changed to monitor 3 again
[my-code/hdw-sniff.git] / hdw-sniff.c
index 13c56ab..f6da20f 100644 (file)
@@ -12,6 +12,9 @@
 #include <netinet/in.h>
 #include <arpa/inet.h>
 #include <pcap.h>
+#include <sys/types.h>
+#include <unistd.h>
+#include <sys/ioctl.h>
 
 /* IEEE 802.3 stuff -- i will concentrate on .11 stuff before! */
 #include <netinet/if_ether.h>  /* for ethhdr struct */
@@ -28,6 +31,9 @@ int main(int argc, char *argv[]) {
 
        char pcap_error[PCAP_ERRBUF_SIZE];
        pcap_t *pcap_handle;
+       int pcap_fd,foo_fd;
+       fd_set pcap_fd_set;
+       struct timeval fd_set_tv;
        char sys_call[30];
        FILE *logfile;
        struct info_struct my_info_struct;
@@ -69,13 +75,42 @@ int main(int argc, char *argv[]) {
                printf("%s: %s\n",argv[0],pcap_error);
                return 1;
        }
+
+       /* set non blocking */
+       if((pcap_setnonblock(pcap_handle,1,pcap_error))==-1) {
+               printf("%s: %s\n",argv[0],pcap_error);
+               return 1;
+       }
        
        /* grab a package until user breaks */
        my_info_struct.count=0;
        my_info_struct.mmode=argv[2][0];
        strcpy(my_info_struct.dev,argv[1]);
+
+       /* prepare for select */
+       pcap_fd=pcap_fileno(pcap_handle);
+
+       /* create file descriptor */
+       if((foo_fd=socket(AF_INET,SOCK_DGRAM,0))==-1) {
+               printf("unable to create socket foo_fd\n");
+               return -1;
+       }
+
        /* do loopp */
-       pcap_loop(pcap_handle,-1,pcap_process,(u_char *)&my_info_struct);
+       while (1) {
+
+               /* set pcap_fd */
+               FD_ZERO(&pcap_fd_set);
+               FD_SET(pcap_fd,&pcap_fd_set);
+               fd_set_tv.tv_sec=0;
+               fd_set_tv.tv_usec=200000;
+
+               if((select(pcap_fd+1,&pcap_fd_set,NULL,NULL,&fd_set_tv)) && (FD_ISSET(pcap_fd,&pcap_fd_set))) pcap_dispatch(pcap_handle,-1,pcap_process,(u_char *)&my_info_struct);
+               else if((hop_channel(&my_info_struct,foo_fd))==-1) { 
+                       printf("channelhopping failed, aborting\n");
+                       return -1;
+               }
+       }
        return 0;
 }
 
@@ -85,36 +120,63 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header,
                        const u_char *package) {
        
        /* local variables */
-       struct ethhdr *e_hdr;
-       struct ip *ip_hdr;
+       struct linux_wlan_ng_prism_hdr *prism_hdr;
        struct ieee802_11_hdr *w_hdr;
+       struct ethhdr *e_hdr;
+       struct iphdr *ip_hdr;
        struct info_struct *my_info_struct;
-       int i;
-
+       int i,p_o,w_o,e_o,i_o;
+       
        my_info_struct=(struct info_struct *)info;
        ++(my_info_struct->count);
+       
+       /* cache offsets */
+       p_o=((strncmp(my_info_struct->dev,"wlan",4)==0)?sizeof(struct linux_wlan_ng_prism_hdr):0);
+       w_o=((strncmp(my_info_struct->dev,"wlan",4)==0)?sizeof(struct ieee802_11_hdr):0);
+       e_o=sizeof(struct ethhdr);
+       i_o=sizeof(struct iphdr);
 
        printf("\n");
        printf("---> package %d ---- %s",my_info_struct->count,
                        ctime((const time_t*)&(pcap_header->ts.tv_sec)));
        printf("pcap header:\n");
-       printf("capture_length: %d (dec.)",pcap_header->caplen);
+       printf("capture_length: %d (dec.)\t",pcap_header->caplen);
        printf("length(off wire): %d (dec.)\n",pcap_header->len);
        
-       /* is ieee802.11 ? -- we assume yes :) */
+       /* prism wlan ng headers */
        if((my_info_struct->mmode-0x30==1) && 
                (strncmp(my_info_struct->dev,"wlan",4)==0)) {
-       printf("ieee802.11 header:\n");
-       w_hdr=(struct ieee802_11_hdr *)package;
+       printf("prism header: (%d bytes)\n",p_o);
+       prism_hdr=(struct linux_wlan_ng_prism_hdr *)package;
+       printf("message code/length: %d/%d\n",ntohs(prism_hdr->msgcode),
+                                               ntohs(prism_hdr->msglen));
+       printf("device: %s\n",prism_hdr->devname);
+       /* skip wlan_ng_prism header */
+       // package=package+p_o;
+
+       /* ieee802.11 header */
+       printf("ieee802.11 header: (%d bytes)\n",w_o);
+       w_hdr=(struct ieee802_11_hdr *)(package+p_o);
+       
+       printf("debug:\n");
+       for(i=0;i<16;i++) {
+               printf("%x -> ",1<<i);
+               printf("%x\n",(ntohs(w_hdr->frame_ctl) & (1<<i)));
+       }
        printf("frame_control: %x duration_id: %x\n",ntohs(w_hdr->frame_ctl),
                                                ntohs(w_hdr->duration_id));
+       printf("version check ... %s\n",
+       ((ntohs(w_hdr->frame_ctl) & IEEE802_11_FCTL_VERS)==0x00)?
+                                                       "ok":"unknown");
+       // printf("type: 
        /* skip ieee802.11 header */
-       package=package+sizeof(struct ieee802_11_hdr);
+       // package=package+w_o;
        }
 
        /* ieee802.3 */
        /* ethernet */
-       e_hdr=(struct ethhdr *)package;
+       printf("ethernet: (%d bytes)\n",e_o);
+       e_hdr=(struct ethhdr *)(package+p_o+w_o);
        /* what types ? */
        printf("type = ");
        printf("%x  ",ntohs(e_hdr->h_proto));
@@ -124,27 +186,64 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header,
        printf(" src_addr = ");
        for(i=0;i<ETH_ALEN;i++)
        printf("%x%s",*(e_hdr->h_source+i),((i==ETH_ALEN-1)?"\n":":"));
+
                /* IP ? */
        if(ntohs(e_hdr->h_proto)==ETH_P_IP) {
-               printf("ip protocol: ");
-               ip_hdr=(struct ip *)(package+sizeof(struct ethhdr));
-               printf("version = %x ",ntohs(ip_hdr->ip_v));
-               printf("header_length = %x \n",ntohs(ip_hdr->ip_hl));
-               printf("service = %x ",ntohs(ip_hdr->ip_tos));
-               printf("total_length(dec.) = %d \n",ntohs(ip_hdr->ip_len));
-               printf("ip_addresses: source = ");
-               printf("%s\tdestination = %s\n",inet_ntoa(ip_hdr->ip_src),
-                                               inet_ntoa(ip_hdr->ip_dst));
-               printf("ip_id = %x ",ntohs(ip_hdr->ip_id));
-               printf("ip_offset = %x \n",ntohs(ip_hdr->ip_off));
-               printf("time2live = %x ip_proto = %x\n",ntohs(ip_hdr->ip_ttl),
-                                               ntohs(ip_hdr->ip_p));
-               printf("chksum: %x\n",ntohs(ip_hdr->ip_sum));
+               printf("ip protocol: (%d bytes)\n",i_o);
+               ip_hdr=(struct iphdr *)(package+p_o+w_o+e_o);
+               printf("version = %x ",ntohs(ip_hdr->version));
+               printf("header_length = %x \n",ntohs(ip_hdr->ihl));
+               printf("service = %x ",ntohs(ip_hdr->tos));
+               printf("total_length(dec.) = %d \n",ntohs(ip_hdr->tot_len));
+               printf("source_ip: ");
+               for(i=3;i>=0;--i) {
+                       printf("%d%s",
+                       ip_hdr->saddr&0xff<<i,
+                       (i==0?"\n":"."));
+               }
+               printf("destination_ip: ");
+               for(i=3;i>=0;--i) {
+                       printf("%d%s",
+                       ip_hdr->daddr&0xff<<i,
+                       (i==0?"\n":"."));
+               }
+               // printf("ip_addresses: source = ");
+               // printf("%s\tdestination = %s\n",inet_ntoa(ip_hdr->saddr),
+               //                              inet_ntoa(ip_hdr->daddr));
+               printf("ip_id = %x ",ntohs(ip_hdr->id));
+               printf("ip_offset = %x \n",ntohs(ip_hdr->frag_off));
+               printf("time2live = %x ip_proto = %x\n",ntohs(ip_hdr->ttl),
+                                               ntohs(ip_hdr->protocol));
+               // printf("chksum: %x\n",ntohs(ip_hdr->ip_sum));
        }
-       printf("all_hex_dump:\n");
-       for(i=sizeof(struct ethhdr);i<pcap_header->caplen;i++)
+       printf("all ethernet dump: (hex)\n");
+       for(i=p_o+w_o+e_o;i<pcap_header->caplen;i++)
                printf("%x ",*(package+i));
        printf("\n");
+       printf("all ethernet dump: (char)\n");
+       for(i=p_o+w_o+e_o;i<pcap_header->caplen;i++)
+               printf("%c ",*(package+i));
+       printf("\n");
 }
 
-               
+int hop_channel(struct info_struct *info,int foo_fd) {
+       if((info->mmode-0x30==1) && (strncmp(info->dev,"wlan",4)==0)) {
+
+       struct iwreq my_iwreq;
+
+       if (info->channel>=14) info->channel=1;
+
+       memset(&my_iwreq,0,sizeof(my_iwreq));
+       strcpy(my_iwreq.ifr_name,info->dev);
+       printf("debug: channel = %d\n",info->channel);
+       my_iwreq.u.freq.e=0;
+       my_iwreq.u.freq.m=info->channel;
+       if((ioctl(foo_fd,SIOCSIWFREQ,&my_iwreq))==-1) {
+               printf("unable to hop channels\n");
+               perror("ioctl");
+               return -1;
+       }
+       ++(info->channel);
+       }
+       return 0;
+}