Class Radius

scapy/layers/radius.py:1310–1381

Implements a RADIUS packet (RFC 2865).

class Radius(Packet):
    """
    Implements a RADIUS packet (RFC 2865).
    """

    name = "RADIUS"
    fields_desc = [
        ByteEnumField("code", 1, _packet_codes),
        ByteField("id", 0),
        FieldLenField(
            "len",
            None,
            "attributes",
            "H",
            adjust=lambda pkt, x: len(pkt.attributes) + 20
        ),
        XStrFixedLenField("authenticator", "", 16),
        PacketListField(
            "attributes",
            [],
            RadiusAttribute,
            length_from=lambda pkt: pkt.len - 20
        )
    ]

    def compute_authenticator(self, packed_request_auth, shared_secret):
        """
        Computes the authenticator field (RFC 2865 - Section 3)
        """

        data = prepare_packed_data(self, packed_request_auth)
        radius_mac = hashlib.md5(data + shared_secret)
        return radius_mac.digest()

    def post_build(self, p, pay):
        p += pay
        length = self.len
        if length is None:
            length = len(p)
            p = p[:2] + struct.pack("!H", length) + p[4:]
        return p

    def mysummary(self):
        extra = ""
        if self.code == 1:
            # Access-Request
            attrs = {
                (
                    (x.vendor_id, x.vendor_type)
                    if RadiusAttr_Vendor_Specific in x else
                    x.type
                ): x
                for x in self.attributes
                if isinstance(x, RadiusAttribute)
            }
            # Log additional attributes
            if 1 in attrs:
                extra += "User:'%s' " % attrs[1].value.decode(errors="ignore")