?!? wtf :)
[my-code/hdw-sniff.git] / hdw-sniff.c
index 96ef4a2..db285a2 100644 (file)
@@ -5,12 +5,21 @@
  */
 
 #include <stdio.h>
+#include <string.h>
+#include <stdlib.h>
+#include <sys/socket.h>
+#include <time.h>
+#include <netinet/in.h>
+#include <arpa/inet.h>
 #include <pcap.h>
+#include <sys/types.h>
+#include <unistd.h>
+#include <sys/ioctl.h>
 
 /* IEEE 802.3 stuff -- i will concentrate on .11 stuff before! */
 #include <netinet/if_ether.h>  /* for ethhdr struct */
 #include <netinet/ip.h> /* ip */
-#include <netinet/in.h>        /* in_addr */
+#include <netinet/in.h>        /* in_addr , inet_ntoa */
 
 /* IEEE 802.11 stuff -- will become one include later ... */
 #include "ieee80211.h" /* from hunz's aeolus, short hostap_wlan.h */
@@ -22,14 +31,17 @@ int main(int argc, char *argv[]) {
 
        char pcap_error[PCAP_ERRBUF_SIZE];
        pcap_t *pcap_handle;
+       int pcap_fd;
+       fd_set pcap_fd_set;
+       struct timeval fd_set_tv;
        char sys_call[30];
        FILE *logfile;
-       int count;
-       int *p_count;
+       struct info_struct my_info_struct;
        
        /* parse the arguments */
        if(argc<3) {
-               printf("usage: %s <interface> <monitor mode> <logfile>\n",argv[0]);
+               printf("usage: %s <interface> <monitor mode> <logfile>\n",
+                       argv[0]);
                return 0;
        }
        if(argc!=4) {
@@ -45,10 +57,13 @@ int main(int argc, char *argv[]) {
        }
                        
        /* setting up device and set monitor mode */
-       if(atoi(argv[2])==1 && (strncmp(argv[1],"wlan",4)==0)) {
-               printf("setting to monitor mode 3\n");
-               sprintf(sys_call,"iwpriv %s monitor 3",argv[1]);
-               system(sys_call);
+       if(atoi(argv[2])==1) {
+               printf("setting to monitor mode\n");
+               if(strncmp(argv[1],"wlan",4)==0)
+                       sprintf(sys_call,"iwpriv %s monitor 3",argv[1]);
+               if(strncmp(argv[1],"eth",3)==0)
+                       sprintf(sys_call,"ifconfig %s promisc",argv[1]);
+       system(sys_call);
        }
        printf("setting up interface\n");
        sprintf(sys_call,"ifconfig %s up",argv[1]);
@@ -60,39 +75,87 @@ int main(int argc, char *argv[]) {
                printf("%s: %s\n",argv[0],pcap_error);
                return 1;
        }
+
+       /* set non blocking */
+       if((pcap_setnonblock(pcap_handle,1,pcap_error))==-1) {
+               printf("%s: %s\n",argv[0],pcap_error);
+               return 1;
+       }
        
        /* grab a package until user breaks */
-       count=0;
-       p_count=&count;
-       pcap_dispatch(pcap_handle,-1,(pcap_handler)pcap_process,
-                       (u_char *)&p_count);
+       my_info_struct.count=0;
+       my_info_struct.mmode=argv[2][0];
+       strcpy(my_info_struct.dev,argv[1]);
+
+       /* prepare for select */
+       pcap_fd=pcap_fileno(pcap_handle);
+       FD_ZERO(&pcap_fd_set);
+       FD_SET(pcap_fd,&pcap_fd_set);
+       fd_set_tv.tv_sec=0;
+       fd_set_tv.tv_usec=500000;
+
+       /* do loopp */
+       while(1) {
+               if((select(pcap_fd+1,&pcap_fd_set,NULL,NULL,&fd_set_tv)) && (FD_ISSET(pcap_fd,&pcap_fd_set))) pcap_loop(pcap_handle,-1,pcap_process,(u_char *)&my_info_struct);
+               else if((hop_channel(&my_info_struct,pcap_fd))==-1) { 
+                       printf("channelhopping failed, aborting\n");
+                       return -1;
+               }
+       }
+       return 0;
 }
 
 
 /* pcap_process callback function */
-void pcap_process(u_char *count,const struct pcap_pkthdr *pcap_header,
+void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header,
                        const u_char *package) {
        
        /* local variables */
-       struct ethhdr *e_hdr;
-       struct ip *ip_hdr;
+       struct linux_wlan_ng_prism_hdr *prism_hdr;
        struct ieee802_11_hdr *w_hdr;
+       struct ip *ip_hdr;
+       struct ethhdr *e_hdr;
+       struct info_struct *my_info_struct;
        int i;
-       int *p_count;
 
-       p_count=(int *)count;
-       ++(*p_count);
+       my_info_struct=(struct info_struct *)info;
+       ++(my_info_struct->count);
 
        printf("\n");
-       printf("---> package %d ---- %s",count,
-                       ctime((const time_t*)pcap_header->ts.tv_sec));
-       printf("pcap header: ");
-       printf("capture length=%d ",pcap_header->caplen);
-       printf("length(off wire)=%d\n",pcap_header->len);
+       printf("---> package %d ---- %s",my_info_struct->count,
+                       ctime((const time_t*)&(pcap_header->ts.tv_sec)));
+       printf("pcap header:\n");
+       printf("capture_length: %d (dec.)\t",pcap_header->caplen);
+       printf("length(off wire): %d (dec.)\n",pcap_header->len);
        
-       /* is ieee802.11 ? -- we assume yes :) */
-       /* ...                                  */
+       /* prism wlan ng headers */
+       if((my_info_struct->mmode-0x30==1) && 
+               (strncmp(my_info_struct->dev,"wlan",4)==0)) {
+       printf("prism header:\n");
+       prism_hdr=(struct linux_wlan_ng_prism_hdr *)package;
+       printf("message code/length: %d/%d\n",ntohs(prism_hdr->msgcode),
+                                               ntohs(prism_hdr->msglen));
+       printf("device: %s\n",prism_hdr->devname);
 
+       /* ieee802.11 header */
+       printf("ieee802.11 header:\n");
+       package+=sizeof(struct linux_wlan_ng_prism_hdr);
+       w_hdr=(struct ieee802_11_hdr *)package;
+       
+       printf("debug:\n");
+       for(i=0;i<16;i++) {
+               printf("%x -> ",1<<i);
+               printf("%x\n",(ntohs(w_hdr->frame_ctl) & (1<<i)));
+       }
+       printf("frame_control: %x duration_id: %x\n",ntohs(w_hdr->frame_ctl),
+                                               ntohs(w_hdr->duration_id));
+       printf("version check ... %s\n",
+       ((ntohs(w_hdr->frame_ctl) & IEEE802_11_FCTL_VERS)==0x00)?
+                                                       "ok":"unknown");
+       // printf("type: 
+       /* skip ieee802.11 header */
+       package=package+sizeof(struct ieee802_11_hdr);
+       }
 
        /* ieee802.3 */
        /* ethernet */
@@ -122,12 +185,37 @@ void pcap_process(u_char *count,const struct pcap_pkthdr *pcap_header,
                printf("time2live = %x ip_proto = %x\n",ntohs(ip_hdr->ip_ttl),
                                                ntohs(ip_hdr->ip_p));
                printf("chksum: %x\n",ntohs(ip_hdr->ip_sum));
-               
-               
        }
        printf("all_hex_dump:\n");
        for(i=sizeof(struct ethhdr);i<pcap_header->caplen;i++)
                printf("%x ",*(package+i));
+       printf("\n");
 }
 
-               
+int hop_channel(struct info_struct *info,int pcap_fd) {
+       struct iwreq my_iwreq;
+       int foo_fd;
+       /* oder vielleicht doch pcap_fd ? */
+       if((foo_fd=socket(AF_INET,SOCK_DGRAM,0))==-1) {
+               printf("unable to create socket\n");
+               return -1;
+       }
+
+       if (info->channel==15) info->channel=1;
+
+       memset(&my_iwreq,0,sizeof(my_iwreq));
+       strcpy(my_iwreq.ifr_name,info->dev);
+       printf("debug: device = %s\n",my_iwreq.ifr_name);
+       my_iwreq.u.freq.e=0;
+       my_iwreq.u.freq.m=info->channel;
+       // if((ioctl(foo_fd,SIOCSIWFREQ,&my_iwreq))==-1) {
+       if((ioctl(pcap_fd,SIOCSIWFREQ,&my_iwreq))==-1) {
+               printf("unable to hop channels\n");
+               perror("ioctl");
+               return -1;
+       }
+       printf("debug: hopped to channel %d\n",info->channel);
+       ++(info->channel);
+       return 0;
+}
+