X-Git-Url: https://hackdaworld.org/gitweb/?p=my-code%2Fhdw-sniff.git;a=blobdiff_plain;f=hdw-sniff.c;h=db285a2e75b7c53c3b40138088eef7a00b95efde;hp=d3b2ca8965f800f78389755ce3fb395865356dcb;hb=f0775823587944872372259c853aee47601c82e8;hpb=d161945cf9722f66bd5690f58fc0a95fc348e532 diff --git a/hdw-sniff.c b/hdw-sniff.c index d3b2ca8..db285a2 100644 --- a/hdw-sniff.c +++ b/hdw-sniff.c @@ -12,6 +12,9 @@ #include #include #include +#include +#include +#include /* IEEE 802.3 stuff -- i will concentrate on .11 stuff before! */ #include /* for ethhdr struct */ @@ -28,6 +31,9 @@ int main(int argc, char *argv[]) { char pcap_error[PCAP_ERRBUF_SIZE]; pcap_t *pcap_handle; + int pcap_fd; + fd_set pcap_fd_set; + struct timeval fd_set_tv; char sys_call[30]; FILE *logfile; struct info_struct my_info_struct; @@ -69,13 +75,33 @@ int main(int argc, char *argv[]) { printf("%s: %s\n",argv[0],pcap_error); return 1; } + + /* set non blocking */ + if((pcap_setnonblock(pcap_handle,1,pcap_error))==-1) { + printf("%s: %s\n",argv[0],pcap_error); + return 1; + } /* grab a package until user breaks */ my_info_struct.count=0; my_info_struct.mmode=argv[2][0]; strcpy(my_info_struct.dev,argv[1]); + + /* prepare for select */ + pcap_fd=pcap_fileno(pcap_handle); + FD_ZERO(&pcap_fd_set); + FD_SET(pcap_fd,&pcap_fd_set); + fd_set_tv.tv_sec=0; + fd_set_tv.tv_usec=500000; + /* do loopp */ - pcap_loop(pcap_handle,-1,pcap_process,(u_char *)&my_info_struct); + while(1) { + if((select(pcap_fd+1,&pcap_fd_set,NULL,NULL,&fd_set_tv)) && (FD_ISSET(pcap_fd,&pcap_fd_set))) pcap_loop(pcap_handle,-1,pcap_process,(u_char *)&my_info_struct); + else if((hop_channel(&my_info_struct,pcap_fd))==-1) { + printf("channelhopping failed, aborting\n"); + return -1; + } + } return 0; } @@ -85,9 +111,10 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, const u_char *package) { /* local variables */ - struct ethhdr *e_hdr; - struct ip *ip_hdr; + struct linux_wlan_ng_prism_hdr *prism_hdr; struct ieee802_11_hdr *w_hdr; + struct ip *ip_hdr; + struct ethhdr *e_hdr; struct info_struct *my_info_struct; int i; @@ -97,16 +124,38 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, printf("\n"); printf("---> package %d ---- %s",my_info_struct->count, ctime((const time_t*)&(pcap_header->ts.tv_sec))); - printf("pcap header: "); - printf("capture length=%d ",pcap_header->caplen); - printf("length(off wire)=%d\n",pcap_header->len); + printf("pcap header:\n"); + printf("capture_length: %d (dec.)\t",pcap_header->caplen); + printf("length(off wire): %d (dec.)\n",pcap_header->len); - /* is ieee802.11 ? -- we assume yes :) */ + /* prism wlan ng headers */ if((my_info_struct->mmode-0x30==1) && (strncmp(my_info_struct->dev,"wlan",4)==0)) { - printf("debug: ieee802.11\n"); - } + printf("prism header:\n"); + prism_hdr=(struct linux_wlan_ng_prism_hdr *)package; + printf("message code/length: %d/%d\n",ntohs(prism_hdr->msgcode), + ntohs(prism_hdr->msglen)); + printf("device: %s\n",prism_hdr->devname); + /* ieee802.11 header */ + printf("ieee802.11 header:\n"); + package+=sizeof(struct linux_wlan_ng_prism_hdr); + w_hdr=(struct ieee802_11_hdr *)package; + + printf("debug:\n"); + for(i=0;i<16;i++) { + printf("%x -> ",1<frame_ctl) & (1<frame_ctl), + ntohs(w_hdr->duration_id)); + printf("version check ... %s\n", + ((ntohs(w_hdr->frame_ctl) & IEEE802_11_FCTL_VERS)==0x00)? + "ok":"unknown"); + // printf("type: + /* skip ieee802.11 header */ + package=package+sizeof(struct ieee802_11_hdr); + } /* ieee802.3 */ /* ethernet */ @@ -143,4 +192,30 @@ void pcap_process(u_char *info,const struct pcap_pkthdr *pcap_header, printf("\n"); } - +int hop_channel(struct info_struct *info,int pcap_fd) { + struct iwreq my_iwreq; + int foo_fd; + /* oder vielleicht doch pcap_fd ? */ + if((foo_fd=socket(AF_INET,SOCK_DGRAM,0))==-1) { + printf("unable to create socket\n"); + return -1; + } + + if (info->channel==15) info->channel=1; + + memset(&my_iwreq,0,sizeof(my_iwreq)); + strcpy(my_iwreq.ifr_name,info->dev); + printf("debug: device = %s\n",my_iwreq.ifr_name); + my_iwreq.u.freq.e=0; + my_iwreq.u.freq.m=info->channel; + // if((ioctl(foo_fd,SIOCSIWFREQ,&my_iwreq))==-1) { + if((ioctl(pcap_fd,SIOCSIWFREQ,&my_iwreq))==-1) { + printf("unable to hop channels\n"); + perror("ioctl"); + return -1; + } + printf("debug: hopped to channel %d\n",info->channel); + ++(info->channel); + return 0; +} +