?!? wtf :)

[my-code/hdw-sniff.git] / hdw-sniff.c

diff --git a/hdw-sniff.c b/hdw-sniff.c
index 13c56ab..db285a2 100644 (file)
--- a/hdw-sniff.c
+++ b/hdw-sniff.c
@@ -12,6 +12,9 @@
 #include <netinet/in.h>
 #include <arpa/inet.h>
 #include <pcap.h>
+#include <sys/types.h>
+#include <unistd.h>
+#include <sys/ioctl.h>
 
 /* IEEE 802.3 stuff -- i will concentrate on .11 stuff before! */
 #include <netinet/if_ether.h>  /* for ethhdr struct */
@@ -28,6 +31,9 @@ int main(int argc, char *argv[]) {
 
        char pcap_error[PCAP_ERRBUF_SIZE];
        pcap_t *pcap_handle;
+       int pcap_fd;
+       fd_set pcap_fd_set;
+       struct timeval fd_set_tv;
        char sys_call[30];
        FILE *logfile;
        struct info_struct my_info_struct;
@@ -69,13 +75,33 @@ int main(int argc, char *argv[]) {
                printf("%s: %s\n",argv[0],pcap_error);
                return 1;
        }
+
+       /* set non blocking */
+       if((pcap_setnonblock(pcap_handle,1,pcap_error))==-1) {
+               printf("%s: %s\n",argv[0],pcap_error);
+               return 1;
+       }
        
        /* grab a package until user breaks */
        my_info_struct.count=0;
        my_info_struct.mmode=argv[2][0];
        strcpy(my_info_struct.dev,argv[1]);
+
+       /* prepare for select */
+       pcap_fd=pcap_fileno(pcap_handle);
+       FD_ZERO(&pcap_fd_set);
+       FD_SET(pcap_fd,&pcap_fd_set);
+       fd_set_tv.tv_sec=0;
+       fd_set_tv.tv_usec=500000;
+
        /* do loopp */
-       pcap_loop(pcap_handle,-1,pcap_process,(u_char *)&my_info_struct);
+       while(1) {
+               if((select(pcap_fd+1,&pcap_fd_set,NULL,NULL,&fd_set_tv)) && (FD_ISSET(pcap_fd,&pcap_fd_set))) pcap_loop(pcap_handle,-1,pcap_process,(u_char *)&my_info_struct);
+               else if((hop_channel(&my_info_struct,pcap_fd))==-1) { 
+                       printf("channelhopping failed, aborting\n");
+                       return -1;
+               }
+       }
        return 0;
 }
 
@@ -85,9 +111,10 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header,
                        const u_char *package) {
        
        /* local variables */
-       struct ethhdr *e_hdr;
-       struct ip *ip_hdr;
+       struct linux_wlan_ng_prism_hdr *prism_hdr;
        struct ieee802_11_hdr *w_hdr;
+       struct ip *ip_hdr;
+       struct ethhdr *e_hdr;
        struct info_struct *my_info_struct;
        int i;
 
@@ -98,16 +125,34 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header,
        printf("---> package %d ---- %s",my_info_struct->count,
                        ctime((const time_t*)&(pcap_header->ts.tv_sec)));
        printf("pcap header:\n");
-       printf("capture_length: %d (dec.)",pcap_header->caplen);
+       printf("capture_length: %d (dec.)\t",pcap_header->caplen);
        printf("length(off wire): %d (dec.)\n",pcap_header->len);
        
-       /* is ieee802.11 ? -- we assume yes :) */
+       /* prism wlan ng headers */
        if((my_info_struct->mmode-0x30==1) && 
                (strncmp(my_info_struct->dev,"wlan",4)==0)) {
+       printf("prism header:\n");
+       prism_hdr=(struct linux_wlan_ng_prism_hdr *)package;
+       printf("message code/length: %d/%d\n",ntohs(prism_hdr->msgcode),
+                                               ntohs(prism_hdr->msglen));
+       printf("device: %s\n",prism_hdr->devname);
+
+       /* ieee802.11 header */
        printf("ieee802.11 header:\n");
+       package+=sizeof(struct linux_wlan_ng_prism_hdr);
        w_hdr=(struct ieee802_11_hdr *)package;
+       
+       printf("debug:\n");
+       for(i=0;i<16;i++) {
+               printf("%x -> ",1<<i);
+               printf("%x\n",(ntohs(w_hdr->frame_ctl) & (1<<i)));
+       }
        printf("frame_control: %x duration_id: %x\n",ntohs(w_hdr->frame_ctl),
                                                ntohs(w_hdr->duration_id));
+       printf("version check ... %s\n",
+       ((ntohs(w_hdr->frame_ctl) & IEEE802_11_FCTL_VERS)==0x00)?
+                                                       "ok":"unknown");
+       // printf("type: 
        /* skip ieee802.11 header */
        package=package+sizeof(struct ieee802_11_hdr);
        }
@@ -147,4 +192,30 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header,
        printf("\n");
 }
 
-               
+int hop_channel(struct info_struct *info,int pcap_fd) {
+       struct iwreq my_iwreq;
+       int foo_fd;
+       /* oder vielleicht doch pcap_fd ? */
+       if((foo_fd=socket(AF_INET,SOCK_DGRAM,0))==-1) {
+               printf("unable to create socket\n");
+               return -1;
+       }
+
+       if (info->channel==15) info->channel=1;
+
+       memset(&my_iwreq,0,sizeof(my_iwreq));
+       strcpy(my_iwreq.ifr_name,info->dev);
+       printf("debug: device = %s\n",my_iwreq.ifr_name);
+       my_iwreq.u.freq.e=0;
+       my_iwreq.u.freq.m=info->channel;
+       // if((ioctl(foo_fd,SIOCSIWFREQ,&my_iwreq))==-1) {
+       if((ioctl(pcap_fd,SIOCSIWFREQ,&my_iwreq))==-1) {
+               printf("unable to hop channels\n");
+               perror("ioctl");
+               return -1;
+       }
+       printf("debug: hopped to channel %d\n",info->channel);
+       ++(info->channel);
+       return 0;
+}
+