1 files changed, 53 insertions, 0 deletions
diff --git a/proto_ip_esp.c b/proto_ip_esp.c
new file mode 100644
index 0000000..cc4e06e
--- /dev/null
+++ b/proto_ip_esp.c
@@ -0,0 +1,53 @@
+/*
+ * netsniff-ng - the packet sniffing beast
+ * Copyright 2012 Markus Amend <markus@netsniff-ng.org>, Deutsche Flugsicherung GmbH
+ * Subject to the GPL, version 2.
+ *
+ * Encapsulating Security Payload described in RFC4303
+ */
+
+#include <stdio.h>
+#include <stdint.h>
+#include <netinet/in.h>    /* for ntohs() */
+
+#include "proto.h"
+#include "protos.h"
+#include "dissector_eth.h"
+#include "built_in.h"
+#include "pkt_buff.h"
+
+struct esp_hdr {
+	uint32_t h_spi;
+	uint32_t h_sn;
+} __packed;
+
+static void esp(struct pkt_buff *pkt)
+{
+	struct esp_hdr *esp_ops;
+
+	esp_ops = (struct esp_hdr *) pkt_pull(pkt, sizeof(*esp_ops));
+	if (esp_ops == NULL)
+		return;
+
+	tprintf(" [ ESP ");
+	tprintf("SPI (0x%x), ", ntohl(esp_ops->h_spi));
+	tprintf("SN (0x%x)", ntohl(esp_ops->h_sn));
+	tprintf(" ]\n");
+}
+
+static void esp_less(struct pkt_buff *pkt)
+{
+	struct esp_hdr *esp_ops;
+
+	esp_ops = (struct esp_hdr *) pkt_pull(pkt, sizeof(*esp_ops));
+	if (esp_ops == NULL)
+		return;
+
+	tprintf(" ESP");
+}
+
+struct protocol ip_esp_ops = {
+	.key = 0x32,
+	.print_full = esp,
+	.print_less = esp_less,
+};