Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Parse Ethernet frame Operation, allow Parse IPv4 Header to cascade #1722

Open
wants to merge 10 commits into
base: master
Choose a base branch
from

Conversation

Kalkran
Copy link
Contributor

@Kalkran Kalkran commented Feb 18, 2024

This adds a new operation+tests that parses Ethernet frames.
Recently, I've been provided with Base64-encoded single packets which are annoying to decode manually, or even to strip the Ethernet header off.
This operation adds a basic information output and a 'packet data'-only which allows cascading to other Networking-related parsers (ie IPv4). I am still playing with the idea of updating those to allow the return of encapsulated data as well - allowing a quick/basic packet analysis through a recipe.

@Kalkran Kalkran changed the title Add Parse Ethernet frame Operation Add Parse Ethernet frame Operation, allow Parse IPv4 Header to cascade Apr 6, 2024
@Kalkran
Copy link
Contributor Author

Kalkran commented Apr 6, 2024

An accidental push before switching branches broke UI tests. These are now fixed.
The last few commits also allow the pre-existing "Parse IPv4 Header" to cascade its data down the line instead of only presenting a HTML table. Together with the Ethernet frame operation and the other IP-related parsers this allows analysis and decoding of IP packets (for example as logged by Suricata) and their contents.

@Kalkran Kalkran requested a review from a3957273 May 1, 2024 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants