pancap/ethernet/dhcpv4/dhcp.go

package dhcpv4

import (
	"git.darknebu.la/maride/pancap/output"
	"github.com/google/gopacket"
	"github.com/google/gopacket/layers"
)

// Called on every DHCP (v4) packet
func HandleDHCPv4Packet(packet gopacket.Packet) error {
	var dhcppacket layers.DHCPv4
	var ethernetpacket layers.Ethernet

	// For some reason I can't find an explanation for,
	// 	packet.Layer(layers.LayerTypeDHCPv4).LayerContents(), which effectively is
	// 	packet.Layers()[3].layerContents(), is empty, but
	//  packet.Layers()[2].layerPayload() contains the correct DHCP packet.
	// ... although both calls should return the same bytes.
	// TODO: Open an Issue on github.com/google/gopacket

	// Decode raw packet into DHCPv4
	decodeDHCPErr := dhcppacket.DecodeFromBytes(packet.Layers()[2].LayerPayload(), gopacket.NilDecodeFeedback)
	if decodeDHCPErr != nil {
		// Encountered an error during decoding, most likely a broken packet
		return decodeDHCPErr
	}

	// And decode raw packet into Ethernet
	decodeEthernetErr := ethernetpacket.DecodeFromBytes(packet.Layer(layers.LayerTypeEthernet).LayerContents(), gopacket.NilDecodeFeedback)
	if decodeEthernetErr != nil {
		// Encountered an error during decoding, most likely a broken packet
		return decodeEthernetErr
	}

	// Examine packet further
	if dhcppacket.Operation == layers.DHCPOpRequest {
		// Request packet
		processRequestPacket(dhcppacket)
	} else {
		// Response/Offer packet
		processResponsePacket(dhcppacket, ethernetpacket)
	}

	// Check for Hostname DHCP option (12)
	checkForHostname(dhcppacket)
	checkForNetworkInfos(dhcppacket)

	return nil
}

// Print summary after all packets are processed
func PrintDHCPv4Summary() {
	output.PrintBlock("DHCP Network Overview", generateNetworkSummary())
	output.PrintBlock("DHCP Requests", generateRequestSummary())
	output.PrintBlock("DHCP Responses/Offers", generateResponseSummary())
	output.PrintBlock("DHCP Hostnames", generateHostnamesSummary())
}