Skip to content

wip: ipmi-pcap-decrypt command#47

Draft
oliverpool wants to merge 2 commits intogebn:masterfrom
oliverpool:ipmi_pcap_decrypt
Draft

wip: ipmi-pcap-decrypt command#47
oliverpool wants to merge 2 commits intogebn:masterfrom
oliverpool:ipmi_pcap_decrypt

Conversation

@oliverpool
Copy link
Contributor

See #44 for background on this command.


To run:

export IPMI_PASSWORD="secret"
go run . ipmidump.pcap

This worked fine for our usecase, but it is quite limited since it only prints the raw deciphered payload bytes (without decoding them into proper packets).

I don't know how to achieve this with gopacket.

cmd/ipmi-pcap-decrypt/authenticator.go is copy/paste authenticator.go (can surely be optimized, by exporting the right methods/structs).


Since the bug has been identified in our case, we (currently) don't need this tool anymore.
However I would be happy to provide feedback if needed!

@oliverpool
Copy link
Contributor Author

instead of printing to stdout, another approach would be to decrypt the payload and write a new .pcap file (so that wireshark can display it fully).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant