Added OSPF support to broadcast-listener.

nselib/data/packetdecoders.lua

@@ -34,6 +34,7 @@ local target = require "target"
 --   x ARP requests (IPv4)
 --   x CDP - Cisco Discovery Protocol
 --   x EIGRP - Cisco Enhanced Interior Gateway Routing Protocol
+--   x OSPF - Open Shortest Path First
 --
 -- o UDP
 --   x DHCP
@@ -51,7 +52,8 @@ local target = require "target"
 
 -- Version 0.2
 -- Created 07/25/2011 - v0.1 - created by Patrik Karlsson
---         02/12/2012 - v.02 - added support for EIGRP - Tom Sellers
+--         02/12/2012 - v0.2 - added support for EIGRP - Tom Sellers
+--         07/13/2012 - v0.3 - added support for OSPF - Hani Benhabiles
 
 local bin    = require 'bin'
 local target = require 'target'
@@ -332,6 +334,65 @@ Decoders = {
 			getResults = function(self)	return { name = "EIGRP Hello", (self.results and tab.dump(self.results) or "")  } end,
 		},
 		
+		-- OSPF
+		['0201'] = { -- OSPFv2 Hello packet
+
+			new = function(self)
+				local o = { dups = {} }
+				setmetatable(o, self)
+						self.__index = self
+				return o
+			end,
+
+			process = function(self, layer3)
+				local p = packet.Packet:new( layer3, #layer3 ) 
+				-- IP Protocol is 89 for OSPF
+				if p.ip_p ~= 89 then return end
+
+				local ospf = require("ospf")
+				
+				local data = layer3:sub(p.ip_data_offset + 1)			
+				local header = ospf.OSPF.Header.parse(data)
+				if header then
+				    if not(self.results) then
+					self.results = tab.new(5)
+					tab.addrow(self.results, 'Source IP', 'Router ID', 'Area ID', 'Auth Type', 'Password')
+				    end
+				    local srcip = p.ip_src
+				    local areaid = header.area_id
+				    local routerid = header.router_id
+				    local authtype = header.auth_type
+				    local authdata 
+				    -- Format authentication type and data
+				    if header.auth_type == 0 then
+					authtype = "None"
+					authdata = ''
+				    elseif header.auth_type == 1 then
+					authtype = "Password"
+					authdata = header.auth_data.password
+				    elseif header.auth_type == 2 then
+					authtype = "OSPF MD5"
+					authdata = "" -- Not really helpful, as the MD5 
+						      -- is applied to the whole packet+password
+				    else
+					-- Error
+					stdnse.print_debug("Unknown OSPF auth type %d", header.auth_type)
+					return
+				    end
+
+				    if ( not(self.dups[("%s:%s"):format(routerid,areaid)]) ) then
+					if ( target.ALLOW_NEW_TARGETS ) then target.add(routerid) end
+					self.dups[("%s:%s"):format(routerid,areaid)] = true
+					tab.addrow( self.results, srcip, routerid, areaid, authtype, authdata)
+				    end
+				else
+				    return nil
+				end
+			
+			end,
+			
+			getResults = function(self)	return { name = "OSPF Hello", (self.results and tab.dump(self.results) or "")  } end,
+		},
 	},
 	
 	udp = {