Skip to content

Instantly share code, notes, and snippets.

@shramos
Created April 19, 2018 08:12
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save shramos/2b98867d2c344b36bfee6a7c799fbb8f to your computer and use it in GitHub Desktop.
Save shramos/2b98867d2c344b36bfee6a7c799fbb8f to your computer and use it in GitHub Desktop.
{
"Name": "Template:ETHER/IP/TCP/RAW/RAW.MQTT",
"Description": "",
"Version": "0.1",
"Timestamp": "2018-04-18 10:51:11.130810",
"Functions": {
"preconditions": {
"filter_mqttpublish": "800363706f6c796d6f7270682e636f6e646974696f6e732e707265636f6e646974696f6e732e66696c7465725f6d7174747075626c6973680a66696c7465725f6d7174747075626c6973680a71002e",
"glob_vars": "800363706f6c796d6f7270682e636f6e646974696f6e732e707265636f6e646974696f6e732e676c6f625f766172730a676c6f62616c5f766172730a71002e"
},
"executions": {
"insert_value": "800363706f6c796d6f7270682e636f6e646974696f6e732e657865637574696f6e732e696e736572745f76616c75650a696e736572745f76616c75650a71002e"
},
"postconditions": {}
},
"layers": [
{
"name": "ETHER",
"custom": false,
"lslice": "736c69636528302c20313037362c204e6f6e6529",
"fields": [
{
"name": "dst",
"value": "000000000000",
"type": [
"<class 'str'>",
null
],
"size": 6,
"slice": "736c69636528302c20362c204e6f6e6529",
"frepr": "00:00:00:00:00:00",
"custom": false
},
{
"name": "src",
"value": "000000000000",
"type": [
"<class 'str'>",
null
],
"size": 6,
"slice": "736c69636528362c2031322c204e6f6e6529",
"frepr": "00:00:00:00:00:00",
"custom": false
},
{
"name": "type",
"value": "0800",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652831322c2031342c204e6f6e6529",
"frepr": 2048,
"custom": false
}
],
"structs": {}
},
{
"name": "IP",
"custom": false,
"lslice": "736c6963652831342c20313037362c204e6f6e6529",
"fields": [
{
"name": "version",
"value": "45",
"type": [
"<class 'int'>",
"big"
],
"size": 1,
"slice": "736c6963652831342c2031352c204e6f6e6529",
"frepr": 4,
"custom": false
},
{
"name": "ihl",
"value": "45",
"type": [
"<class 'int'>",
"big"
],
"size": 1,
"slice": "736c6963652831342c2031352c204e6f6e6529",
"frepr": 5,
"custom": false
},
{
"name": "tos",
"value": "00",
"type": [
"<class 'int'>",
"big"
],
"size": 1,
"slice": "736c6963652831352c2031362c204e6f6e6529",
"frepr": 0,
"custom": false
},
{
"name": "len",
"value": "0426",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652831362c2031382c204e6f6e6529",
"frepr": 1062,
"custom": false
},
{
"name": "id",
"value": "af91",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652831382c2032302c204e6f6e6529",
"frepr": 44945,
"custom": false
},
{
"name": "flags",
"value": "4000",
"type": [
"<class 'str'>",
null
],
"size": 2,
"slice": "736c6963652832302c2032322c204e6f6e6529",
"frepr": "DF",
"custom": false
},
{
"name": "frag",
"value": "4000",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652832302c2032322c204e6f6e6529",
"frepr": 0,
"custom": false
},
{
"name": "ttl",
"value": "40",
"type": [
"<class 'int'>",
"big"
],
"size": 1,
"slice": "736c6963652832322c2032332c204e6f6e6529",
"frepr": 64,
"custom": false
},
{
"name": "proto",
"value": "06",
"type": [
"<class 'int'>",
"big"
],
"size": 1,
"slice": "736c6963652832332c2032342c204e6f6e6529",
"frepr": 6,
"custom": false
},
{
"name": "chksum",
"value": "893e",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652832342c2032362c204e6f6e6529",
"frepr": 35134,
"custom": false
},
{
"name": "src",
"value": "7f000001",
"type": [
"<class 'str'>",
null
],
"size": 4,
"slice": "736c6963652832362c2033302c204e6f6e6529",
"frepr": "127.0.0.1",
"custom": false
},
{
"name": "dst",
"value": "7f000001",
"type": [
"<class 'str'>",
null
],
"size": 4,
"slice": "736c6963652833302c2033342c204e6f6e6529",
"frepr": "127.0.0.1",
"custom": false
},
{
"name": "options",
"value": "7f000001",
"type": [
"<class 'str'>",
null
],
"size": 4,
"slice": "736c6963652833302c2033342c204e6f6e6529",
"frepr": "[]",
"custom": false
}
],
"structs": {}
},
{
"name": "TCP",
"custom": false,
"lslice": "736c6963652833342c20313037362c204e6f6e6529",
"fields": [
{
"name": "sport",
"value": "b7e2",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652833342c2033362c204e6f6e6529",
"frepr": 47074,
"custom": false
},
{
"name": "dport",
"value": "075b",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652833362c2033382c204e6f6e6529",
"frepr": 1883,
"custom": false
},
{
"name": "seq",
"value": "601ee2fe",
"type": [
"<class 'int'>",
"big"
],
"size": 4,
"slice": "736c6963652833382c2034322c204e6f6e6529",
"frepr": 1612636926,
"custom": false
},
{
"name": "ack",
"value": "8d87c438",
"type": [
"<class 'int'>",
"big"
],
"size": 4,
"slice": "736c6963652834322c2034362c204e6f6e6529",
"frepr": 2374485048,
"custom": false
},
{
"name": "dataofs",
"value": "8018",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652834362c2034382c204e6f6e6529",
"frepr": 8,
"custom": false
},
{
"name": "reserved",
"value": "8018",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652834362c2034382c204e6f6e6529",
"frepr": 0,
"custom": false
},
{
"name": "flags",
"value": "8018",
"type": [
"<class 'str'>",
"hex"
],
"size": 2,
"slice": "736c6963652834362c2034382c204e6f6e6529",
"frepr": "PA",
"custom": false
},
{
"name": "window",
"value": "0156",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652834382c2035302c204e6f6e6529",
"frepr": 342,
"custom": false
},
{
"name": "chksum",
"value": "021b",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652835302c2035322c204e6f6e6529",
"frepr": 539,
"custom": false
},
{
"name": "urgptr",
"value": "0000",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652835322c2035342c204e6f6e6529",
"frepr": 0,
"custom": false
},
{
"name": "options",
"value": "0101080a44fe497f44fe497e",
"type": [
"<class 'str'>",
"hex"
],
"size": 12,
"slice": "736c6963652835342c2036362c204e6f6e6529",
"frepr": "[('NOP', None), ('NOP', None), ('Timestamp', (1157515647, 1157515646))]",
"custom": false
}
],
"structs": {}
},
{
"name": "RAW",
"custom": false,
"lslice": "736c6963652836362c20313037362c204e6f6e6529",
"fields": [
{
"name": "load",
"value": "30ef0703e84141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414168656c6c6f",
"type": [
"<class 'str'>",
"hex"
],
"size": 1010,
"slice": "736c6963652836362c20313037362c204e6f6e6529",
"frepr": "b'0\\xef\\x07\\x03\\xe8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhello'",
"custom": false
}
],
"structs": {}
},
{
"name": "RAW.MQTT",
"custom": true,
"lslice": "736c6963652836362c20313037362c204e6f6e6529",
"fields": [
{
"name": "hdrflags",
"value": "30",
"type": [
"<class 'str'>",
null
],
"size": 1,
"slice": "736c6963652836362c2036372c204e6f6e6529",
"frepr": "0x00000030",
"custom": true
},
{
"name": "msgtype",
"value": "30",
"type": [
"<class 'int'>",
"big"
],
"size": 1,
"slice": "736c6963652836362c2036372c204e6f6e6529",
"frepr": 3,
"custom": true
},
{
"name": "dupflag",
"value": "30",
"type": [
"<class 'int'>",
"big"
],
"size": 1,
"slice": "736c6963652836362c2036372c204e6f6e6529",
"frepr": 0,
"custom": true
},
{
"name": "qos",
"value": "30",
"type": [
"<class 'int'>",
"big"
],
"size": 1,
"slice": "736c6963652836362c2036372c204e6f6e6529",
"frepr": 0,
"custom": true
},
{
"name": "retain",
"value": "30",
"type": [
"<class 'int'>",
"big"
],
"size": 1,
"slice": "736c6963652836362c2036372c204e6f6e6529",
"frepr": 0,
"custom": true
},
{
"name": "len",
"value": "ef07",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652836372c2036392c204e6f6e6529",
"frepr": 1007,
"custom": true
},
{
"name": "topic_len",
"value": "03e8",
"type": [
"<class 'int'>",
"big"
],
"size": 2,
"slice": "736c6963652836392c2037312c204e6f6e6529",
"frepr": 1000,
"custom": true
},
{
"name": "topic",
"value": "41414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141",
"type": [
"<class 'str'>",
null
],
"size": 1000,
"slice": "736c6963652837312c20313037312c204e6f6e6529",
"frepr": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
"custom": true
},
{
"name": "msg",
"value": "68656c6c6f",
"type": [
"<class 'str'>",
null
],
"size": 5,
"slice": "736c69636528313037312c20313037362c204e6f6e6529",
"frepr": "hello",
"custom": true
}
],
"structs": {}
}
],
"raw": "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"
}
@mak765
Copy link

mak765 commented Mar 15, 2021

?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment