/* * libtins is a net packet wrapper library for crafting and * interpreting sniffed packets. * * Copyright (C) 2011 Nasel * * This library is free software; you can redistribute it and/or * modify it under the terms of the GNU Lesser General Public * License as published by the Free Software Foundation; either * version 2.1 of the License, or (at your option) any later version. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public * License along with this library; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA */ #include #include #include #ifndef WIN32 #include #include #include #endif #include "ethernetII.h" #include "rawpdu.h" #include "ip.h" #include "arp.h" #include "utils.h" const uint8_t* Tins::EthernetII::BROADCAST = (const uint8_t*)"\xff\xff\xff\xff\xff\xff"; Tins::EthernetII::EthernetII(const std::string& iface, const uint8_t* mac_dst, const uint8_t* mac_src, PDU* child) throw (std::runtime_error) : PDU(ETHERTYPE_IP, child) { memset(&_eth, 0, sizeof(ethhdr)); if(mac_dst) this->dst_mac(mac_dst); if(mac_src) this->src_mac(mac_src); this->iface(iface); this->_eth.payload_type = 0; } Tins::EthernetII::EthernetII(uint32_t iface_index, const uint8_t* mac_dst, const uint8_t* mac_src, PDU* child) : PDU(ETHERTYPE_IP, child) { memset(&_eth, 0, sizeof(ethhdr)); if(mac_dst) this->dst_mac(mac_dst); if(mac_src) this->src_mac(mac_src); this->iface(iface_index); this->_eth.payload_type = 0; } Tins::EthernetII::EthernetII(const uint8_t *buffer, uint32_t total_sz) : PDU(ETHERTYPE_IP) { if(total_sz < sizeof(ethhdr)) throw std::runtime_error("Not enought size for an ethernetII header in the buffer."); memcpy(&_eth, buffer, sizeof(ethhdr)); PDU *next = 0; switch(payload_type()) { case ETHERTYPE_IP: next = new Tins::IP(buffer + sizeof(ethhdr), total_sz - sizeof(ethhdr)); break; case ETHERTYPE_ARP: next = new Tins::ARP(buffer + sizeof(ethhdr), total_sz - sizeof(ethhdr)); break; // Other protos plz } inner_pdu(next); } Tins::EthernetII::EthernetII(const ethhdr *eth_ptr) : PDU(ETHERTYPE_IP) { memcpy(&_eth, eth_ptr, sizeof(ethhdr)); } uint16_t Tins::EthernetII::payload_type() const { return Utils::net_to_host_s(_eth.payload_type); } void Tins::EthernetII::dst_mac(const uint8_t* new_dst_mac) { memcpy(this->_eth.dst_mac, new_dst_mac, 6); } void Tins::EthernetII::src_mac(const uint8_t* new_src_mac) { memcpy(this->_eth.src_mac, new_src_mac, 6); } void Tins::EthernetII::iface(uint32_t new_iface_index) { this->_iface_index = new_iface_index; } void Tins::EthernetII::iface(const std::string& new_iface) throw (std::runtime_error) { if (!Tins::Utils::interface_id(new_iface, this->_iface_index)) { throw std::runtime_error("Invalid interface name!"); } } uint32_t Tins::EthernetII::header_size() const { return sizeof(ethhdr); } bool Tins::EthernetII::send(PacketSender* sender) { struct sockaddr_ll addr; memset(&addr, 0, sizeof(struct sockaddr_ll)); addr.sll_family = Utils::net_to_host_s(PF_PACKET); addr.sll_protocol = Utils::net_to_host_s(ETH_P_ALL); addr.sll_halen = 6; addr.sll_ifindex = this->_iface_index; memcpy(&(addr.sll_addr), this->_eth.dst_mac, 6); return sender->send_l2(this, (struct sockaddr*)&addr, (uint32_t)sizeof(addr)); } bool Tins::EthernetII::matches_response(uint8_t *ptr, uint32_t total_sz) { if(total_sz < sizeof(ethhdr)) return false; ethhdr *eth_ptr = (ethhdr*)ptr; if(!memcmp(eth_ptr->dst_mac, _eth.src_mac, 6)) { // chequear broadcast en destino original... return true; } return false; } void Tins::EthernetII::write_serialization(uint8_t *buffer, uint32_t total_sz, const PDU *parent) { uint32_t my_sz = header_size(); assert(total_sz >= my_sz); /* Inner type defaults to IP */ if ((this->_eth.payload_type == 0) && this->inner_pdu()) { uint16_t type = ETHERTYPE_IP; switch (this->inner_pdu()->pdu_type()) { case PDU::IP: type = ETHERTYPE_IP; break; case PDU::ARP: type = ETHERTYPE_ARP; break; default: type = 0; } this->_eth.payload_type = Utils::net_to_host_s(type); } memcpy(buffer, &this->_eth, sizeof(ethhdr)); } Tins::PDU *Tins::EthernetII::recv_response(PacketSender *sender) { struct sockaddr_ll addr; memset(&addr, 0, sizeof(struct sockaddr_ll)); addr.sll_family = Utils::net_to_host_s(PF_PACKET); addr.sll_protocol = Utils::net_to_host_s(ETH_P_ALL); addr.sll_halen = 6; addr.sll_ifindex = this->_iface_index; memcpy(&(addr.sll_addr), this->_eth.dst_mac, 6); return sender->recv_l2(this, (struct sockaddr*)&addr, (uint32_t)sizeof(addr)); } Tins::PDU *Tins::EthernetII::clone_packet(const uint8_t *ptr, uint32_t total_sz) { if(total_sz < sizeof(ethhdr)) return 0; const ethhdr *eth_ptr = (ethhdr*)ptr; PDU *child = 0, *cloned; if(total_sz > sizeof(ethhdr)) { if((child = PDU::clone_inner_pdu(ptr + sizeof(ethhdr), total_sz - sizeof(ethhdr))) == 0) return 0; } cloned = new EthernetII(eth_ptr); cloned->inner_pdu(child); return cloned; }