A zero allocation library for parsing & writing a bunch of packet based protocols (EthernetII, IPv4, IPv6, UDP, TCP ...).
Currently supported are:
- Ethernet II
- IEEE 802.1Q VLAN Tagging Header
- IPv4
- IPv6 (missing extension headers, but supporting skipping them)
- UDP
- TCP
First, add the following to your Cargo.toml
:
[dependencies]
etherparse = "0.9.0"
Next, add this to your crate root:
extern crate etherparse;
Etherparse is intended to provide the basic network parsing functions that allow for easy analysis, transformation or generation of recorded network data.
Some key points are:
- It is completly written in Rust and thoroughly tested.
- Special attention has been paid to not use allocations or syscalls.
- The package is still in development and can & will still change.
- The current focus of development is on the most popular protocols in the internet & transport layer.
Etherparse gives you two options for parsing network packages automatically:
Here the different components in a packet are seperated without parsing all their fields. For each header a slice is generated that allows access to the fields of a header.
match SlicedPacket::from_ethernet(&packet) {
Err(value) => println!("Err {:?}", value),
Ok(value) => {
println!("link: {:?}", value.link);
println!("vlan: {:?}", value.vlan);
println!("ip: {:?}", value.ip);
println!("transport: {:?}", value.transport);
}
}
This is the faster option if your code is not interested in all fields of all the headers. It is a good choice if you just want filter or find packages based on a subset of the headers and/or their fields.
Depending from which point downward you want to slice a package check out the functions:
SlicedPacket.from_ethernet
for parsing from an Ethernet II header downwardsSlicedPacket.from_ip
for parsing from an IPv4 or IPv6 downwards
This option deserializes all known headers and transferes their contents to header structs.
match PacketHeaders::from_ethernet_slice(&packet) {
Err(value) => println!("Err {:?}", value),
Ok(value) => {
println!("link: {:?}", value.link);
println!("vlan: {:?}", value.vlan);
println!("ip: {:?}", value.ip);
println!("transport: {:?}", value.transport);
}
}
This option is slower then slicing when only few fields are accessed. But it can be the faster option or useful if you are interested in most fields anyways or if you want to re-serialize the headers with modified values.
Depending from which point downward you want to unpack a package check out the functions
PacketHeaders.from_ethernet_slice
for parsing from an Ethernet II header downwardsPacketHeaders.from_ip_slice
for parsing from an IPv4 or IPv6 downwards
It is also possible to manually slice & parse a packet. For each header type there is are metods that create a slice or struct from a memory slice.
Have a look at the documentation for the Slice.from_slice methods, if you want to create your own slices:
Ethernet2HeaderSlice.from_slice
SingleVlanHeaderSlice.from_slice
DoubleVlanHeaderSlice.from_slice
Ipv4HeaderSlice.from_slice
Ipv6HeaderSlice.from_slice
Ipv6ExtensionHeaderSlice.from_slice
UdpHeaderSlice.from_slice
TcpHeaderSlice.from_slice
And for deserialization into the corresponding header structs have a look at:
Ethernet2Header.read
&Ethernet2Header.read_from_slice
SingleVlanHeader.read
&SingleVlanHeader.read_from_slice
DoubleVlanHeader.read
&DoubleVlanHeader.read_from_slice
IpHeader.read
&IpHeader.read_from_slice
Ipv4Header.read
&Ipv4Header.read_from_slice
Ipv6Header.read
&Ipv6Header.read_from_slice
UdpHeader.read
&UdpHeader.read_from_slice
TcpHeader.read
&TcpHeader.read_from_slice
The PacketBuilder struct provides a high level interface for quickly creating network packets. The PacketBuilder will automatically set fields which can be deduced from the content and compositions of the packet itself (e.g. checksums, lengths, ethertype, ip protocol number).
use etherparse::PacketBuilder;
let builder = PacketBuilder::
ethernet2([1,2,3,4,5,6], //source mac
[7,8,9,10,11,12]) //destination mac
.ipv4([192,168,1,1], //source ip
[192,168,1,2], //desitination ip
20) //time to life
.udp(21, //source port
1234); //desitnation port
//payload of the udp packet
let payload = [1,2,3,4,5,6,7,8];
//get some memory to store the result
let mut result = Vec::<u8>::with_capacity(builder.size(payload.len()));
//serialize
//this will automatically set all length fields, checksums and identifiers (ethertype & protocol)
//before writing the packet out to "result"
builder.write(&mut result, &payload).unwrap();
There is also an example for TCP packets available.
Check out the PacketBuilder documentation for more informations.
Alternativly it is possible to manually build a packet (example). Generally each struct representing a header has a "write" method that allows it to be serialized. These write methods sometimes automatically calculate checksums and fill them in. In case this is unwanted behavior (e.g. if you want to generate a packet with an invalid checksum), it is also possible to call a "write_raw" method that will simply serialize the data without doing checksum calculations.
Read the documentations of the different methods for a more details:
Ethernet2Header.write
SingleVlanHeader.write
DoubleVlanHeader.write
Ipv4Header.write
Ipv4Header.write_raw
Ipv6Header.write
UdpHeader.write
TcpHeader.write
- Documentation
- Packet Builder
- MutPacketSlice -> modifaction of fields in slices directly?
- Reserializing SlicedPacket & MutSlicedPacket with corrected checksums & id's
- Slicing & reading packet from different layers then ethernet onward (e.g. ip, vlan...)
- IEEE 802.3
- Darpa Internet Program Protocol Specification RFC 791
- Internet Protocol, Version 6 (IPv6) Specification RFC 8200
- IANA Protocol Numbers
- Internet Protocol Version 6 (IPv6) Parameters
- Wikipedia IEEE_802.1Q
- User Datagram Protocol (UDP) RFC 768
- Transmission Control Protocol RFC 793
- TCP Extensions for High Performance RFC 7323
- The Addition of Explicit Congestion Notification (ECN) to IP RFC 3168
- Robust Explicit Congestion Notification (ECN) Signaling with Nonces RFC 3540
Licensed under the BSD 3-Clause license. Please see the LICENSE file for more information.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you shall be licensed as above, without any additional terms or conditions.