Differences

This shows you the differences between two versions of the page.

--- pom-ng:proto:ppp_pap [2015/07/06 13:00] – Add proto SIP gmsoft
+++ pom-ng:proto:ppp_pap [2020/05/26 21:59] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
-====== Protocol sip ======
+====== Protocol ppp_pap ======
-This module parses [[wp>Session_Initiation_Protocol|SIP]] packets as defined in RFC [[rfc>3261]] and others.
+This module parses [[wp>Password_authentication_protocol|PPP PAP]] packets as defined in RFC [[rfc>1334]].
 ===== Events =====
 ^ Name ^ Payload associated ^ Description ^
-|sip_req|yes|Contains all the information contained in a SIP request.|
+|ppp_pap_request|no|Contains all the information contained in a request packet.|
-|sip_rsp|yes|Contains all the information contained in a SIP response.|
+|ppp_pap_ack_nack|no|Contains all the information contained in an ACK or NACK packet.|
-==== sip_reg ====
+The compound event [[pom-ng:analyzer:ppp_pap#ppp_pap_auth]] from [[pom-ng:analyzer:ppp_pap|analyzer_ppp_pap]] bind those events and provides more detail about the authentication attempt.
-This event is generated for each SIP request packet.
-^ Field ^ Type ^ Description ^
-|method|string|Method of the request (i.e. INVITE,BYE).|
-|uri|string|URI of the request.|
-Additionally, this event has the common properties described below.
+==== ppp_pap_request ====
+This event is generated for each PAP request packet.
-==== sip_rsp ====
-This event is generated for each SIP response packet
 ^ Field ^ Type ^ Description ^
-|status|uint16|Response status.|
+|code|uint8|The code is 1.|
-|reason|string|Reason provided for the status.|
+|identifier|uint8|Authentification attempt identifier.|
+|peer_id|string|String containing the peer-id (username).|
+|password|string|The password.|
-Additionally, this event has the common properties described below.
+==== ppp_ack_nack ====
+This event is generated for each Acknoledgement or N-Ack packet.
-==== common properites ====
 ^ Field ^ Type ^ Description ^
-|first_line|string|First line of the packet.|
+|code|uint8|The code is 2 for Ack, 3 for N-Ack.|
-|calld_id|string|Call-id used in this packet.|
+|identifier|uint8|Authentication attempt identifier.|
-|top_branch|string|SIP top (first seen) branch of the packet.|
+|message|string|Result message from the server.|
-|cseq_num|uint32|Sequence number.|
-|cseq_method|string|Sequence method.|
-|content_type|string|Value of the Content-Type header.|
-|content_len|string|Value of the Content-Length header.|
-|from_display|string|Display name in the From header.|
-|from_uri|string|URI in the From header.|
-|from_tag|string|Tag in the From header.|
-|to_display|string|Display name in the To header.|
-|to_uri|string|URI in the To header.|
-|to_tag|string|Tag in the To header.|
-|other_headers|string list|List of unparsed header.|
 ===== Packet fields =====
-None
+^ Name ^ Type ^ Description ^
+|code|uint8|Packet code.|
+|identifier|uint8|Authentication identifier.|
 ===== Parameters =====
 ^ Name ^ Type ^ Default value ^ Description ^
-|udp_timeout|uint32|300|Number of seconds before timing out SIP over UDP sessions.|
+|auth_timeout|uint32|60|Number of seconds to wait for the authentication to complete.|