a k#dO@s\ddlZddlZddlZddlmZddlmZmZmZm Z m Z m Z m Z m Z mZmZddlmZmZmZddlmZddlmZmZddlmZddlmZdd lmZmZm Z Gd d d eZ!Gd d d eZ"Gddde"Z#Gddde"Z$Gddde#e$Z%eee!ddeee!ddeee!dddeee!ddeee!ddee!edddS)N)log_automotive) ByteEnumFieldConditionalField XByteField XShortField XIntFieldXShortEnumFieldXByteEnumFieldIntFieldStrFixedLenField XStrField)Packet bind_layersbind_bottom_up) StreamSocket)TCPUDP)UDS)MTU)UnionTupleOptionalc'@seZdZdZdddddddd d d d d dddddZdZeddeddeddeedde e ddddddd d!d"d#e e d$d%d&d'd#e e d(dd)d#e e d*d%d+d,d#e e d-d%d+d.d#e e d/dd0d1d1d1d1d1d1d1d1d1d1d1d1d1d1d1d2d3d4d#e e d5dd6d1d1d1d1d1d1d1d1d1d1d1d1d1d1d1d7d3d8d#e e d9dd:d#e e d;dddd@dAd#e e dBddCd#e e dDddEd#e e dFddGdHdIdJdKdLdMdNdOdOdOdOdOdOdOdOdPdQdRdSd#e edTddUd#e edVd%dWd#e e dXddYdZd[d\d]d#e e d^dd_d`dadbd#e edcddded#e edfddgd#e edhddid#e e djddkd#e e dldddmidnd#e e dodd1d1dpdqdrddsdtdudv dwd#e edxd%dyd#gZdzd{Zd|d}Zd~dZddZdS)DoIPa Implementation of the DoIP (ISO 13400) protocol. DoIP packets can be sent via UDP and TCP. Depending on the payload type, the correct connection need to be chosen: +--------------+--------------------------------------------------------------+-----------------+ | Payload Type | Payload Type Name | Connection Kind | +--------------+--------------------------------------------------------------+-----------------+ | 0x0000 | Generic DoIP header negative acknowledge | UDP / TCP | +--------------+--------------------------------------------------------------+-----------------+ | 0x0001 | Vehicle Identification request message | UDP | +--------------+--------------------------------------------------------------+-----------------+ | 0x0002 | Vehicle identification request message with EID | UDP | +--------------+--------------------------------------------------------------+-----------------+ | 0x0003 | Vehicle identification request message with VIN | UDP | +--------------+--------------------------------------------------------------+-----------------+ | 0x0004 | Vehicle announcement message/vehicle identification response | UDP | +--------------+--------------------------------------------------------------+-----------------+ | 0x0005 | Routing activation request | TCP | +--------------+--------------------------------------------------------------+-----------------+ | 0x0006 | Routing activation response | TCP | +--------------+--------------------------------------------------------------+-----------------+ | 0x0007 | Alive Check request | TCP | +--------------+--------------------------------------------------------------+-----------------+ | 0x0008 | Alive Check response | TCP | +--------------+--------------------------------------------------------------+-----------------+ | 0x4001 | IP entity status request | UDP | +--------------+--------------------------------------------------------------+-----------------+ | 0x4002 | DoIP entity status response | UDP | +--------------+--------------------------------------------------------------+-----------------+ | 0x4003 | Diagnostic power mode information request | UDP | +--------------+--------------------------------------------------------------+-----------------+ | 0x4004 | Diagnostic power mode information response | UDP | +--------------+--------------------------------------------------------------+-----------------+ | 0x8001 | Diagnostic message | TCP | +--------------+--------------------------------------------------------------+-----------------+ | 0x8002 | Diagnostic message positive acknowledgement | TCP | +--------------+--------------------------------------------------------------+-----------------+ | 0x8003 | Diagnostic message negative acknowledgement | TCP | +--------------+--------------------------------------------------------------+-----------------+ Example with UDP: >>> socket = L3RawSocket(iface="eth0") >>> resp = socket.sr1(IP(dst="169.254.117.238")/UDP(dport=13400)/DoIP(payload_type=1)) Example with TCP: >>> socket = DoIPSocket("169.254.117.238") >>> pkt = DoIP(payload_type=0x8001, source_address=0xe80, target_address=0x1000) / UDS() / UDS_RDBI(identifiers=[0x1000]) >>> resp = socket.sr1(pkt, timeout=1) Example with UDS: >>> socket = UDS_DoIPSocket("169.254.117.238") >>> pkt = UDS() / UDS_RDBI(identifiers=[0x1000]) >>> resp = socket.sr1(pkt, timeout=1) zGeneric DoIP header NACKzVehicle identification requestz'Vehicle identification request with EIDz'Vehicle identification request with VINzDVehicle announcement message/vehicle identification response messagezRouting activation requestzRouting activation responsezAlive check requestzAlive check responsezDoIP entity status requestzDoIP entity status responsez)Diagnostic power mode information requestz*Diagnostic power mode information responsezDiagnostic messagezDiagnostic message ACKzDiagnostic message NACK)r@@@@Zprotocol_versionrZinverse_version payload_typerpayload_lengthNZnackzIncorrect pattern formatzUnknown payload typezMessage too largez Out of memoryzInvalid payload length)rrrrrcCs |jdvS)N)rr)pr.T/var/www/html/gsl.tools/lib/python3.9/site-packages/scapy/contrib/automotive/doip.pynz DoIP.Zvinr1cCs |jdvS)N)rrr+r,r.r.r/r0pr1Zlogical_addresscCs |jdvSN)rr+r,r.r.r/r0rr1ZeidrcCs |jdvS)N)rrr+r,r.r.r/r0tr1gidcCs |jdvSr3r+r,r.r.r/r0vr1Zfurther_actionzNo further action requiredzReserved by ISO 13400z8Routing activation required to initiate central security)rrrrrrrrr cCs |jdvSr3r+r,r.r.r/r0r1Zvin_gid_statuszVIN and/or GID are synchronizedz,Incomplete: VIN and GID are NOT synchronizedcCs |jdvSr3r+r,r.r.r/r0r1source_addresscCs |jdvS)N)rr r%r&r'r+r,r.r.r/r0r1activation_typeZDefaultzWWH-OBDzCentral securityZ Diagnostic)rriicCs |jdvS)N)rr+r,r.r.r/r0r1Zlogical_address_testercCs |jdvSN)rr+r,r.r.r/r0r1logical_address_doip_entitycCs |jdvSrAr+r,r.r.r/r0r1routing_activation_responsez8Routing activation denied due to unknown source address.zhRouting activation denied because all concurrently supported TCP_DATA sockets are registered and active.zRouting activation denied because an SA different from the table connection entry was received on the already activated TCP_DATA socket.ziRouting activation denied because the SA is already registered and active on a different TCP_DATA socket.z8Routing activation denied due to missing authentication.z7Routing activation denied due to rejected confirmation.zERouting activation denied due to unsupported routing activation type.zfRouting activation denied because the specified activation type requires a secure TLS TCP_DATA socket.zReserved by ISO 13400.zRouting successfully activated.z1Routing will be activated; confirmation required.)rrrrrrrrr r5r6r7r8r9r:r;r<r2cCs |jdvSrAr+r,r.r.r/r0r1Z reserved_isocCs |jdvSN)rrr+r,r.r.r/r0r1 reserved_oemcCs |jdvSrDr+r,r.r.r/r0r1Zdiagnostic_power_modez not readyreadyz not supported)rrrcCs |jdvS)N)r$r+r,r.r.r/r0r1Z node_typez DoIP gatewayz DoIP node)rrcCs |jdvSN)r"r+r,r.r.r/r0r1Zmax_open_socketsrcCs |jdvSrGr+r,r.r.r/r0r1Zcur_open_socketscCs |jdvSrGr+r,r.r.r/r0r1Z max_data_sizecCs |jdvSrGr+r,r.r.r/r0r1target_addresscCs |jdvS)Nr%r&r'r+r,r.r.r/r0r1Zack_codeZACKcCs |jdvS)N)r&r+r,r.r.r/r0r1Z nack_codezInvalid source addresszUnknown target addresszDiagnostic message too largezTarget unreachablezUnknown networkzTransport protocol error) rrrrrrrrr cCs |jdvS)N)r'r+r,r.r.r/r0r1Z previous_msgcCs |jdvS)N)r&r'r+r,r.r.r/r0r1cCsTt|t|rP|jdkrdSgd}|j|jf|vrP|jdkrL|j|jSdSdS)z)DEV: true if self is an answer from otherrr) )rr)rr)rr)rr)r r)r"r!)r$r#)r%r%)r'r%r%) isinstancetyper)payloadanswers)selfothermatchesr.r.r/rMs  z DoIP.answerscCs>|jdvr.t|ddtd|j|jASt|ddS)NrIrH)r)bytesstructpackrHr=)rNr.r.r/hashrets   z DoIP.hashretcCsF|jdur>|ddtdt|t|d|dd}||S)zP This will set the Field 'payload_length' to the correct value. Nrz!Ir )r*rSrTlen)rNpktZpayr.r.r/ post_builds  & zDoIP.post_buildcCs(|jdkr |d|jddfSdSdS)Nr%r)r1N)r)r*)rNsr.r.r/extract_paddings zDoIP.extract_padding)__name__ __module__ __qualname____doc__Z payload_typesnamerrr rrr rr rr Z fields_descrMrUrXrZr.r.r.r/rs08                  d rc@s2eZdZdZddd Zejfd d Zdd d ZdS) DoIPSocketa3 Custom StreamSocket for DoIP communication. This sockets automatically sends a routing activation request as soon as a TCP connection is established. :param ip: IP address of destination :param port: destination port, usually 13400 :param activate_routing: If true, routing activation request is automatically sent :param source_address: DoIP source address :param target_address: DoIP target address, this is automatically determined if routing activation request is sent :param activation_type: This allows to set a different activation type for the routing activation request :param reserved_oem: Optional parameter to set value for reserved_oem field of routing activation request Example: >>> socket = DoIPSocket("169.254.0.131") >>> pkt = DoIP(payload_type=0x8001, source_address=0xe80, target_address=0x1000) / UDS() / UDS_RDBI(identifiers=[0x1000]) >>> resp = socket.sr1(pkt, timeout=1) 127.0.0.1X4Trr1cCs2||_||_||_||r.|||||dSN)ipportr= _init_socket_activate_routingrNrerfZactivate_routingr=rHr>rEr.r.r/__init__szDoIPSocket.__init__cCsVt|tj}|tjtjd|tjtjd||j|j ft ||t dS)Nr) socket SOCK_STREAM setsockopt IPPROTO_TCP TCP_NODELAY SOL_SOCKET SO_REUSEADDRconnectrerfrrjr)rNZ sock_familyrYr.r.r/rgs zDoIPSocket._init_socketcCsd|jtd|||dddd}|rP|jdkrP|jdkrP|p<|j|_td|jntd t |dS) Nr)r)r>r=rEFr)verbosetimeoutrr<z:Routing activation successful! Target address set to: 0x%xz'Routing activation failed! Response: %s) Zsr1rr)rCrBrHrinfoerrorrepr)rNr=rHr>rErespr.r.r/rhs&zDoIPSocket._activate_routingN)rarbTrcrrr1)r1) r[r\r]r^rjrkAF_INETrgrhr.r.r.r/r`s  r`cs"eZdZdZd fdd ZZS) DoIPSocket6aY Custom StreamSocket for DoIP communication over IPv6. This sockets automatically sends a routing activation request as soon as a TCP connection is established. :param ip: IPv6 address of destination :param port: destination port, usually 13400 :param activate_routing: If true, routing activation request is automatically sent :param source_address: DoIP source address :param target_address: DoIP target address, this is automatically determined if routing activation request is sent :param activation_type: This allows to set a different activation type for the routing activation request :param reserved_oem: Optional parameter to set value for reserved_oem field of routing activation request Example: >>> socket = DoIPSocket6("2001:16b8:3f0e:2f00:21a:37ff:febf:edb9") >>> pkt = DoIP(payload_type=0x8001, source_address=0xe80, target_address=0x1000) / UDS() / UDS_RDBI(identifiers=[0x1000]) >>> resp = socket.sr1(pkt, timeout=1) ::1rbTrcrr1csB||_||_||_tt|tj|r>tt|||||dSrd) rerfr=superrzrgrkAF_INET6rhri __class__r.r/rjIs zDoIPSocket6.__init__)r{rbTrcrrr1)r[r\r]r^rj __classcell__r.r.r~r/rz3s rzcs0eZdZdZfddZeffdd ZZS)UDS_DoIPSocketa7 Application-Layer socket for DoIP endpoints. This socket takes care about the encapsulation of UDS packets into DoIP packets. Example: >>> socket = UDS_DoIPSocket("169.254.117.238") >>> pkt = UDS() / UDS_RDBI(identifiers=[0x1000]) >>> resp = socket.sr1(pkt, timeout=1) csXt|tr"td|j|jd|}n|}zt|_WntyFYn0tt | |S)Nr%)r)r=rH) rJrrr=rHtimeZ sent_timeAttributeErrorr|rsendrNxrWr~r.r/ras  zUDS_DoIPSocket.sendcs,tt||}|r$|jdkr$|jS|SdS)Nr%)r|rrecvr)rLrr~r.r/rpszUDS_DoIPSocket.recv)r[r\r]r^rrrrr.r.r~r/rWs rc@seZdZdZdS)UDS_DoIPSocket6aO Application-Layer socket for DoIP endpoints. This socket takes care about the encapsulation of UDS packets into DoIP packets. Example: >>> socket = UDS_DoIPSocket6("2001:16b8:3f0e:2f00:21a:37ff:febf:edb9") >>> pkt = UDS() / UDS_RDBI(identifiers=[0x1000]) >>> resp = socket.sr1(pkt, timeout=1) N)r[r\r]r^r.r.r.r/rys rrb)sport)dport)rrr%r+)&rSrkrZscapy.contrib.automotiverZ scapy.fieldsrrrrrrr r r r Z scapy.packetr rrZscapy.supersocketrZscapy.layers.inetrrZscapy.contrib.automotive.udsrZ scapy.datarZ scapy.compatrrrrr`rzrrr.r.r.r/ s, 0   XA$"