metasploit-framework/lib/snmp/pdu.rb

382 lines
11 KiB
Ruby

#
# Copyright (c) 2004 David R. Halliday
# All rights reserved.
#
# This SNMP library is free software. Redistribution is permitted under the
# same terms and conditions as the standard Ruby distribution. See the
# COPYING file in the Ruby distribution for details.
#
require 'snmp/ber'
require 'snmp/varbind'
include SNMP::BER
module SNMP
# Exceptions thrown during message/pdu decoding
class UnsupportedVersion < RuntimeError; end
class UnsupportedPduTag < RuntimeError; end
class InvalidPduTag < RuntimeError; end
class ParseError < RuntimeError; end
class InvalidErrorStatus < RuntimeError; end
class InvalidTrapVarbind < RuntimeError; end
class InvalidGenericTrap < RuntimeError; end
SYS_UP_TIME_OID = ObjectId.new("1.3.6.1.2.1.1.3.0")
SNMP_TRAP_OID_OID = ObjectId.new("1.3.6.1.6.3.1.1.4.1.0")
class Message
attr_reader :version
attr_reader :community
attr_reader :pdu
class << self
def decode(data)
message_data, remainder = decode_sequence(data)
assert_no_remainder(remainder)
version, remainder = decode_version(message_data)
community, remainder = decode_octet_string(remainder)
pdu, remainder = decode_pdu(version, remainder)
assert_no_remainder(remainder)
Message.new(version, community, pdu)
end
def decode_version(data)
version_data, remainder = decode_integer(data)
if version_data == SNMP_V1
version = :SNMPv1
elsif version_data == SNMP_V2C
version = :SNMPv2c
else
raise UnsupportedVersion, version_data.to_s
end
return version, remainder
end
def decode_pdu(version, data)
pdu_tag, pdu_data, remainder = decode_tlv(data)
case pdu_tag
when GetRequest_PDU_TAG
pdu = PDU.decode(GetRequest, pdu_data)
when GetNextRequest_PDU_TAG
pdu = PDU.decode(GetNextRequest, pdu_data)
when Response_PDU_TAG
pdu = PDU.decode(Response, pdu_data)
when SetRequest_PDU_TAG
pdu = PDU.decode(SetRequest, pdu_data)
when SNMPv1_Trap_PDU_TAG
raise InvalidPduTag, "SNMPv1-trap not valid for #{version.to_s}" if version != :SNMPv1
pdu = SNMPv1_Trap.decode(pdu_data)
when GetBulkRequest_PDU_TAG
raise InvalidPduTag, "get-bulk not valid for #{version.to_s}" if version != :SNMPv2c
pdu = PDU.decode(GetBulkRequest, pdu_data)
when InformRequest_PDU_TAG
raise InvalidPduTag, "inform not valid for #{version.to_s}" if version != :SNMPv2c
pdu = PDU.decode(InformRequest, pdu_data)
when SNMPv2_Trap_PDU_TAG
raise InvalidPduTag, "SNMPv2c-trap not valid for #{version.to_s}" if version != :SNMPv2c
pdu = PDU.decode(SNMPv2_Trap, pdu_data)
else
raise UnsupportedPduTag, pdu_tag.to_s
end
return pdu, remainder
end
end
def initialize(version, community, pdu)
@version = version
@community = community
@pdu = pdu
end
def response
Message.new(@version, @community, Response.from_pdu(@pdu))
end
def encode_version(version)
if version == :SNMPv1
encode_integer(SNMP_V1)
elsif version == :SNMPv2c
encode_integer(SNMP_V2C)
else
raise UnsupportedVersion, version.to_s
end
end
def encode
data = encode_version(@version)
data << encode_octet_string(@community)
data << @pdu.encode
encode_sequence(data)
end
end
class PDU
attr_accessor :request_id
attr_accessor :error_index
attr_accessor :varbind_list
alias vb_list varbind_list
def self.decode(pdu_class, pdu_data)
request_id, remainder = decode_integer(pdu_data)
error_status, remainder = decode_integer(remainder)
error_index, remainder = decode_integer(remainder)
varbind_list, remainder = VarBindList.decode(remainder)
assert_no_remainder(remainder)
pdu_class.new(request_id, varbind_list, error_status, error_index)
end
ERROR_STATUS_NAME = {
0 => :noError,
1 => :tooBig,
2 => :noSuchName,
3 => :badValue,
4 => :readOnly,
5 => :genErr,
6 => :noAccess,
7 => :wrongType,
8 => :wrongLength,
9 => :wrongEncoding,
10 => :wrongValue,
11 => :noCreation,
12 => :inconsistentValue,
13 => :resourceUnavailable,
14 => :commitFailed,
15 => :undoFailed,
16 => :authorizationError,
17 => :notWritable,
18 => :inconsistentName
}
ERROR_STATUS_CODE = ERROR_STATUS_NAME.invert
def initialize(request_id, varbind_list, error_status=0, error_index=0)
@request_id = request_id
self.error_status = error_status
@error_index = error_index.to_int
@varbind_list = varbind_list
end
def error_status=(status)
@error_status = ERROR_STATUS_CODE[status]
unless @error_status
if status.respond_to?(:to_int) && ERROR_STATUS_NAME[status.to_int]
@error_status = status
else
raise InvalidErrorStatus, status.to_s
end
end
end
def error_status
ERROR_STATUS_NAME[@error_status]
end
def encode_pdu(pdu_tag)
pdu_data = encode_integer(@request_id)
pdu_data << encode_integer(@error_status)
pdu_data << encode_integer(@error_index)
pdu_data << @varbind_list.encode
encode_tlv(pdu_tag, pdu_data)
end
def each_varbind(&block)
@varbind_list.each(&block)
end
end
class GetRequest < PDU
def encode
encode_pdu(GetRequest_PDU_TAG)
end
end
class GetNextRequest < PDU
def encode
encode_pdu(GetNextRequest_PDU_TAG)
end
end
class SetRequest < PDU
def encode
encode_pdu(SetRequest_PDU_TAG)
end
end
class GetBulkRequest < PDU
alias max_repetitions error_index
alias max_repetitions= error_index=
def encode
encode_pdu(GetBulkRequest_PDU_TAG)
end
def non_repeaters=(number)
@error_status = number
end
def non_repeaters
@error_status
end
end
class Response < PDU
class << self
def from_pdu(request)
Response.new(request.request_id, request.varbind_list,
:noError, 0)
end
end
def encode
encode_pdu(Response_PDU_TAG)
end
end
##
# The PDU class for traps in SNMPv2c. Methods are provided for retrieving
# the values of the mandatory varbinds: the system uptime and the OID of the
# trap. The complete varbind list is available through the usual varbind_list
# method. The first two varbinds in this list will always be the uptime
# and trap OID varbinds.
#
class SNMPv2_Trap < PDU
def encode
encode_pdu(SNMPv2_Trap_PDU_TAG)
end
##
# Returns the source IP address for the trap, usually derived from the
# source IP address of the packet that delivered the trap.
#
attr_accessor :source_ip
##
# Returns the value of the mandatory sysUpTime varbind for this trap.
#
# Throws InvalidTrapVarbind if the sysUpTime varbind is not present.
#
def sys_up_time
varbind = @varbind_list[0]
if varbind && (varbind.name == SYS_UP_TIME_OID)
return varbind.value
else
raise InvalidTrapVarbind, "Expected sysUpTime.0, found " + varbind.to_s
end
end
##
# Returns the value of the mandatory snmpTrapOID varbind for this trap.
#
# Throws InvalidTrapVarbind if the snmpTrapOID varbind is not present.
#
def trap_oid
varbind = @varbind_list[1]
if varbind && (varbind.name == SNMP_TRAP_OID_OID)
return varbind.value
else
raise InvalidTrapVarbind, "Expected snmpTrapOID.0, found " + varbind.to_s
end
end
end
##
# The PDU class for SNMPv2 Inform notifications. This class is identical
# to SNMPv2_Trap.
#
class InformRequest < SNMPv2_Trap
def encode
encode_pdu(InformRequest_PDU_TAG)
end
end
##
# The PDU class for traps in SNMPv1.
#
class SNMPv1_Trap
##
# Returns the source IP address for the trap, usually derived from the
# source IP address of the packet that delivered the trap.
#
attr_accessor :source_ip
attr_accessor :enterprise
attr_accessor :agent_addr
attr_accessor :specific_trap
attr_accessor :timestamp
attr_accessor :varbind_list
alias :vb_list :varbind_list
def self.decode(pdu_data)
oid_data, remainder = decode_object_id(pdu_data)
enterprise = ObjectId.new(oid_data)
ip_data, remainder = decode_ip_address(remainder)
agent_addr = IpAddress.new(ip_data)
generic_trap, remainder = decode_integer(remainder)
specific_trap, remainder = decode_integer(remainder)
time_data, remainder = decode_timeticks(remainder)
timestamp = TimeTicks.new(time_data)
varbind_list, remainder = VarBindList.decode(remainder)
assert_no_remainder(remainder)
SNMPv1_Trap.new(enterprise, agent_addr, generic_trap, specific_trap,
timestamp, varbind_list)
end
def initialize(enterprise, agent_addr, generic_trap, specific_trap, timestamp, varbind_list)
@enterprise = enterprise
@agent_addr = agent_addr
self.generic_trap = generic_trap
@specific_trap = specific_trap
@timestamp = timestamp
@varbind_list = varbind_list
end
# Name map for all of the generic traps defined in RFC 1157.
GENERIC_TRAP_NAME = {
0 => :coldStart,
1 => :warmStart,
2 => :linkDown,
3 => :linkUp,
4 => :authenticationFailure,
5 => :egpNeighborLoss,
6 => :enterpriseSpecific
}
# Code map for all of the generic traps defined in RFC 1157.
GENERIC_TRAP_CODE = GENERIC_TRAP_NAME.invert
def generic_trap=(trap)
@generic_trap = GENERIC_TRAP_CODE[trap]
unless @generic_trap
if trap.respond_to?(:to_i) && GENERIC_TRAP_NAME[trap.to_i]
@generic_trap = trap
else
raise InvalidGenericTrap, trap.to_s
end
end
end
def generic_trap
GENERIC_TRAP_NAME[@generic_trap]
end
def encode
pdu_data = @enterprise.encode <<
@agent_addr.encode <<
encode_integer(@generic_trap) <<
encode_integer(@specific_trap) <<
@timestamp.encode <<
@varbind_list.encode
encode_tlv(SNMPv1_Trap_PDU_TAG, pdu_data)
end
def each_varbind(&block)
@varbind_list.each(&block)
end
end
end