User Tools

Site Tools


pom-ng:proto:ppp_chap

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

pom-ng:proto:ppp_chap [2013/11/29 14:38] (current)
gmsoft created
Line 1: Line 1:
 +====== Protocol ppp_chap ======
  
 +This module parses [[wp>​Challenge-Handshake_Authentication_Protocol|PPP CHAP]] packets as defined in RFC [[rfc>​1194]].
 +
 +===== Events =====
 +
 +^ Name ^ Payload associated ^ Description ^
 +|ppp_chap_challenge_response|no|Contains all the information contained in a challenge or response packet.|
 +|ppp_chap_success_failure|no|Contains all the information contained in a success or failure packet.|
 +
 +
 +The compound events [[pom-ng:​analyzer:​ppp_chap#​ppp_chap_mschapv2_auth]] and [[pom-ng:​analyzer:​ppp_chap#​ppp_chap_md5_auth]] from [[pom-ng:​analyzer:​ppp_chap|analyzer_ppp_chap]] bind those events and give the raw encryption material.
 +
 +
 +==== ppp_chap_challenge_response ====
 +This event is generated for each challenge or response packet.
 +
 +^ Field ^ Type ^ Description ^
 +|code|uint8|The code is 1 for challenge, 2 for response.|
 +|identifier|uint8|Authentification attempt identifier.|
 +|value|bytes|Byte string containing the value if any.|
 +|name|string|Name provided in the packet.|
 +
 +==== ppp_chap_success_failure ====
 +This event is generated for each reply success or failure packet from the server.
 +
 +^ Field ^ Type ^ Description ^
 +|code|uint8|The code is 3 for success, 4 for failure.|
 +|identifier|uint8|Authentication attempt identifier.|
 +|message|string|Result message from the server.|
 +
 +
 +===== Packet fields =====
 +
 +^ Name ^ Type ^ Description ^
 +|code|uint8|Packet code.|
 +|identifier|uint8|Authentication identifier.|
 +
 +===== Parameters =====
 +
 +^ Name ^ Type ^ Default value ^ Description ^
 +|auth_timeout|uint32|60|Number of seconds to wait for the authentication to complete.|
pom-ng/proto/ppp_chap.txt ยท Last modified: 2013/11/29 14:38 by gmsoft