X-Git-Url: https://hackdaworld.org/gitweb/?a=blobdiff_plain;f=hdw-sniff.c;h=08f6998ec2864146d4def150d131908bc2ec75a6;hb=9042c664acc02475b9dbb9109d1a9ddb5d9180c0;hp=f17c8260a29ff82f3d71abc76c2e6b5e4a6c5db8;hpb=a5fd7ba7bab79996ed50a5c1d939272436446876;p=my-code%2Fhdw-sniff.git diff --git a/hdw-sniff.c b/hdw-sniff.c index f17c826..08f6998 100644 --- a/hdw-sniff.c +++ b/hdw-sniff.c @@ -52,7 +52,7 @@ int main(int argc, char *argv[]) { printf("no logfile specified, writing to stdout ...\n"); } else { - if((file_fd=open(argv[3],O_RDWR))!=0) { + if((file_fd=open(argv[3],O_RDWR | O_CREAT))!=0) { printf("writing to logfile %s ...\n",argv[3]); } else { @@ -124,10 +124,11 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, const u_char *package) { /* local variables */ - char tmp_buf[20],crypted_snap[6]; + char tmp_buf[20],crypted_snap[11]; struct linux_wlan_ng_prism_hdr *prism_hdr; struct ieee802_11_hdr *w_hdr; struct snaphdr *snap_hdr; + struct beacon_struct *beacon_hdr; struct ethhdr *e_hdr; struct iphdr *ip_hdr; struct info_struct *my_info_struct; @@ -162,6 +163,12 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, prism_hdr->msglen); printf("device: %s |\n",prism_hdr->devname); /* ieee802.11 header */ + + /* we need smaller w_hdr for non distributed frames */ + if((w_hdr->frame_ctl & (1<<8)) & (w_hdr->frame_ctl & (1<<9))) { + printf("=> distributed packet !!!!11\n"); + } else w_o-=(sizeof(struct snaphdr)-sizeof(unsigned short)); + printf("ieee802.11 header: (%d bytes)\n",w_o); w_hdr=(struct ieee802_11_hdr *)(package+p_o); @@ -186,8 +193,12 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, strcpy(tmp_buf,"probe request"); else if((w_hdr->frame_ctl & IEEE802_11_STYPE_PROBE_RESP)>0) strcpy(tmp_buf,"probe response"); - else if((w_hdr->frame_ctl & IEEE802_11_STYPE_BEACON)>0) - strcpy(tmp_buf,"beacon"); + else if((w_hdr->frame_ctl & IEEE802_11_STYPE_BEACON)==IEEE802_11_STYPE_BEACON) { + // beacon_hdr=(struct beacon_struct *)(package+p_o+w_o); + // printf("ssid: "); + // for(i=0;i<(((beacon_hdr->ssid)&0x2)>> + // strcpy(tmp_buf,"beacon"); + } else if((w_hdr->frame_ctl & IEEE802_11_STYPE_ATIM)>0) strcpy(tmp_buf,"announcement traffic indication message"); else if((w_hdr->frame_ctl & IEEE802_11_STYPE_DISASSOC)>0) @@ -208,12 +219,6 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, "ok":"unknown"); } - /* ieee802.3 */ - /* we need smaller w_hdr for non distributed frames */ - if((w_hdr->frame_ctl & (1<<8)) & (w_hdr->frame_ctl & (1<<9))) { - printf("=> distributed packet !!!!11\n"); - } else w_o-=(sizeof(struct snaphdr)-sizeof(unsigned short)); - /* ethernet */ if((strncmp(my_info_struct->dev,"eth",3)==0) | ((w_hdr->frame_ctl & IEEE802_11_FTYPE_DATA)>0)) { @@ -233,12 +238,12 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, } else { snap_hdr=(struct snaphdr *)(package+p_o+w_o); - if(snap_hdr->snap[0]==0xaa & - snap_hdr->snap[1]==0xaa & - snap_hdr->snap[2]==0x03 & - snap_hdr->snap[3]==0x00 & - snap_hdr->snap[4]==0x00 & - snap_hdr->snap[5]==0x00) { + if((snap_hdr->snap[0]==0xaa) & + (snap_hdr->snap[1]==0xaa) & + (snap_hdr->snap[2]==0x03) & + (snap_hdr->snap[3]==0x00) & + (snap_hdr->snap[4]==0x00) & + (snap_hdr->snap[5]==0x00)) { printf("- no encryption!\n"); if(snap_hdr->proto==ntohs(ETH_P_IP)) { /* we want ip header to get parsed */ @@ -249,13 +254,19 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, else { printf("- crypted packet!\n"); /* print crypted snap - write into file */ - printf("snap: (aa aa 03 00 00 00) "); - for(i=0;i<6;i++) { - printf("%x ",snap_hdr->snap[i]); - if(file_fd>0) write(file_fd,snap_hdr->snap+i,1); + printf("snap: (iv + crypted aa aa 03 00 00 00) "); + for(i=0;i<10;i++) { + printf("%x ",*(snap_hdr->snap+i)); + crypted_snap[i]=*(snap_hdr->snap+i); + // if(file_fd>0) + // write(file_fd,snap_hdr->snap+i-4,1); } printf("\n"); - // write(file_fd,'\n',1); + crypted_snap[10]='\n'; + if(file_fd>0) { + printf("debug: saved to file\n"); + write(file_fd,crypted_snap,11); + } /* dont look at ipheader */ e_hdr->h_proto=htons(0); } @@ -305,7 +316,7 @@ int hop_channel(struct info_struct *info,int foo_fd) { struct iwreq my_iwreq; - if (info->channel>=14) info->channel=1; + if (info->channel>=C_MAX) info->channel=1; memset(&my_iwreq,0,sizeof(my_iwreq)); strcpy(my_iwreq.ifr_name,info->dev);