, 7 Jun 2012 07:48:34 +0900 > >> Isaku Yamahata <[email protected]> wrote: > >> > >> > I meant ethernet frame parser like dpkt. Some parsers depends on frame > >> > size. > >> > >> I see. Here's an update patch. > >> > >> btw, dpkt can't handle vlan header. So it's not so usuful in most of > >> production environments. We can add the feature to it but looks like > >> the development activity of dpkt is pretty low. So I'm not sure if it > >> is the library that we should use. Anyone knows other python ethernet > >> libraries? > > > > nox/pox seem to have their own frame parser, but their licence is GPL. > > Yeah, I know. > > > - http://www.secdev.org/projects/scapy/ > > I've not investigated this yet. How good? It supports vlan?
I had a _ROUGH_ look at it. - licence: GPLv2 If the project became inactive, it would be difficult for us to pick up their parser and fork them. - the project looks half-active (I wouldn't say it active) repo http://hg.secdev.org/scapy/ Mon Oct 10 09:16:08 2011 +0200 (8 months ago) ML archive: http://news.gmane.org/gmane.comp.security.scapy.general june/ 3 may: ~10? apri: ~20? It seems no development activity is going on. - It looks that their structure is specialized for their internal use case. It would take time to understand the parser structure. (at least for me) On the other hand, dpkt structure is very straight forward and much easier to understand. (at least it was for me.) - It seems it supports vlan and other protocols. but since the code is convoluted, so I'm not sure it provides us what we want without further digging. > > - fork dpkt: new bsd > > (or revive dpkt ourselves) > > > > - create our own frame praser > > fork from something(dpkt?) is a good starting point. > > Yeah, post a patch to dpkt and then if it doesn't work, then forking > dpkt is an option. > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ > Ryu-devel mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/ryu-devel > -- yamahata ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Ryu-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ryu-devel
