Rooba
/
scapy
mirror of https://github.com/secdev/scapy.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[doc] activate SCTP capabilities on linux

This commit is contained in:
Lucas Pascal 2017-03-13 18:55:10 +01:00
parent d8a0387bdd
commit 2e7a258292
1 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
doc/scapy/advanced_usage.rst
View File

@ -1059,3 +1059,30 @@ However, one can set ``len`` to modify this behaviour. ``len`` controls the leng
>>> str(PNIORealTime(cycleCounter=0x4242, data=[PNIORealTimeIOxS()], len=30))
'\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00BB5\x00'
SCTP
====
SCTP is a relatively young transport-layer protocol combining both TCP and UDP characteristics. The `RFC 3286 <https://tools.ietf.org/html/rfc3286>`_ introduces it and its description lays in the `RFC 4960 <https://tools.ietf.org/html/rfc4960>`_.
It is not broadly used, its mainly present in core networks operated by telecommunication companies, to support VoIP for instance.
Enabling dynamic addressing reconfiguration and chunk authentication capabilities
---------------------------------------------------------------------------------
If you are trying to discuss with SCTP servers, you may be interested in capabilities added in `RFC 4895 <https://tools.ietf.org/html/rfc4895>`_ which describe how to authenticated some SCTP chunks, and/or `RFC 5061 <https://tools.ietf.org/html/rfc5061>`_ to dynamically reconfigure the IP address of a SCTP association.
These capabilities are not always enabled by default on Linux. Scapy does not need any modification on its end, but SCTP servers may need specific activation.
To enable the RFC 4895 about authenticating chunks::
$ sudo echo 1 > /proc/sys/net/sctp/auth_enable
To enable the RFC 5061 about dynamic address reconfiguration::
$ sudo echo 1 > /proc/sys/net/sctp/addip_enable
You may also want to use the dynamic address reconfiguration without necessarily enabling the chunk authentication::
$ sudo echo 1 > /proc/sys/net/sctp/addip_noauth_enable