Support of EtherIP

[nico@…]

EtherIP is mainly used to tunnel Wifi traffic in Cisco solutions. It encapsulates Ethernet frame over IP.

--- a/scapy/layers/inet.py	Sun Jun 14 01:26:18 2009 +0200
+++ b/scapy/layers/inet.py	Fri Jun 26 11:14:37 2009 +0200
@@ -695,6 +695,11 @@
     def mysummary(self):
         return Packet.mysummary(self)
 
+class EtherIP(Packet):
+    name = "EtherIP / RFC 3378"
+    fields_desc = [ BitField("version", 3, 4),
+                    BitField("reserved", 0, 12)]
+
 bind_layers( Ether,         IP,            type=2048)
 bind_layers( CookedLinux,   IP,            proto=2048)
 bind_layers( GRE,           IP,            proto=2048)
@@ -704,6 +709,8 @@
 bind_layers( IPerror,       TCPerror,      frag=0, proto=6)
 bind_layers( IPerror,       UDPerror,      frag=0, proto=17)
 bind_layers( IP,            IP,            frag=0, proto=4)
+bind_layers( IP,            EtherIP,       frag=0, proto=0x61)
+bind_layers( EtherIP,       Ether)
 bind_layers( IP,            ICMP,          frag=0, proto=1)
 bind_layers( IP,            TCP,           frag=0, proto=6)
 bind_layers( IP,            UDP,           frag=0, proto=17)