X-Git-Url: https://hackdaworld.org/gitweb/?a=blobdiff_plain;f=hdw-sniff.c;h=f6da20f0559c471a12de85c28b66e6b8cb9b54b1;hb=3fa4b2b00e5e3149c7d3c7cc354f58770ff9260f;hp=48e7bdc0876293789654969feab241eda65fd4c0;hpb=35df42866e250c555345452bb26bb6946ac25de8;p=my-code%2Fhdw-sniff.git diff --git a/hdw-sniff.c b/hdw-sniff.c index 48e7bdc..f6da20f 100644 --- a/hdw-sniff.c +++ b/hdw-sniff.c @@ -5,12 +5,21 @@ */ #include +#include +#include +#include +#include +#include +#include #include +#include +#include +#include /* IEEE 802.3 stuff -- i will concentrate on .11 stuff before! */ -#include +#include /* for ethhdr struct */ #include /* ip */ -#include /* in_addr */ +#include /* in_addr , inet_ntoa */ /* IEEE 802.11 stuff -- will become one include later ... */ #include "ieee80211.h" /* from hunz's aeolus, short hostap_wlan.h */ @@ -18,55 +27,158 @@ #include "hdw-sniff.h" /* my functions */ -#define MAX_PACKAGES 3 - int main(int argc, char *argv[]) { - int i,count; char pcap_error[PCAP_ERRBUF_SIZE]; pcap_t *pcap_handle; - const u_char *package; - struct pcap_pkthdr pcap_header; - struct ethhdr *e_hdr; - struct ip *ip_hdr; - struct ieee802_11_hdr *w_hdr; + int pcap_fd,foo_fd; + fd_set pcap_fd_set; + struct timeval fd_set_tv; + char sys_call[30]; + FILE *logfile; + struct info_struct my_info_struct; /* parse the arguments */ - if(argc<2) { - printf("usage: %s \n",argv[0]); + if(argc<3) { + printf("usage: %s \n", + argv[0]); return 0; } - if(argc!=3) { + if(argc!=4) { printf("no logfile specified, writing to stdout ...\n"); + } + else { + if((logfile=fopen(argv[3],"w"))!=NULL) { + printf("writing to logfile %s ...\n",argv[3]); + } + else { + printf("can't open logfile!\n"); + } } - + + /* setting up device and set monitor mode */ + if(atoi(argv[2])==1) { + printf("setting to monitor mode\n"); + if(strncmp(argv[1],"wlan",4)==0) + sprintf(sys_call,"iwpriv %s monitor 3",argv[1]); + if(strncmp(argv[1],"eth",3)==0) + sprintf(sys_call,"ifconfig %s promisc",argv[1]); + system(sys_call); + } + printf("setting up interface\n"); + sprintf(sys_call,"ifconfig %s up",argv[1]); + system(sys_call); + /* start pcap session */ pcap_handle=pcap_open_live(argv[1],BUFSIZ,1,-1,pcap_error); if(pcap_handle==NULL) { printf("%s: %s\n",argv[0],pcap_error); return 1; } + + /* set non blocking */ + if((pcap_setnonblock(pcap_handle,1,pcap_error))==-1) { + printf("%s: %s\n",argv[0],pcap_error); + return 1; + } /* grab a package until user breaks */ - count=0; - while (count package %d ---- %s",count, - ctime((const time_t*)&pcap_header.ts.tv_sec)); - printf("pcap header: "); - printf("capture length=%d ",pcap_header.caplen); - printf("length(off wire)=%d\n",pcap_header.len); + my_info_struct.count=0; + my_info_struct.mmode=argv[2][0]; + strcpy(my_info_struct.dev,argv[1]); + + /* prepare for select */ + pcap_fd=pcap_fileno(pcap_handle); + + /* create file descriptor */ + if((foo_fd=socket(AF_INET,SOCK_DGRAM,0))==-1) { + printf("unable to create socket foo_fd\n"); + return -1; + } + + /* do loopp */ + while (1) { + + /* set pcap_fd */ + FD_ZERO(&pcap_fd_set); + FD_SET(pcap_fd,&pcap_fd_set); + fd_set_tv.tv_sec=0; + fd_set_tv.tv_usec=200000; + + if((select(pcap_fd+1,&pcap_fd_set,NULL,NULL,&fd_set_tv)) && (FD_ISSET(pcap_fd,&pcap_fd_set))) pcap_dispatch(pcap_handle,-1,pcap_process,(u_char *)&my_info_struct); + else if((hop_channel(&my_info_struct,foo_fd))==-1) { + printf("channelhopping failed, aborting\n"); + return -1; + } } + return 0; +} + + +/* pcap_process callback function */ +void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, + const u_char *package) { - /* is ieee802.11 ? -- we assume yes :) */ + /* local variables */ + struct linux_wlan_ng_prism_hdr *prism_hdr; + struct ieee802_11_hdr *w_hdr; + struct ethhdr *e_hdr; + struct iphdr *ip_hdr; + struct info_struct *my_info_struct; + int i,p_o,w_o,e_o,i_o; + + my_info_struct=(struct info_struct *)info; + ++(my_info_struct->count); + + /* cache offsets */ + p_o=((strncmp(my_info_struct->dev,"wlan",4)==0)?sizeof(struct linux_wlan_ng_prism_hdr):0); + w_o=((strncmp(my_info_struct->dev,"wlan",4)==0)?sizeof(struct ieee802_11_hdr):0); + e_o=sizeof(struct ethhdr); + i_o=sizeof(struct iphdr); + + printf("\n"); + printf("---> package %d ---- %s",my_info_struct->count, + ctime((const time_t*)&(pcap_header->ts.tv_sec))); + printf("pcap header:\n"); + printf("capture_length: %d (dec.)\t",pcap_header->caplen); + printf("length(off wire): %d (dec.)\n",pcap_header->len); + /* prism wlan ng headers */ + if((my_info_struct->mmode-0x30==1) && + (strncmp(my_info_struct->dev,"wlan",4)==0)) { + printf("prism header: (%d bytes)\n",p_o); + prism_hdr=(struct linux_wlan_ng_prism_hdr *)package; + printf("message code/length: %d/%d\n",ntohs(prism_hdr->msgcode), + ntohs(prism_hdr->msglen)); + printf("device: %s\n",prism_hdr->devname); + /* skip wlan_ng_prism header */ + // package=package+p_o; + + /* ieee802.11 header */ + printf("ieee802.11 header: (%d bytes)\n",w_o); + w_hdr=(struct ieee802_11_hdr *)(package+p_o); + printf("debug:\n"); + for(i=0;i<16;i++) { + printf("%x -> ",1<frame_ctl) & (1<frame_ctl), + ntohs(w_hdr->duration_id)); + printf("version check ... %s\n", + ((ntohs(w_hdr->frame_ctl) & IEEE802_11_FCTL_VERS)==0x00)? + "ok":"unknown"); + // printf("type: + /* skip ieee802.11 header */ + // package=package+w_o; + } + + /* ieee802.3 */ /* ethernet */ - e_hdr=(struct ethhdr *)package; + printf("ethernet: (%d bytes)\n",e_o); + e_hdr=(struct ethhdr *)(package+p_o+w_o); /* what types ? */ - printf("types = "); + printf("type = "); printf("%x ",ntohs(e_hdr->h_proto)); printf("dest_addr = "); for(i=0;ih_source+i),((i==ETH_ALEN-1)?"\n":":")); + /* IP ? */ if(ntohs(e_hdr->h_proto)==ETH_P_IP) { - printf("ip protocol: "); - ip_hdr=(struct ip *)(package+sizeof(struct ethhdr)); - printf("version = %x ",ntohs(ip_hdr->ip_v)); - printf("header_length = %x \n",ntohs(ip_hdr->ip_hl)); - // i=0; - //printf("service = %x ",*(ip_hdr->ip_tos)); - //printf("total_length(dec.) = %hu \n",*(ip_hdr->ip_len)); - //printf("ip_addresses: source = "); - //for(i=0;i<4;i++) - // printf("%x%s",*(ip_hdr->ip_src+i), - // (i==3?"\n":".")); - - + printf("ip protocol: (%d bytes)\n",i_o); + ip_hdr=(struct iphdr *)(package+p_o+w_o+e_o); + printf("version = %x ",ntohs(ip_hdr->version)); + printf("header_length = %x \n",ntohs(ip_hdr->ihl)); + printf("service = %x ",ntohs(ip_hdr->tos)); + printf("total_length(dec.) = %d \n",ntohs(ip_hdr->tot_len)); + printf("source_ip: "); + for(i=3;i>=0;--i) { + printf("%d%s", + ip_hdr->saddr&0xff<=0;--i) { + printf("%d%s", + ip_hdr->daddr&0xff<saddr), + // inet_ntoa(ip_hdr->daddr)); + printf("ip_id = %x ",ntohs(ip_hdr->id)); + printf("ip_offset = %x \n",ntohs(ip_hdr->frag_off)); + printf("time2live = %x ip_proto = %x\n",ntohs(ip_hdr->ttl), + ntohs(ip_hdr->protocol)); + // printf("chksum: %x\n",ntohs(ip_hdr->ip_sum)); } - printf("rest:\n"); - for(i=sizeof(struct ethhdr);icaplen;i++) printf("%x ",*(package+i)); printf("\n"); - } - printf("\n"); - printf("wake up early! :)\n"); + printf("all ethernet dump: (char)\n"); + for(i=p_o+w_o+e_o;icaplen;i++) + printf("%c ",*(package+i)); printf("\n"); } + +int hop_channel(struct info_struct *info,int foo_fd) { + if((info->mmode-0x30==1) && (strncmp(info->dev,"wlan",4)==0)) { + + struct iwreq my_iwreq; + + if (info->channel>=14) info->channel=1; + + memset(&my_iwreq,0,sizeof(my_iwreq)); + strcpy(my_iwreq.ifr_name,info->dev); + printf("debug: channel = %d\n",info->channel); + my_iwreq.u.freq.e=0; + my_iwreq.u.freq.m=info->channel; + if((ioctl(foo_fd,SIOCSIWFREQ,&my_iwreq))==-1) { + printf("unable to hop channels\n"); + perror("ioctl"); + return -1; + } + ++(info->channel); + } + return 0; +}