network.cpp 55 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248
  1. /*
  2. * network.cpp
  3. *
  4. * Created on: Jul 29, 2017
  5. * Author: wangyu
  6. */
  7. #include "common.h"
  8. #include "network.h"
  9. #include "log.h"
  10. #include "misc.h"
  11. int raw_recv_fd=-1;
  12. int raw_send_fd=-1;
  13. u32_t link_level_header_len=0;//set it to 14 if SOCK_RAW is used in socket(PF_PACKET, SOCK_RAW, htons(ETH_P_IP));
  14. int seq_mode=3;
  15. int max_seq_mode=4;
  16. int random_drop=0;
  17. int filter_port=-1;
  18. int disable_bpf_filter=0; //for test only,most time no need to disable this
  19. //u32_t bind_address_uint32=0;
  20. int lower_level=0;
  21. int lower_level_manual=0;
  22. int ifindex=-1;
  23. char if_name[100]="";
  24. char dev[100]="";
  25. unsigned short g_ip_id_counter=0;
  26. unsigned char dest_hw_addr[sizeof(sockaddr_ll::sll_addr)]=
  27. {0xff,0xff,0xff,0xff,0xff,0xff,0,0};
  28. //{0x00,0x23,0x45,0x67,0x89,0xb9};
  29. const u32_t receive_window_lower_bound=40960;
  30. const u32_t receive_window_random_range=512;
  31. const unsigned char wscale=0x05;
  32. char g_packet_buf[buf_len]; //looks dirty but works well
  33. int g_packet_buf_len=-1;
  34. int g_packet_buf_cnt=0;
  35. union
  36. {
  37. sockaddr_ll ll;
  38. sockaddr_in ipv4;
  39. sockaddr_in6 ipv6;
  40. }g_sockaddr;
  41. socklen_t g_sockaddr_len = -1;
  42. struct sock_filter code_tcp_old[] = {
  43. { 0x28, 0, 0, 0x0000000c },//0
  44. { 0x15, 0, 10, 0x00000800 },//1
  45. { 0x30, 0, 0, 0x00000017 },//2
  46. { 0x15, 0, 8, 0x00000006 },//3
  47. { 0x28, 0, 0, 0x00000014 },//4
  48. { 0x45, 6, 0, 0x00001fff },//5
  49. { 0xb1, 0, 0, 0x0000000e },//6
  50. { 0x48, 0, 0, 0x0000000e },//7
  51. { 0x15, 2, 0, 0x0000ef32 },//8
  52. { 0x48, 0, 0, 0x00000010 },//9
  53. { 0x15, 0, 1, 0x0000ef32 },//10
  54. { 0x6, 0, 0, 0x0000ffff },//11
  55. { 0x6, 0, 0, 0x00000000 },//12
  56. };
  57. struct sock_filter code_tcp[] = {
  58. //{ 0x5, 0, 0, 0x00000001 },//0 //jump to 2,dirty hack from tcpdump -d's output
  59. //{ 0x5, 0, 0, 0x00000000 },//1
  60. { 0x30, 0, 0, 0x00000009 },//2
  61. { 0x15, 0, 6, 0x00000006 },//3
  62. { 0x28, 0, 0, 0x00000006 },//4
  63. { 0x45, 4, 0, 0x00001fff },//5
  64. { 0xb1, 0, 0, 0x00000000 },//6
  65. { 0x48, 0, 0, 0x00000002 },//7
  66. { 0x15, 0, 1, 0x0000fffe },//8 //modify this fffe to the port you listen on
  67. { 0x6, 0, 0, 0x0000ffff },//9
  68. { 0x6, 0, 0, 0x00000000 },//10
  69. };
  70. int code_tcp_port_index=6;
  71. struct sock_filter code_udp[] = {
  72. //{ 0x5, 0, 0, 0x00000001 },
  73. //{ 0x5, 0, 0, 0x00000000 },
  74. { 0x30, 0, 0, 0x00000009 },
  75. { 0x15, 0, 6, 0x00000011 },
  76. { 0x28, 0, 0, 0x00000006 },
  77. { 0x45, 4, 0, 0x00001fff },
  78. { 0xb1, 0, 0, 0x00000000 },
  79. { 0x48, 0, 0, 0x00000002 },
  80. { 0x15, 0, 1, 0x0000fffe }, //modify this fffe to the port you listen on
  81. { 0x6, 0, 0, 0x0000ffff },
  82. { 0x6, 0, 0, 0x00000000 },
  83. };
  84. int code_udp_port_index=6;
  85. struct sock_filter code_icmp[] = {
  86. //{ 0x5, 0, 0, 0x00000001 },
  87. //{ 0x5, 0, 0, 0x00000000 },
  88. { 0x30, 0, 0, 0x00000009 },
  89. { 0x15, 0, 1, 0x00000001 },
  90. { 0x6, 0, 0, 0x0000ffff },
  91. { 0x6, 0, 0, 0x00000000 },
  92. };
  93. /*
  94. tcpdump -i eth1 ip and icmp -d
  95. (000) ldh [12]
  96. (001) jeq #0x800 jt 2 jf 5
  97. (002) ldb [23]
  98. (003) jeq #0x1 jt 4 jf 5
  99. (004) ret #65535
  100. (005) ret #0
  101. tcpdump -i eth1 ip and icmp -dd
  102. { 0x28, 0, 0, 0x0000000c },
  103. { 0x15, 0, 3, 0x00000800 },
  104. { 0x30, 0, 0, 0x00000017 },
  105. { 0x15, 0, 1, 0x00000001 },
  106. { 0x6, 0, 0, 0x0000ffff },
  107. { 0x6, 0, 0, 0x00000000 },
  108. */
  109. /*
  110. tcpdump -i eth1 ip and tcp and dst port 65534 -dd
  111. { 0x28, 0, 0, 0x0000000c },
  112. { 0x15, 0, 8, 0x00000800 },
  113. { 0x30, 0, 0, 0x00000017 },
  114. { 0x15, 0, 6, 0x00000006 },
  115. { 0x28, 0, 0, 0x00000014 },
  116. { 0x45, 4, 0, 0x00001fff },
  117. { 0xb1, 0, 0, 0x0000000e },
  118. { 0x48, 0, 0, 0x00000010 },
  119. { 0x15, 0, 1, 0x0000fffe },
  120. { 0x6, 0, 0, 0x0000ffff },
  121. { 0x6, 0, 0, 0x00000000 },
  122. (000) ldh [12]
  123. (001) jeq #0x800 jt 2 jf 10
  124. (002) ldb [23]
  125. (003) jeq #0x6 jt 4 jf 10
  126. (004) ldh [20]
  127. (005) jset #0x1fff jt 10 jf 6
  128. (006) ldxb 4*([14]&0xf)
  129. (007) ldh [x + 16]
  130. (008) jeq #0xfffe jt 9 jf 10
  131. (009) ret #65535
  132. (010) ret #0
  133. */
  134. packet_info_t::packet_info_t()
  135. {
  136. src_port=0;
  137. dst_port=0;
  138. if (raw_mode == mode_faketcp)
  139. {
  140. protocol = IPPROTO_TCP;
  141. ack_seq = get_true_random_number();
  142. seq = get_true_random_number();
  143. has_ts=0;
  144. ts_ack=0;
  145. syn=0;
  146. ack=1;
  147. ack_seq_counter=0;
  148. //mylog(log_info,"<cons ,ts_ack= %u>\n",ts_ack);
  149. }
  150. else if (raw_mode == mode_udp)
  151. {
  152. protocol = IPPROTO_UDP;
  153. }
  154. else if (raw_mode == mode_icmp)
  155. {
  156. protocol = IPPROTO_ICMP;
  157. icmp_seq=0;
  158. }
  159. }
  160. int init_raw_socket()
  161. {
  162. g_ip_id_counter=get_true_random_number()%65535;
  163. if(lower_level==0)
  164. {
  165. raw_send_fd = socket(raw_ip_version , SOCK_RAW , IPPROTO_RAW);// IPPROTO_TCP??
  166. if(raw_send_fd == -1) {
  167. mylog(log_fatal,"Failed to create raw_send_fd\n");
  168. //perror("Failed to create raw_send_fd");
  169. myexit(1);
  170. }
  171. /*
  172. int one = 1;
  173. const int *val = &one;
  174. if (setsockopt (raw_send_fd, IPPROTO_IP, IP_HDRINCL, val, sizeof (one)) < 0) {
  175. mylog(log_fatal,"Error setting IP_HDRINCL %d\n",errno);
  176. //perror("Error setting IP_HDRINCL");
  177. myexit(2);
  178. }*/
  179. }
  180. else
  181. {
  182. raw_send_fd = socket(PF_PACKET , SOCK_DGRAM , htons(ETH_P_IP));// todo how to create a recv only raw socket?
  183. if(raw_send_fd == -1) {
  184. mylog(log_fatal,"Failed to create raw_send_fd\n");
  185. //perror("Failed to create raw_send_fd");
  186. myexit(1);
  187. }
  188. //init_ifindex(if_name);
  189. }
  190. int opt = 0;
  191. assert(setsockopt(raw_send_fd, SOL_SOCKET, SO_RCVBUF, &opt, sizeof(opt))==0);// raw_send_fd is for send only, set its recv buffer to zero
  192. if(force_socket_buf)
  193. {
  194. if(setsockopt(raw_send_fd, SOL_SOCKET, SO_SNDBUFFORCE, &socket_buf_size, sizeof(socket_buf_size))<0)
  195. {
  196. mylog(log_fatal,"SO_SNDBUFFORCE fail socket_buf_size=%d errno=%s\n",socket_buf_size,strerror(errno));
  197. myexit(1);
  198. }
  199. }
  200. else
  201. {
  202. if(setsockopt(raw_send_fd, SOL_SOCKET, SO_SNDBUF, &socket_buf_size, sizeof(socket_buf_size))<0)
  203. {
  204. mylog(log_fatal,"SO_SNDBUF fail socket_buf_size=%d errno=%s\n",socket_buf_size,strerror(errno));
  205. myexit(1);
  206. }
  207. }
  208. //raw_fd = socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL));
  209. raw_recv_fd= socket(PF_PACKET, SOCK_DGRAM, htons(ETH_P_IP));
  210. //ETH_P_IP doesnt read outgoing packets
  211. // https://stackoverflow.com/questions/20264895/eth-p-ip-is-not-working-as-expected-i-can-only-receive-incoming-packets
  212. // to capture both incoming and outgoing packets use ETH_P_ALL
  213. if(raw_recv_fd == -1) {
  214. mylog(log_fatal,"Failed to create raw_recv_fd\n");
  215. //perror("");
  216. myexit(1);
  217. }
  218. if(strlen(dev)!=0)
  219. {
  220. struct sockaddr_ll bind_address;
  221. memset(&bind_address, 0, sizeof(bind_address));
  222. int index=-1;
  223. assert(init_ifindex(dev,raw_recv_fd,index)==0);
  224. bind_address.sll_family = AF_PACKET;
  225. bind_address.sll_protocol = htons(ETH_P_ALL);
  226. bind_address.sll_ifindex = index;
  227. if(bind(raw_recv_fd, (struct sockaddr *)&bind_address, sizeof(bind_address))==-1)
  228. {
  229. mylog(log_fatal,"bind to dev [%s] failed\n",dev);
  230. myexit(1);
  231. }
  232. }
  233. if(force_socket_buf)
  234. {
  235. if(setsockopt(raw_recv_fd, SOL_SOCKET, SO_RCVBUFFORCE, &socket_buf_size, sizeof(socket_buf_size))<0)
  236. {
  237. mylog(log_fatal,"SO_RCVBUFFORCE fail socket_buf_size=%d errno=%s\n",socket_buf_size,strerror(errno));
  238. myexit(1);
  239. }
  240. }
  241. else
  242. {
  243. if(setsockopt(raw_recv_fd, SOL_SOCKET, SO_RCVBUF, &socket_buf_size, sizeof(socket_buf_size))<0)
  244. {
  245. mylog(log_fatal,"SO_RCVBUF fail socket_buf_size=%d errno=%s\n",socket_buf_size,strerror(errno));
  246. myexit(1);
  247. }
  248. }
  249. //IP_HDRINCL to tell the kernel that headers are included in the packet
  250. setnonblocking(raw_send_fd); //not really necessary
  251. setnonblocking(raw_recv_fd);
  252. return 0;
  253. }
  254. void init_filter(int port)
  255. {
  256. sock_fprog bpf;
  257. if(raw_mode==mode_faketcp||raw_mode==mode_udp)
  258. {
  259. filter_port=port;
  260. }
  261. if(disable_bpf_filter) return;
  262. //if(raw_mode==mode_icmp) return ;
  263. //code_tcp[8].k=code_tcp[10].k=port;
  264. if(raw_mode==mode_faketcp)
  265. {
  266. bpf.len = sizeof(code_tcp)/sizeof(code_tcp[0]);
  267. code_tcp[code_tcp_port_index].k=port;
  268. bpf.filter = code_tcp;
  269. }
  270. else if(raw_mode==mode_udp)
  271. {
  272. bpf.len = sizeof(code_udp)/sizeof(code_udp[0]);
  273. code_udp[code_udp_port_index].k=port;
  274. bpf.filter = code_udp;
  275. }
  276. else if(raw_mode==mode_icmp)
  277. {
  278. bpf.len = sizeof(code_icmp)/sizeof(code_icmp[0]);
  279. bpf.filter = code_icmp;
  280. }
  281. int dummy;
  282. int ret=setsockopt(raw_recv_fd, SOL_SOCKET, SO_DETACH_FILTER, &dummy, sizeof(dummy)); //in case i forgot to remove
  283. if (ret != 0)
  284. {
  285. mylog(log_debug,"error remove fiter\n");
  286. //perror("filter");
  287. //exit(-1);
  288. }
  289. ret = setsockopt(raw_recv_fd, SOL_SOCKET, SO_ATTACH_FILTER, &bpf, sizeof(bpf));
  290. if (ret != 0)
  291. {
  292. mylog(log_fatal,"error set fiter\n");
  293. //perror("filter");
  294. myexit(-1);
  295. }
  296. }
  297. void remove_filter()
  298. {
  299. filter_port=0;
  300. int dummy;
  301. int ret=setsockopt(raw_recv_fd, SOL_SOCKET, SO_DETACH_FILTER, &dummy, sizeof(dummy));
  302. if (ret != 0)
  303. {
  304. mylog(log_debug,"error remove fiter\n");
  305. //perror("filter");
  306. //exit(-1);
  307. }
  308. }
  309. int init_ifindex(const char * if_name,int fd,int &index)
  310. {
  311. struct ifreq ifr;
  312. size_t if_name_len=strlen(if_name);
  313. if (if_name_len<sizeof(ifr.ifr_name)) {
  314. memcpy(ifr.ifr_name,if_name,if_name_len);
  315. ifr.ifr_name[if_name_len]=0;
  316. } else {
  317. mylog(log_fatal,"interface name is too long\n");
  318. myexit(-1);
  319. }
  320. if (ioctl(fd,SIOCGIFINDEX,&ifr)==-1) {
  321. mylog(log_fatal,"SIOCGIFINDEX fail ,%s\n",strerror(errno));
  322. myexit(-1);
  323. }
  324. index=ifr.ifr_ifindex;
  325. mylog(log_info,"ifname:%s ifindex:%d\n",if_name,index);
  326. return 0;
  327. }
  328. bool interface_has_arp(const char * interface) {
  329. struct ifreq ifr;
  330. // int sock = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
  331. int sock=raw_send_fd;
  332. memset(&ifr, 0, sizeof(ifr));
  333. strcpy(ifr.ifr_name, interface);
  334. if (ioctl(sock, SIOCGIFFLAGS, &ifr) < 0) {
  335. //perror("SIOCGIFFLAGS");
  336. mylog(log_fatal,"ioctl(sock, SIOCGIFFLAGS, &ifr) failed for interface %s,errno %s\n",interface,strerror(errno));
  337. myexit(-1);
  338. }
  339. //close(sock);
  340. return !(ifr.ifr_flags & IFF_NOARP);
  341. }
  342. struct route_info_t
  343. {
  344. string if_name;
  345. u32_t dest;
  346. u32_t mask;
  347. u32_t gw;
  348. u32_t flag;
  349. };
  350. int dest_idx=1;
  351. int gw_idx=2;
  352. int if_idx=0;
  353. int mask_idx=7;
  354. int flag_idx=3;
  355. vector<int> find_route_entry(const vector<route_info_t> &route_info_vec,u32_t ip)
  356. {
  357. vector<int> res;
  358. for(u32_t i=0;i<=32;i++)
  359. {
  360. u32_t mask=0xffffffff;
  361. //mask >>=i;
  362. //if(i==32) mask=0; //why 0xffffffff>>32 equals 0xffffffff??
  363. mask <<=i;
  364. if(i==32) mask=0;
  365. log_bare(log_debug,"(mask:%x)",mask);
  366. for(u32_t j=0;j<route_info_vec.size();j++)
  367. {
  368. const route_info_t & info=route_info_vec[j];
  369. if(info.mask!=mask)
  370. continue;
  371. log_bare(log_debug,"<<%d,%d>>",i,j);
  372. if((info.dest&mask)==(ip&mask))
  373. {
  374. log_bare(log_debug,"found!");
  375. res.push_back(j);
  376. }
  377. }
  378. if(res.size()!=0)
  379. {
  380. return res;
  381. }
  382. }
  383. return res;
  384. }
  385. int find_direct_dest(const vector<route_info_t> &route_info_vec,u32_t ip,u32_t &dest_ip,string &if_name)
  386. {
  387. vector<int> res;
  388. for(int i=0;i<1000;i++)
  389. {
  390. res=find_route_entry(route_info_vec,ip);
  391. log_bare(log_debug,"<entry:%u>",(u32_t)res.size());
  392. if(res.size()==0)
  393. {
  394. mylog(log_error,"cant find route entry\n");
  395. return -1;
  396. }
  397. if(res.size()>1)
  398. {
  399. mylog(log_error,"found duplicated entries\n");
  400. return -1;
  401. }
  402. if((route_info_vec[res[0]].flag&2)==0)
  403. {
  404. dest_ip=ip;
  405. if_name=route_info_vec[res[0]].if_name;
  406. return 0;
  407. }
  408. else
  409. {
  410. ip=route_info_vec[res[0]].gw;
  411. }
  412. }
  413. mylog(log_error,"dead loop in find_direct_dest\n");
  414. return -1;
  415. }
  416. struct arp_info_t
  417. {
  418. u32_t ip;
  419. string hw;
  420. string if_name;
  421. };
  422. int arp_ip_idx=0;
  423. int arp_hw_idx=3;
  424. int arp_if_idx=5;
  425. int find_arp(const vector<arp_info_t> &arp_info_vec,u32_t ip,string if_name,string &hw)
  426. {
  427. int pos=-1;
  428. int count=0;
  429. for(u32_t i=0;i<arp_info_vec.size();i++)
  430. {
  431. const arp_info_t & info=arp_info_vec[i];
  432. if(info.if_name!=if_name) continue;
  433. if(info.ip==ip)
  434. {
  435. count++;
  436. pos=i;
  437. }
  438. }
  439. if(count==0)
  440. {
  441. //mylog(log_warn,"cant find arp entry for %s %s,using 00:00:00:00:00:00\n",my_ntoa(ip),if_name.c_str());
  442. //hw="00:00:00:00:00:00";
  443. mylog(log_error,"cant find arp entry for %s %s\n",my_ntoa(ip),if_name.c_str());
  444. return -1;
  445. }
  446. if(count>1)
  447. {
  448. mylog(log_error,"find multiple arp entry for %s %s\n",my_ntoa(ip),if_name.c_str());
  449. return -1;
  450. }
  451. hw=arp_info_vec[pos].hw;
  452. return 0;
  453. }
  454. int find_lower_level_info(u32_t ip,u32_t &dest_ip,string &if_name,string &hw)
  455. {
  456. ip=htonl(ip);
  457. if(ip==htonl(inet_addr("127.0.0.1")))
  458. {
  459. dest_ip=ntohl(ip);
  460. if_name="lo";
  461. hw="00:00:00:00:00:00";
  462. return 0;
  463. }
  464. string route_file;
  465. if(read_file("/proc/net/route",route_file)!=0) return -1;
  466. string arp_file;
  467. if(read_file("/proc/net/arp",arp_file)!=0) return -1;
  468. log_bare(log_debug,"/proc/net/route:<<%s>>\n",route_file.c_str());
  469. log_bare(log_debug,"/proc/net/arp:<<%s>>\n",route_file.c_str());
  470. auto route_vec2=string_to_vec2(route_file.c_str());
  471. vector<route_info_t> route_info_vec;
  472. for(u32_t i=1;i<route_vec2.size();i++)
  473. {
  474. log_bare(log_debug,"<size:%u>",(u32_t)route_vec2[i].size());
  475. if(route_vec2[i].size()!=11)
  476. {
  477. mylog(log_error,"route coloum %d !=11 \n",int(route_vec2[i].size()));
  478. return -1;
  479. }
  480. route_info_t tmp;
  481. tmp.if_name=route_vec2[i][if_idx];
  482. if(hex_to_u32_with_endian(route_vec2[i][dest_idx],tmp.dest)!=0) return -1;
  483. if(hex_to_u32_with_endian(route_vec2[i][gw_idx],tmp.gw)!=0) return -1;
  484. if(hex_to_u32_with_endian(route_vec2[i][mask_idx],tmp.mask)!=0) return -1;
  485. if(hex_to_u32(route_vec2[i][flag_idx],tmp.flag)!=0)return -1;
  486. route_info_vec.push_back(tmp);
  487. for(u32_t j=0;j<route_vec2[i].size();j++)
  488. {
  489. log_bare(log_debug,"<%s>",route_vec2[i][j].c_str());
  490. }
  491. log_bare(log_debug,"%s dest:%x mask:%x gw:%x flag:%x",tmp.if_name.c_str(),tmp.dest,tmp.mask,tmp.gw,tmp.flag);
  492. log_bare(log_debug,"\n");
  493. }
  494. if(find_direct_dest(route_info_vec,ip,dest_ip,if_name)!=0)
  495. {
  496. mylog(log_error,"find_direct_dest failed for ip %s\n",my_ntoa(ntohl(ip)));
  497. return -1;
  498. }
  499. log_bare(log_debug,"========\n");
  500. auto arp_vec2=string_to_vec2(arp_file.c_str());
  501. vector<arp_info_t> arp_info_vec;
  502. for(u32_t i=1;i<arp_vec2.size();i++)
  503. {
  504. log_bare(log_debug,"<<arp_vec2[i].size(): %d>>",(int)arp_vec2[i].size());
  505. for(u32_t j=0;j<arp_vec2[i].size();j++)
  506. {
  507. log_bare(log_debug,"<%s>",arp_vec2[i][j].c_str());
  508. }
  509. if(arp_vec2[i].size()!=6)
  510. {
  511. mylog(log_error,"arp coloum %d !=11 \n",int(arp_vec2[i].size()));
  512. return -1;
  513. }
  514. arp_info_t tmp;
  515. tmp.if_name=arp_vec2[i][arp_if_idx];
  516. tmp.hw=arp_vec2[i][arp_hw_idx];
  517. tmp.ip=htonl(inet_addr(arp_vec2[i][arp_ip_idx].c_str()));
  518. arp_info_vec.push_back(tmp);
  519. log_bare(log_debug,"\n");
  520. }
  521. if(!interface_has_arp(if_name.c_str()))
  522. {
  523. mylog(log_info,"%s is a noarp interface,using 00:00:00:00:00:00\n",if_name.c_str());
  524. hw="00:00:00:00:00:00";
  525. }
  526. else if(find_arp(arp_info_vec,dest_ip,if_name,hw)!=0)
  527. {
  528. mylog(log_error,"find_arp failed for dest_ip %s ,if_name %s\n",my_ntoa(ntohl(ip)),if_name.c_str());
  529. return -1;
  530. }
  531. //printf("%s\n",hw.c_str());
  532. dest_ip=ntohl(dest_ip);
  533. return 0;
  534. }
  535. int send_raw_packet(raw_info_t &raw_info,const char * packet,int len)
  536. {
  537. const packet_info_t &send_info=raw_info.send_info;
  538. const packet_info_t &recv_info=raw_info.recv_info;
  539. int ret;
  540. if(lower_level==0)
  541. {
  542. if(raw_ip_version==AF_INET)
  543. {
  544. struct sockaddr_in sin={0};
  545. sin.sin_family = raw_ip_version;
  546. //sin.sin_port = htons(info.dst_port); //dont need this
  547. sin.sin_addr.s_addr = send_info.new_dst_ip.v4;
  548. ret = sendto(raw_send_fd, packet, len , 0, (struct sockaddr *) &sin, sizeof (sin));
  549. }
  550. else if(raw_ip_version==AF_INET6)
  551. {
  552. struct sockaddr_in6 sin={0};
  553. sin.sin6_family = raw_ip_version;
  554. //sin.sin_port = htons(info.dst_port); //dont need this
  555. sin.sin6_addr = send_info.new_dst_ip.v6;
  556. ret = sendto(raw_send_fd, packet, len , 0, (struct sockaddr *) &sin, sizeof (sin));
  557. }else
  558. {
  559. assert(0==1);
  560. }
  561. }
  562. else
  563. {
  564. struct sockaddr_ll addr={0}; //={0} not necessary
  565. memcpy(&addr,&send_info.addr_ll,sizeof(addr));
  566. ret = sendto(raw_send_fd, packet, len , 0, (struct sockaddr *) &addr, sizeof (addr));
  567. }
  568. if(ret==-1)
  569. {
  570. mylog(log_trace,"sendto failed\n");
  571. //perror("why?");
  572. return -1;
  573. }
  574. else
  575. {
  576. //mylog(log_info,"sendto succ\n");
  577. }
  578. return 0;
  579. }
  580. int send_raw_ip(raw_info_t &raw_info,const char * payload,int payloadlen)
  581. {
  582. const packet_info_t &send_info=raw_info.send_info;
  583. const packet_info_t &recv_info=raw_info.recv_info;
  584. char send_raw_ip_buf[buf_len];
  585. if(raw_info.disabled)
  586. {
  587. mylog(log_debug,"[%s,%d]connection disabled, no packet will be sent\n",recv_info.new_src_ip.get_str1(),recv_info.src_port);
  588. assert(max_rst_allowed>=0);
  589. return 0;
  590. }
  591. struct iphdr *iph = (struct iphdr *) send_raw_ip_buf;
  592. memset(iph,0,sizeof(iphdr));
  593. iph->ihl = sizeof(iphdr)/4; //we dont use ip options,so the length is just sizeof(iphdr)
  594. iph->version = 4;
  595. iph->tos = 0;
  596. if(lower_level)
  597. {
  598. //iph->id=0;
  599. iph->id = htons (g_ip_id_counter++); //Id of this packet
  600. }
  601. else
  602. iph->id = htons (g_ip_id_counter++); //Id of this packet
  603. //iph->id = 0; //Id of this packet ,kernel will auto fill this if id is zero ,or really?????// todo //seems like there is a problem
  604. iph->frag_off = htons(0x4000); //DF set,others are zero
  605. // iph->frag_off = htons(0x0000); //DF set,others are zero
  606. iph->ttl = (unsigned char)ttl_value;
  607. iph->protocol = send_info.protocol;
  608. iph->check = 0; //Set to 0 before calculating checksum
  609. iph->saddr = send_info.new_src_ip.v4; //Spoof the source ip address
  610. iph->daddr = send_info.new_dst_ip.v4;
  611. uint16_t ip_tot_len=sizeof (struct iphdr)+payloadlen;
  612. if(lower_level)iph->tot_len = htons(ip_tot_len); //this is not necessary ,kernel will always auto fill this //http://man7.org/linux/man-pages/man7/raw.7.html
  613. else
  614. iph->tot_len = 0;
  615. memcpy(send_raw_ip_buf+sizeof(iphdr) , payload, payloadlen);
  616. if(lower_level) iph->check =
  617. csum ((unsigned short *) send_raw_ip_buf, iph->ihl*4); //this is not necessary ,kernel will always auto fill this
  618. else
  619. iph->check=0;
  620. return send_raw_packet(raw_info,send_raw_ip_buf,ip_tot_len);
  621. }
  622. int pre_recv_raw_packet()
  623. {
  624. assert(g_packet_buf_cnt==0);
  625. g_sockaddr_len=sizeof(g_sockaddr.ll);
  626. g_packet_buf_len = recvfrom(raw_recv_fd, g_packet_buf, max_data_len+1, 0 ,(sockaddr*)&g_sockaddr , &g_sockaddr_len);
  627. //assert(g_sockaddr_len==sizeof(g_sockaddr.ll)); //g_sockaddr_len=18, sizeof(g_sockaddr.ll)=20, why its not equal? maybe its bc sll_halen is 6?
  628. //assert(g_addr_ll_size==sizeof(g_addr_ll));
  629. if(g_packet_buf_len==max_data_len+1)
  630. {
  631. mylog(log_warn,"huge packet, data_len > %d,dropped\n",max_data_len);
  632. return -1;
  633. }
  634. if(g_packet_buf_len<0)
  635. {
  636. mylog(log_trace,"recv_len %d\n",g_packet_buf_len);
  637. return -1;
  638. }
  639. g_packet_buf_cnt++;
  640. return 0;
  641. }
  642. int discard_raw_packet()
  643. {
  644. assert(g_packet_buf_cnt==1);
  645. g_packet_buf_cnt--;
  646. return 0;
  647. }
  648. int recv_raw_packet(char * &packet,int &len,int peek)
  649. {
  650. assert(g_packet_buf_cnt==1);
  651. if(!peek)
  652. g_packet_buf_cnt--;
  653. if(g_packet_buf_len<int(link_level_header_len))
  654. {
  655. mylog(log_trace,"packet len %d shorter than link_level_header_len %d\n",g_packet_buf_len,int(link_level_header_len));
  656. return -1;
  657. }
  658. if(link_level_header_len ==14)
  659. {
  660. unsigned char a=g_packet_buf[12];
  661. unsigned char b=g_packet_buf[13];
  662. if(! ((a==0x08&&b==0x00) ||(a==0x86&&b==0xdd)) )
  663. {
  664. mylog(log_trace,"not an ipv4 or ipv6 packet!\n");
  665. return -1;
  666. }
  667. }
  668. packet=g_packet_buf+int(link_level_header_len);
  669. len=g_packet_buf_len-int(link_level_header_len);
  670. return 0;
  671. }
  672. int recv_raw_ip(raw_info_t &raw_info,char * &payload,int &payloadlen)
  673. {
  674. char *raw_packet_buf;
  675. //static char recv_raw_ip_buf[buf_len];
  676. int raw_packet_len;
  677. if(recv_raw_packet(raw_packet_buf,raw_packet_len,raw_info.peek)!=0) return -1;
  678. //const packet_info_t &send_info=raw_info.send_info;
  679. packet_info_t &recv_info=raw_info.recv_info;
  680. iphdr * iph;
  681. ip6_hdr * ip6h;
  682. int flag=0;
  683. //int recv_len = recvfrom(raw_recv_fd, recv_raw_ip_buf, max_data_len+1, flag ,(sockaddr*)&saddr , &saddr_size);
  684. char *ip_begin=raw_packet_buf; //14 is eth net header
  685. if(raw_packet_len<1)
  686. {
  687. mylog(log_trace,"raw_packet_len <1, dropped\n");
  688. return -1;
  689. }
  690. iph = (struct iphdr *) (ip_begin); //just use the iphdr here to get the first 4bit
  691. ip6h= (struct ip6_hdr *) (ip_begin);
  692. if(raw_ip_version==AF_INET)
  693. {
  694. if(iph->version!=4)
  695. {
  696. mylog(log_trace,"expect ipv4 packet, but got something else: %02x\n",iph->version);
  697. return -1;
  698. }
  699. if(raw_packet_len<(int)sizeof(iphdr))
  700. {
  701. mylog(log_trace,"raw_packet_len<sizeof(iphdr)\n");
  702. return -1;
  703. }
  704. }
  705. else
  706. {
  707. assert(raw_ip_version==AF_INET6);
  708. if(iph->version!=6)
  709. {
  710. mylog(log_trace,"expect ipv6 packet, but got something else: %02x\n",iph->version);
  711. return -1;
  712. }
  713. if(raw_packet_len<(int)sizeof(ip6_hdr))
  714. {
  715. mylog(log_trace,"raw_packet_len<sizeof(ip6_hdr)\n");
  716. return -1;
  717. }
  718. }
  719. if(lower_level)
  720. {
  721. memcpy(&recv_info.addr_ll,&g_sockaddr.ll,sizeof(recv_info.addr_ll));
  722. }
  723. if(bind_addr_used && !recv_info.new_dst_ip.equal(bind_addr))
  724. {
  725. mylog(log_trace,"bind adress doenst match, dropped\n");
  726. //printf(" bind adress doenst match, dropped\n");
  727. return -1;
  728. }
  729. unsigned short iphdrlen;
  730. int ip_len;
  731. if(raw_ip_version==AF_INET)
  732. {
  733. recv_info.new_src_ip.v4=iph->saddr;
  734. recv_info.new_dst_ip.v4=iph->daddr;
  735. recv_info.protocol=iph->protocol;
  736. iphdrlen =iph->ihl*4;
  737. ip_len=ntohs(iph->tot_len);
  738. }
  739. else
  740. {
  741. //todo flow id
  742. recv_info.new_src_ip.v6=ip6h->ip6_src;
  743. recv_info.new_dst_ip.v6=ip6h->ip6_dst;
  744. iphdrlen=40;
  745. recv_info.protocol=ip6h->ip6_nxt; //todo handle extension headers;
  746. ip_len=ntohs(ip6h->ip6_plen);
  747. }
  748. //if (!(iph->ihl > 0 && iph->ihl <=60)) {
  749. // mylog(log_trace,"iph ihl error\n");
  750. // return -1;
  751. // }
  752. if(raw_packet_len <ip_len)
  753. {
  754. mylog(log_debug,"incomplete packet\n");
  755. return -1;
  756. }
  757. if(raw_ip_version==AF_INET)
  758. {
  759. if(raw_info.peek==0)// avoid cal it twice
  760. {
  761. u32_t ip_chk=csum ((unsigned short *) ip_begin, iphdrlen);
  762. if(ip_chk!=0)
  763. {
  764. mylog(log_debug,"ip header error %x\n",ip_chk);
  765. return -1;
  766. }
  767. }
  768. }
  769. else
  770. {
  771. }
  772. payload=ip_begin+iphdrlen;
  773. payloadlen=ip_len-iphdrlen;
  774. if(payloadlen<0)
  775. {
  776. mylog(log_warn,"error payload len\n");
  777. return -1;
  778. }
  779. return 0;
  780. }
  781. int peek_raw(raw_info_t &raw_info)
  782. {
  783. //static char peek_raw_buf[buf_len];
  784. //assert(g_packet_buf_cnt==1);
  785. //g_packet_buf_cnt--;
  786. //char * peek_raw_buf=g_packet_buf;
  787. //int recv_len=g_packet_buf_len;
  788. //char *ip_begin=peek_raw_buf+link_level_header_len;
  789. //struct sockaddr saddr={0};
  790. //socklen_t saddr_size=sizeof(saddr);
  791. //int recv_len = recvfrom(raw_recv_fd, peek_raw_buf,max_data_len, MSG_PEEK ,&saddr , &saddr_size);//change max_data_len to something smaller,we only need header here
  792. //iphdr * iph = (struct iphdr *) (ip_begin);
  793. //mylog(log_info,"recv_len %d\n",recv_len);
  794. //if(recv_len<int(sizeof(iphdr)))
  795. //{
  796. // mylog(log_trace,"failed here %d %d\n",recv_len,int(sizeof(iphdr)));
  797. // mylog(log_trace,"%s\n ",strerror(errno));
  798. // return -1;
  799. //}
  800. //peek_info.new_src_ip.v4=iph->saddr;
  801. //unsigned short iphdrlen =iph->ihl*4;
  802. //char *payload=ip_begin+iphdrlen;
  803. packet_info_t &recv_info=raw_info.recv_info;
  804. char *payload;int payload_len;
  805. if(recv_raw_ip(raw_info,payload,payload_len)!=0)
  806. return -1;
  807. //mylog(log_info,"protocol %d\n",iph->protocol);
  808. switch(raw_mode)
  809. {
  810. case mode_faketcp:
  811. {
  812. if(recv_info.protocol!=IPPROTO_TCP)
  813. {
  814. mylog(log_trace,"failed here");
  815. return -1;
  816. }
  817. struct tcphdr *tcph=(tcphdr *)payload;
  818. if(payload_len<int(sizeof(tcphdr) ))
  819. {
  820. mylog(log_trace,"failed here");
  821. return -1;
  822. }
  823. recv_info.src_port=ntohs(tcph->source);
  824. recv_info.syn=tcph->syn;
  825. break;
  826. }
  827. case mode_udp:
  828. {
  829. if(recv_info.protocol!=IPPROTO_UDP) return -1;
  830. struct udphdr *udph=(udphdr *)payload;
  831. if(payload_len<int(sizeof(udphdr)))
  832. return -1;
  833. recv_info.src_port=ntohs(udph->source);
  834. break;
  835. }
  836. case mode_icmp:
  837. {
  838. if(recv_info.protocol!=IPPROTO_ICMP) return -1;
  839. struct icmphdr *icmph=(icmphdr *)payload;
  840. if(payload_len<int(sizeof(udphdr)))
  841. return -1;
  842. recv_info.src_port=ntohs(icmph->id);
  843. break;
  844. }
  845. default:return -1;
  846. }
  847. return 0;
  848. }
  849. int send_raw_icmp(raw_info_t &raw_info, const char * payload, int payloadlen)
  850. {
  851. const packet_info_t &send_info=raw_info.send_info;
  852. const packet_info_t &recv_info=raw_info.recv_info;
  853. char send_raw_icmp_buf[buf_len];
  854. icmphdr *icmph=(struct icmphdr *) (send_raw_icmp_buf);
  855. memset(icmph,0,sizeof(icmphdr));
  856. if(program_mode==client_mode)
  857. {
  858. icmph->type=8;
  859. }
  860. else
  861. {
  862. icmph->type=0;
  863. }
  864. icmph->code=0;
  865. icmph->id=htons(send_info.src_port);
  866. icmph->seq=htons(send_info.icmp_seq); /////////////modify
  867. memcpy(send_raw_icmp_buf+sizeof(icmphdr),payload,payloadlen);
  868. icmph->check_sum = csum( (unsigned short*) send_raw_icmp_buf, sizeof(icmphdr)+payloadlen);
  869. if(send_raw_ip(raw_info,send_raw_icmp_buf,sizeof(icmphdr)+payloadlen)!=0)
  870. {
  871. return -1;
  872. }
  873. /*if(program_mode==client_mode)
  874. {
  875. send_info.icmp_seq++;
  876. }*/
  877. return 0;
  878. }
  879. int send_raw_udp(raw_info_t &raw_info, const char * payload, int payloadlen)
  880. {
  881. const packet_info_t &send_info=raw_info.send_info;
  882. const packet_info_t &recv_info=raw_info.recv_info;
  883. char send_raw_udp_buf[buf_len];
  884. udphdr *udph=(struct udphdr *) (send_raw_udp_buf);
  885. memset(udph,0,sizeof(udphdr));
  886. struct pseudo_header tmp_header={0};
  887. struct pseudo_header *psh = &tmp_header;
  888. udph->source = htons(send_info.src_port);
  889. udph->dest = htons(send_info.dst_port);
  890. int udp_tot_len=payloadlen+sizeof(udphdr);
  891. if(udp_tot_len>65535)
  892. {
  893. mylog(log_debug,"invalid len\n");
  894. return -1;
  895. }
  896. mylog(log_trace,"udp_len:%d %d\n",udp_tot_len,udph->len);
  897. udph->len=htons(uint16_t(udp_tot_len));
  898. memcpy(send_raw_udp_buf+sizeof(udphdr),payload,payloadlen);
  899. psh->source_address = send_info.new_src_ip.v4;
  900. psh->dest_address = send_info.new_dst_ip.v4;
  901. psh->placeholder = 0;
  902. psh->protocol = IPPROTO_UDP;
  903. psh->tcp_length = htons(uint16_t(udp_tot_len));
  904. int csum_size = udp_tot_len ;
  905. udph->check = csum_with_header((char *)psh,sizeof(pseudo_header), (unsigned short*) send_raw_udp_buf, csum_size);
  906. if(send_raw_ip(raw_info,send_raw_udp_buf,udp_tot_len)!=0)
  907. {
  908. return -1;
  909. }
  910. return 0;
  911. }
  912. int send_raw_tcp(raw_info_t &raw_info,const char * payload, int payloadlen) { //TODO seq increase
  913. const packet_info_t &send_info=raw_info.send_info;
  914. const packet_info_t &recv_info=raw_info.recv_info;
  915. //mylog(log_debug,"syn %d\n",send_info.syn);
  916. char send_raw_tcp_buf[buf_len];
  917. //char *send_raw_tcp_buf=send_raw_tcp_buf0;
  918. struct tcphdr *tcph = (struct tcphdr *) (send_raw_tcp_buf);
  919. memset(tcph,0,sizeof(tcphdr));
  920. pseudo_header tmp_header={0};
  921. struct pseudo_header *psh = &tmp_header;
  922. //TCP Header
  923. tcph->source = htons(send_info.src_port);
  924. tcph->dest = htons(send_info.dst_port);
  925. tcph->seq = htonl(send_info.seq);
  926. tcph->ack_seq = htonl(send_info.ack_seq);
  927. tcph->fin = 0;
  928. tcph->syn = send_info.syn;
  929. tcph->rst = 0;
  930. tcph->psh = send_info.psh;
  931. tcph->ack = send_info.ack;
  932. if (tcph->syn == 1) {
  933. tcph->doff = 10; //tcp header size
  934. int i = sizeof(tcphdr);
  935. send_raw_tcp_buf[i++] = 0x02; //mss
  936. send_raw_tcp_buf[i++] = 0x04;
  937. send_raw_tcp_buf[i++] = 0x05;
  938. send_raw_tcp_buf[i++] = (char)0xb4;
  939. //raw_send_buf[i++]=0x01;
  940. //raw_send_buf[i++]=0x01;
  941. send_raw_tcp_buf[i++] = 0x04; //sack ok
  942. send_raw_tcp_buf[i++] = 0x02; //sack ok
  943. send_raw_tcp_buf[i++] = 0x08; //ts i=6
  944. send_raw_tcp_buf[i++] = 0x0a; //i=7
  945. //*(u32_t*) (&send_raw_tcp_buf[i]) = htonl(
  946. // (u32_t) get_current_time());
  947. u32_t ts=htonl((u32_t) get_current_time());
  948. memcpy(&send_raw_tcp_buf[i],&ts,sizeof(ts));
  949. i += 4;
  950. //mylog(log_info,"[syn]<send_info.ts_ack= %u>\n",send_info.ts_ack);
  951. //*(u32_t*) (&send_raw_tcp_buf[i]) = htonl(send_info.ts_ack);
  952. u32_t ts_ack=htonl(send_info.ts_ack);
  953. memcpy(&send_raw_tcp_buf[i],&ts_ack,sizeof(ts_ack));
  954. i += 4;
  955. send_raw_tcp_buf[i++] = 0x01;
  956. send_raw_tcp_buf[i++] = 0x03;
  957. send_raw_tcp_buf[i++] = 0x03;
  958. send_raw_tcp_buf[i++] = wscale;
  959. } else {
  960. tcph->doff = 8;
  961. int i = sizeof(tcphdr);
  962. send_raw_tcp_buf[i++] = 0x01;
  963. send_raw_tcp_buf[i++] = 0x01;
  964. send_raw_tcp_buf[i++] = 0x08; //ts //i=2
  965. send_raw_tcp_buf[i++] = 0x0a; //i=3;
  966. //*(u32_t*) (&send_raw_tcp_buf[i]) = htonl(
  967. // (u32_t) get_current_time());
  968. u32_t ts=htonl((u32_t) get_current_time());
  969. memcpy(&send_raw_tcp_buf[i],&ts,sizeof(ts));
  970. i += 4;
  971. //mylog(log_info,"<send_info.ts_ack= %u>\n",send_info.ts_ack);
  972. //*(u32_t*) (&send_raw_tcp_buf[i]) = htonl(send_info.ts_ack);
  973. u32_t ts_ack=htonl(send_info.ts_ack);
  974. memcpy(&send_raw_tcp_buf[i],&ts_ack,sizeof(ts_ack));
  975. i += 4;
  976. }
  977. tcph->urg = 0;
  978. //tcph->window = htons((uint16_t)(1024));
  979. tcph->window = htons((uint16_t) (receive_window_lower_bound + random() % receive_window_random_range));
  980. tcph->check = 0; //leave checksum 0 now, filled later by pseudo header
  981. tcph->urg_ptr = 0;
  982. char *tcp_data = send_raw_tcp_buf+ + tcph->doff * 4;
  983. memcpy(tcp_data, payload, payloadlen);
  984. psh->source_address = send_info.new_src_ip.v4;
  985. psh->dest_address = send_info.new_dst_ip.v4;
  986. psh->placeholder = 0;
  987. psh->protocol = IPPROTO_TCP;
  988. psh->tcp_length = htons(tcph->doff * 4 + payloadlen);
  989. int csum_size = tcph->doff*4 + payloadlen;
  990. tcph->check = csum_with_header((char *)psh,sizeof(pseudo_header), (unsigned short*) send_raw_tcp_buf, csum_size);
  991. int tcp_totlen=tcph->doff*4 + payloadlen;
  992. if(send_raw_ip(raw_info,send_raw_tcp_buf,tcp_totlen)!=0)
  993. {
  994. return -1;
  995. }
  996. raw_info.send_info.data_len=payloadlen;
  997. return 0;
  998. }
  999. /*
  1000. int send_raw_tcp_deprecated(const packet_info_t &info,const char * payload,int payloadlen)
  1001. {
  1002. static uint16_t ip_id=1;
  1003. char raw_send_buf[buf_len];
  1004. char raw_send_buf2[buf_len];
  1005. //if((prog_mode==client_mode&& payloadlen!=9) ||(prog_mode==server_mode&& payloadlen!=5 ) )
  1006. mylog(log_trace,"send raw from to %d %d %d %d\n",info.src_ip,info.src_port,info.dst_ip,info.dst_port);
  1007. char *data;
  1008. memset(raw_send_buf,0,payloadlen+100);
  1009. struct iphdr *iph = (struct iphdr *) raw_send_buf;
  1010. //TCP header
  1011. struct tcphdr *tcph = (struct tcphdr *) (raw_send_buf + sizeof (struct ip));
  1012. struct sockaddr_in sin;
  1013. struct pseudo_header psh;
  1014. //some address resolution
  1015. sin.sin_family = AF_INET;
  1016. sin.sin_port = htons(info.dst_port);
  1017. sin.sin_addr.s_addr = info.dst_ip;
  1018. //Fill in the IP Header
  1019. iph->ihl = 5;
  1020. iph->version = 4;
  1021. iph->tos = 0;
  1022. iph->id = htonl (ip_id++); //Id of this packet
  1023. iph->frag_off = htons(0x4000); //DF set,others are zero
  1024. iph->ttl = (unsigned char)ttl_value;
  1025. iph->protocol = IPPROTO_TCP;
  1026. iph->check = 0; //Set to 0 before calculating checksum
  1027. iph->saddr = info.src_ip; //Spoof the source ip address
  1028. iph->daddr = info.dst_ip;
  1029. //TCP Header
  1030. tcph->source = htons(info.src_port);
  1031. tcph->dest = htons(info.dst_port);
  1032. tcph->seq =htonl(info.seq);
  1033. tcph->ack_seq = htonl(info.ack_seq);
  1034. tcph->fin=0;
  1035. tcph->syn=info.syn;
  1036. tcph->rst=0;
  1037. tcph->psh=info.psh;
  1038. tcph->ack=info.ack;
  1039. if(tcph->syn==1)
  1040. {
  1041. tcph->doff = 10; //tcp header size
  1042. int i=sizeof (struct iphdr)+20;
  1043. raw_send_buf[i++]=0x02;//mss
  1044. raw_send_buf[i++]=0x04;
  1045. raw_send_buf[i++]=0x05;
  1046. raw_send_buf[i++]=0xb4;
  1047. //raw_send_buf[i++]=0x01;
  1048. //raw_send_buf[i++]=0x01;
  1049. raw_send_buf[i++]=0x04; //sack ok
  1050. raw_send_buf[i++]=0x02; //sack ok
  1051. raw_send_buf[i++]=0x08; //i=6;
  1052. raw_send_buf[i++]=0x0a;
  1053. *(uint32_t*)(& raw_send_buf[i])=htonl((uint32_t)get_current_time());
  1054. i+=4;
  1055. *(uint32_t*)(& raw_send_buf[i])=htonl(info.ts_ack);
  1056. i+=4;
  1057. raw_send_buf[i++]=0x01;
  1058. raw_send_buf[i++]=0x03;
  1059. raw_send_buf[i++]=0x03;
  1060. raw_send_buf[i++]=0x05;
  1061. }
  1062. else
  1063. {
  1064. tcph->doff=8;
  1065. int i=sizeof (struct iphdr)+20;
  1066. raw_send_buf[i++]=0x01;
  1067. raw_send_buf[i++]=0x01;
  1068. raw_send_buf[i++]=0x08; //i=0;
  1069. raw_send_buf[i++]=0x0a;
  1070. *(uint32_t*)(& raw_send_buf[i])=htonl((uint32_t)get_current_time());
  1071. i+=4;
  1072. *(uint32_t*)(& raw_send_buf[i])=htonl(info.ts_ack);
  1073. i+=4;
  1074. }
  1075. tcph->urg=0;
  1076. //tcph->window = htons((uint16_t)(1024));
  1077. tcph->window = htons((uint16_t)(10240+random()%100));
  1078. tcph->check = 0; //leave checksum 0 now, filled later by pseudo header
  1079. tcph->urg_ptr = 0;
  1080. //Data part
  1081. data = raw_send_buf + sizeof(struct iphdr) + tcph->doff*4;
  1082. iph->tot_len = sizeof (struct iphdr) + tcph->doff*4 + payloadlen;
  1083. memcpy(data , payload, payloadlen);
  1084. psh.source_address = info.src_ip;
  1085. psh.dest_address = sin.sin_addr.s_addr;
  1086. psh.placeholder = 0;
  1087. psh.protocol = IPPROTO_TCP;
  1088. psh.tcp_length = htons(tcph->doff*4 + payloadlen );
  1089. int psize = sizeof(struct pseudo_header) + tcph->doff*4 + payloadlen;
  1090. memcpy(raw_send_buf2 , (char*) &psh , sizeof (struct pseudo_header));
  1091. memcpy(raw_send_buf2 + sizeof(struct pseudo_header) , tcph , tcph->doff*4 + payloadlen);
  1092. tcph->check = csum( (unsigned short*) raw_send_buf2, psize);
  1093. //Ip checksum
  1094. iph->check = csum ((unsigned short *) raw_send_buf, iph->tot_len);
  1095. mylog(log_trace,"sent seq ack_seq len<%u %u %d>\n",g_packet_info_send.seq,g_packet_info_send.ack_seq,payloadlen);
  1096. int ret = sendto(raw_send_fd, raw_send_buf, iph->tot_len , 0, (struct sockaddr *) &sin, sizeof (sin));
  1097. if(g_packet_info_send.syn==0&&g_packet_info_send.ack==1&&payloadlen!=0)
  1098. {
  1099. if(seq_mode==0)
  1100. {
  1101. }
  1102. else if(seq_mode==1)
  1103. {
  1104. g_packet_info_send.seq+=payloadlen;
  1105. }
  1106. else if(seq_mode==2)
  1107. {
  1108. if(random()% 5==3 )
  1109. g_packet_info_send.seq+=payloadlen;
  1110. }
  1111. }
  1112. mylog(log_trace,"<ret:%d>\n",ret);
  1113. if(ret<0)
  1114. {
  1115. mylog(log_fatal,"");
  1116. perror("raw send error\n");
  1117. //printf("send error\n");
  1118. }
  1119. return 0;
  1120. }
  1121. */
  1122. int recv_raw_icmp(raw_info_t &raw_info, char *&payload, int &payloadlen)
  1123. {
  1124. const packet_info_t &send_info=raw_info.send_info;
  1125. packet_info_t &recv_info=raw_info.recv_info;
  1126. static char recv_raw_icmp_buf[buf_len];
  1127. char * ip_payload;
  1128. int ip_payloadlen;
  1129. if(recv_raw_ip(raw_info,ip_payload,ip_payloadlen)!=0)
  1130. {
  1131. mylog(log_debug,"recv_raw_ip error\n");
  1132. return -1;
  1133. }
  1134. if(recv_info.protocol!=IPPROTO_ICMP)
  1135. {
  1136. //printf("not udp protocol\n");
  1137. return -1;
  1138. }
  1139. icmphdr *icmph=(struct icmphdr *) (ip_payload);
  1140. if(ntohs(icmph->id)!=send_info.src_port)
  1141. {
  1142. mylog(log_debug,"icmp id mis-match,ignored\n");
  1143. return -1;
  1144. }
  1145. recv_info.src_port=recv_info.dst_port=ntohs(icmph->id);
  1146. recv_info.icmp_seq=ntohs(icmph->seq);
  1147. if(program_mode==client_mode)
  1148. {
  1149. if(icmph->type!=0)
  1150. return -1;
  1151. }
  1152. else
  1153. {
  1154. if(icmph->type!=8)
  1155. return -1;
  1156. }
  1157. if(icmph->code!=0)
  1158. return -1;
  1159. unsigned short check = csum( (unsigned short*) ip_payload, ip_payloadlen);
  1160. if(check!=0)
  1161. {
  1162. mylog(log_debug,"icmp checksum fail %x\n",check);
  1163. return -1;
  1164. }
  1165. //mylog(log_info,"program_mode=%d\n",program_mode);
  1166. /*
  1167. if(program_mode==server_mode)
  1168. {
  1169. send_info.icmp_seq=ntohs(icmph->seq);
  1170. //mylog(log_info,"send_info.seq=%d\n",send_info.seq);
  1171. }*/
  1172. payload=ip_payload+sizeof(icmphdr);
  1173. payloadlen=ip_payloadlen-sizeof(icmphdr);
  1174. mylog(log_trace,"get a packet len=%d\n",payloadlen);
  1175. return 0;
  1176. }
  1177. int recv_raw_udp(raw_info_t &raw_info, char *&payload, int &payloadlen)
  1178. {
  1179. const packet_info_t &send_info=raw_info.send_info;
  1180. packet_info_t &recv_info=raw_info.recv_info;
  1181. //static char recv_raw_udp_buf[buf_len];
  1182. char * ip_payload;
  1183. int ip_payloadlen;
  1184. if(recv_raw_ip(raw_info,ip_payload,ip_payloadlen)!=0)
  1185. {
  1186. mylog(log_debug,"recv_raw_ip error\n");
  1187. return -1;
  1188. }
  1189. if(recv_info.protocol!=IPPROTO_UDP)
  1190. {
  1191. //printf("not udp protocol\n");
  1192. return -1;
  1193. }
  1194. if(ip_payloadlen<int( sizeof(udphdr) ))
  1195. {
  1196. mylog(log_debug,"too short to hold udpheader\n");
  1197. return -1;
  1198. }
  1199. udphdr *udph=(struct udphdr*)ip_payload;
  1200. if(int(ntohs(udph->len))!=ip_payloadlen)
  1201. {
  1202. mylog(log_debug,"udp length error %d %d \n",ntohs(udph->len),ip_payloadlen);
  1203. return -1;
  1204. }
  1205. if(udph->dest!=ntohs(uint16_t(filter_port)))
  1206. {
  1207. //printf("%x %x",tcph->dest,);
  1208. return -1;
  1209. }
  1210. //memcpy(recv_raw_udp_buf+ sizeof(struct pseudo_header) , ip_payload , ip_payloadlen);
  1211. pseudo_header tmp_header={0};
  1212. struct pseudo_header *psh=&tmp_header ;
  1213. psh->source_address = recv_info.new_src_ip.v4;
  1214. psh->dest_address = recv_info.new_dst_ip.v4;
  1215. psh->placeholder = 0;
  1216. psh->protocol = IPPROTO_UDP;
  1217. psh->tcp_length = htons(ip_payloadlen);
  1218. int csum_len=ip_payloadlen;
  1219. uint16_t udp_chk = csum_with_header((char *)psh,sizeof(pseudo_header), (unsigned short*) ip_payload, csum_len);
  1220. if(udp_chk!=0)
  1221. {
  1222. mylog(log_debug,"udp_chk:%x\n",udp_chk);
  1223. mylog(log_debug,"udp header error\n");
  1224. return -1;
  1225. }
  1226. char *udp_begin=ip_payload;
  1227. recv_info.src_port=ntohs(udph->source);
  1228. recv_info.dst_port=ntohs(udph->dest);
  1229. payloadlen = ip_payloadlen-sizeof(udphdr);
  1230. payload=udp_begin+sizeof(udphdr);
  1231. return 0;
  1232. }
  1233. int parse_tcp_option(char * option_begin,char * option_end,packet_info_t &recv_info)
  1234. {
  1235. recv_info.has_ts=0;
  1236. recv_info.ts=0;
  1237. char *ptr=option_begin;
  1238. //char *option_end=tcp_begin+tcp_hdr_len;
  1239. while(ptr<option_end)
  1240. {
  1241. if(*ptr==0)
  1242. {
  1243. return 0;
  1244. }
  1245. else if(*ptr==1)
  1246. {
  1247. ptr++;
  1248. }
  1249. else if(*ptr==8)
  1250. {
  1251. if(ptr+1>=option_end)
  1252. {
  1253. mylog(log_debug,"invaild option ptr+1==option_end,for ts\n");
  1254. return -1;
  1255. }
  1256. if(*(ptr+1)!=10)
  1257. {
  1258. mylog(log_debug,"invaild ts len\n");
  1259. return -1;
  1260. }
  1261. if(ptr+10>option_end)
  1262. {
  1263. mylog(log_debug,"ptr+10>option_end for ts\n");
  1264. return -1;
  1265. }
  1266. recv_info.has_ts=1;
  1267. recv_info.ts= read_u32(ptr+2);
  1268. recv_info.ts_ack=read_u32(ptr+6);
  1269. //printf("<%d %d>!\n",recv_info.ts,recv_info.ts_ack);
  1270. //return 0;//we currently only parse ts, so just return after its found
  1271. ptr+=8;
  1272. }
  1273. else
  1274. {
  1275. if(ptr+1>=option_end)
  1276. {
  1277. mylog(log_debug,"invaild option ptr+1==option_end\n");
  1278. return -1;
  1279. }
  1280. else
  1281. {
  1282. int len=(unsigned char)*(ptr+1);
  1283. if(len<=1)
  1284. {
  1285. mylog(log_debug,"invaild option len %d\n",len);
  1286. return -1;
  1287. }
  1288. //omit check
  1289. ptr+=len;
  1290. }
  1291. }
  1292. //printf("!");
  1293. }
  1294. //printf("\n");
  1295. return 0;
  1296. }
  1297. int recv_raw_tcp(raw_info_t &raw_info,char * &payload,int &payloadlen)
  1298. {
  1299. const packet_info_t &send_info=raw_info.send_info;
  1300. packet_info_t &recv_info=raw_info.recv_info;
  1301. //static char recv_raw_tcp_buf[buf_len];
  1302. char * ip_payload;
  1303. int ip_payloadlen;
  1304. if(recv_raw_ip(raw_info,ip_payload,ip_payloadlen)!=0)
  1305. {
  1306. mylog(log_debug,"recv_raw_ip error\n");
  1307. return -1;
  1308. }
  1309. if(recv_info.protocol!=IPPROTO_TCP)
  1310. {
  1311. //printf("not tcp protocol\n");
  1312. return -1;
  1313. }
  1314. tcphdr * tcph=(struct tcphdr*)ip_payload;
  1315. unsigned short tcphdrlen = tcph->doff*4;
  1316. if (!(tcphdrlen > 0 && tcphdrlen <=60)) {
  1317. mylog(log_debug,"tcph error\n");
  1318. return 0;
  1319. }
  1320. if (tcphdrlen >ip_payloadlen) {
  1321. mylog(log_debug,"error,tcphdrlen >ip_payloadlen\n");
  1322. return 0;
  1323. }
  1324. if(tcph->dest!=ntohs(uint16_t(filter_port)))
  1325. {
  1326. //printf("%x %x",tcph->dest,);
  1327. return -1;
  1328. }
  1329. // memcpy(recv_raw_tcp_buf+ sizeof(struct pseudo_header) , ip_payload , ip_payloadlen);
  1330. pseudo_header tmp_header;
  1331. struct pseudo_header *psh=&tmp_header ;
  1332. psh->source_address = recv_info.new_src_ip.v4;
  1333. psh->dest_address = recv_info.new_dst_ip.v4;
  1334. psh->placeholder = 0;
  1335. psh->protocol = IPPROTO_TCP;
  1336. psh->tcp_length = htons(ip_payloadlen);
  1337. int csum_len=ip_payloadlen;
  1338. uint16_t tcp_chk = csum_with_header((char *)psh,sizeof(pseudo_header), (unsigned short*) ip_payload, csum_len);
  1339. /*for(int i=0;i<csum_len;i++)
  1340. {
  1341. printf("<%d>",int(ip_payload[i]));
  1342. }
  1343. printf("\n");*/
  1344. if(tcp_chk!=0)
  1345. {
  1346. mylog(log_debug,"tcp_chk:%x\n",tcp_chk);
  1347. mylog(log_debug,"tcp header error\n");
  1348. return -1;
  1349. }
  1350. char *tcp_begin=ip_payload; //ip packet's data part
  1351. char *tcp_option=ip_payload+sizeof(tcphdr);
  1352. char *option_end=ip_payload+tcphdrlen;
  1353. /*
  1354. //old ts parse code
  1355. recv_info.has_ts=0;
  1356. recv_info.ts=0;
  1357. if(tcph->doff==10)
  1358. {
  1359. if(tcp_option[6]==0x08 &&tcp_option[7]==0x0a)
  1360. {
  1361. recv_info.has_ts=1;
  1362. //recv_info.ts=ntohl(*(u32_t*)(&tcp_option[8]));
  1363. memcpy(&recv_info.ts,&tcp_option[8],sizeof(recv_info.ts));
  1364. recv_info.ts=ntohl(recv_info.ts);
  1365. //recv_info.ts_ack=ntohl(*(u32_t*)(&tcp_option[12]));
  1366. memcpy(&recv_info.ts_ack,&tcp_option[12],sizeof(recv_info.ts_ack));
  1367. recv_info.ts_ack=ntohl(recv_info.ts_ack);
  1368. //g_packet_info_send.ts_ack= ntohl(*(uint32_t*)(&tcp_option[8]));
  1369. }
  1370. else
  1371. {
  1372. // mylog(log_info,"\n");
  1373. }
  1374. }
  1375. else if(tcph->doff==8)
  1376. {
  1377. if(tcp_option[2]==0x08 &&tcp_option[3]==0x0a)
  1378. {
  1379. recv_info.has_ts=1;
  1380. //recv_info.ts=ntohl(*(u32_t*)(&tcp_option[4]));
  1381. memcpy(&recv_info.ts,&tcp_option[4],sizeof(recv_info.ts));
  1382. recv_info.ts=ntohl(recv_info.ts);
  1383. //recv_info.ts_ack=ntohl(*(u32_t*)(&tcp_option[8]));
  1384. memcpy(&recv_info.ts_ack,&tcp_option[8],sizeof(recv_info.ts_ack));
  1385. recv_info.ts_ack=ntohl(recv_info.ts_ack);
  1386. //g_packet_info_send.ts_ack= ntohl(*(uint32_t*)(&tcp_option[0]));
  1387. }
  1388. else
  1389. {
  1390. //mylog(log_info,"!!!\n");
  1391. }
  1392. }
  1393. else
  1394. {
  1395. //mylog(log_info,"tcph->doff= %u\n",tcph->doff);
  1396. }
  1397. printf("<%d %d>\n",recv_info.ts,recv_info.ts_ack);
  1398. */
  1399. parse_tcp_option(tcp_option,option_end,recv_info);
  1400. recv_info.ack=tcph->ack;
  1401. recv_info.syn=tcph->syn;
  1402. recv_info.rst=tcph->rst;
  1403. recv_info.src_port=ntohs(tcph->source);
  1404. recv_info.dst_port=ntohs(tcph->dest);
  1405. recv_info.seq=ntohl(tcph->seq);
  1406. // recv_info.last_last_ack_seq=recv_info.last_ack_seq;
  1407. //recv_info.last_ack_seq=recv_info.ack_seq;
  1408. u32_t last_ack_seq=recv_info.ack_seq;
  1409. recv_info.ack_seq=ntohl(tcph->ack_seq);
  1410. if(recv_info.ack_seq==last_ack_seq)
  1411. {
  1412. recv_info.ack_seq_counter++;
  1413. }
  1414. else
  1415. {
  1416. recv_info.ack_seq_counter=0;
  1417. }
  1418. recv_info.psh=tcph->psh;
  1419. if(tcph->rst==1)
  1420. {
  1421. raw_info.rst_received++;
  1422. if(max_rst_to_show>0)
  1423. {
  1424. if(raw_info.rst_received < max_rst_to_show)
  1425. {
  1426. mylog(log_warn,"[%s,%d]rst==1,cnt=%d\n",recv_info.new_src_ip.get_str1(),recv_info.src_port,(int)raw_info.rst_received);
  1427. }
  1428. else if(raw_info.rst_received == max_rst_to_show)
  1429. {
  1430. mylog(log_warn,"[%s,%d]rst==1,cnt=%d >=max_rst_to_show, this log will be muted for current connection\n",recv_info.new_src_ip.get_str1(),recv_info.src_port,(int)raw_info.rst_received);
  1431. }
  1432. else
  1433. {
  1434. mylog(log_debug,"[%s,%d]rst==1,cnt=%d\n",recv_info.new_src_ip.get_str1(),recv_info.src_port,(int)raw_info.rst_received);
  1435. }
  1436. }
  1437. else if(max_rst_to_show==0)
  1438. {
  1439. mylog(log_debug,"[%s,%d]rst==1,cnt=%d\n",recv_info.new_src_ip.get_str1(),recv_info.src_port,(int)raw_info.rst_received);
  1440. }
  1441. else
  1442. {
  1443. mylog(log_warn,"[%s,%d]rst==1,cnt=%d\n",recv_info.new_src_ip.get_str1(),recv_info.src_port,(int)raw_info.rst_received);
  1444. }
  1445. if(max_rst_allowed>=0 && raw_info.rst_received==max_rst_allowed+1 )
  1446. {
  1447. mylog(log_warn,"[%s,%d]connection disabled because of rst_received=%d > max_rst_allow=%d\n",recv_info.new_src_ip.get_str1(),recv_info.src_port,(int)raw_info.rst_received,(int)max_rst_allowed );
  1448. raw_info.disabled=1;
  1449. }
  1450. }
  1451. /* if(recv_info.has_ts)
  1452. {
  1453. send_info.ts_ack=recv_info.ts; //////////////////////////////////////////////modify
  1454. }*/
  1455. payloadlen = ip_payloadlen-tcphdrlen;
  1456. payload=tcp_begin+tcphdrlen;
  1457. /*if (recv_info.syn == 0 && recv_info.ack == 1&& payloadlen != 0) //only modify send_info when the packet is not part of handshake
  1458. {
  1459. send_info.ack_seq=recv_info.seq;
  1460. }*/
  1461. raw_info.recv_info.data_len=payloadlen;
  1462. return 0;
  1463. }
  1464. /*
  1465. int recv_raw_tcp_deprecated(packet_info_t &info,char * &payload,int &payloadlen)
  1466. {
  1467. static char buf[buf_len];
  1468. char raw_recv_buf[buf_len];
  1469. char raw_recv_buf2[buf_len];
  1470. char raw_recv_buf3[buf_len];
  1471. iphdr * iph;
  1472. tcphdr * tcph;
  1473. int size;
  1474. struct sockaddr saddr;
  1475. socklen_t saddr_size;
  1476. saddr_size = sizeof(saddr);
  1477. mylog(log_trace,"raw!\n");
  1478. size = recvfrom(raw_recv_fd, buf, max_data_len, 0 ,&saddr , &saddr_size);
  1479. if(buf[12]!=8||buf[13]!=0)
  1480. {
  1481. mylog(log_debug,"not an ipv4 packet!\n");
  1482. return -1;
  1483. }
  1484. char *ip_begin=buf+14;
  1485. iph = (struct iphdr *) (ip_begin);
  1486. if (!(iph->ihl > 0 && iph->ihl <=60)) {
  1487. mylog(log_debug,"iph ihl error");
  1488. return -1;
  1489. }
  1490. if (iph->protocol != IPPROTO_TCP) {
  1491. mylog(log_debug,"iph protocal != tcp\n");
  1492. return -1;
  1493. }
  1494. int ip_len=ntohs(iph->tot_len);
  1495. unsigned short iphdrlen =iph->ihl*4;
  1496. tcph=(struct tcphdr*)(ip_begin+ iphdrlen);
  1497. unsigned short tcphdrlen = tcph->doff*4;
  1498. if (!(tcph->doff > 0 && tcph->doff <=60)) {
  1499. mylog(log_debug,"tcph error");
  1500. return 0;
  1501. }
  1502. if(tcph->dest!=ntohs(uint16_t(filter_port)))
  1503. {
  1504. //printf("%x %x",tcph->dest,);
  1505. return -1;
  1506. }
  1507. /////ip
  1508. uint32_t ip_chk=csum ((unsigned short *) ip_begin, iphdrlen);
  1509. int psize = sizeof(struct pseudo_header) + ip_len-iphdrlen;
  1510. /////ip end
  1511. ///tcp
  1512. struct pseudo_header psh;
  1513. psh.source_address = iph->saddr;
  1514. psh.dest_address = iph->daddr;
  1515. psh.placeholder = 0;
  1516. psh.protocol = IPPROTO_TCP;
  1517. psh.tcp_length = htons(ip_len-iphdrlen);
  1518. memcpy(raw_recv_buf2 , (char*) &psh , sizeof (struct pseudo_header));
  1519. memcpy(raw_recv_buf2 + sizeof(struct pseudo_header) , ip_begin+ iphdrlen , ip_len-iphdrlen);
  1520. uint16_t tcp_chk = csum( (unsigned short*) raw_recv_buf2, psize);
  1521. if(ip_chk!=0)
  1522. {
  1523. mylog(log_debug,"ip header error %d\n",ip_chk);
  1524. return -1;
  1525. }
  1526. if(tcp_chk!=0)
  1527. {
  1528. mylog(log_debug,"tcp_chk:%x\n",tcp_chk);
  1529. mylog(log_debug,"tcp header error\n");
  1530. return -1;
  1531. }
  1532. char *tcp_begin=raw_recv_buf2+sizeof(struct pseudo_header); //ip packet's data part
  1533. char *tcp_option=raw_recv_buf2+sizeof(struct pseudo_header)+sizeof(tcphdr);
  1534. info.has_ts=0;
  1535. if(tcph->doff==10)
  1536. {
  1537. if(tcp_option[6]==0x08 &&tcp_option[7]==0x0a)
  1538. {
  1539. info.has_ts=1;
  1540. info.ts=ntohl(*(uint32_t*)(&tcp_option[8]));
  1541. info.ts_ack=ntohl(*(uint32_t*)(&tcp_option[12]));
  1542. //g_packet_info_send.ts_ack= ntohl(*(uint32_t*)(&tcp_option[8]));
  1543. }
  1544. }
  1545. else if(tcph->doff==8)
  1546. {
  1547. if(tcp_option[3]==0x08 &&tcp_option[4]==0x0a)
  1548. {
  1549. info.has_ts=1;
  1550. info.ts=ntohl(*(uint32_t*)(&tcp_option[0]));
  1551. info.ts_ack=ntohl(*(uint32_t*)(&tcp_option[4]));
  1552. //g_packet_info_send.ts_ack= ntohl(*(uint32_t*)(&tcp_option[0]));
  1553. }
  1554. }
  1555. if(tcph->rst==1)
  1556. {
  1557. mylog(log_warn,"%%%%%%%%%%rst==1%%%%%%%%%%%%%\n");
  1558. }
  1559. info.ack=tcph->ack;
  1560. info.syn=tcph->syn;
  1561. info.rst=tcph->rst;
  1562. info.src_port=ntohs(tcph->source);
  1563. info.src_ip=iph->saddr;
  1564. info.seq=ntohl(tcph->seq);
  1565. info.ack_seq=ntohl(tcph->ack_seq);
  1566. info.psh=tcph->psh;
  1567. if(info.has_ts)
  1568. {
  1569. g_packet_info_send.ts_ack=info.ts;
  1570. }
  1571. ////tcp end
  1572. payloadlen = ip_len-tcphdrlen-iphdrlen;
  1573. payload=ip_begin+tcphdrlen+iphdrlen;
  1574. if(payloadlen>0&&payload[0]=='h')
  1575. {
  1576. mylog(log_debug,"recvd <%u %u %d>\n",ntohl(tcph->seq ),ntohl(tcph->ack_seq), payloadlen);
  1577. }
  1578. if(payloadlen>0&&tcph->syn==0&&tcph->ack==1)
  1579. {
  1580. //if(seq_increse)
  1581. g_packet_info_send.ack_seq=ntohl(tcph->seq)+(uint32_t)payloadlen;
  1582. }
  1583. //printf("%d\n",ip_len);
  1584. mylog(log_trace,"<%u,%u,%u,%u,%d>\n",(unsigned int)iphdrlen,(unsigned int)tcphdrlen,(unsigned int)tcph->syn,(unsigned int)tcph->ack,payloadlen);
  1585. return 0;
  1586. }*/
  1587. int send_raw0(raw_info_t &raw_info,const char * payload,int payloadlen)
  1588. {
  1589. if (random_drop != 0) {
  1590. if (get_true_random_number() % 10000 < (u32_t) random_drop) {
  1591. return 0;
  1592. }
  1593. }
  1594. packet_info_t &send_info=raw_info.send_info;
  1595. packet_info_t &recv_info=raw_info.recv_info;
  1596. mylog(log_trace,"send_raw : from %s %d to %s %d\n",send_info.new_src_ip.get_str1(),send_info.src_port,send_info.new_dst_ip.get_str2(),send_info.dst_port);
  1597. switch(raw_mode)
  1598. {
  1599. case mode_faketcp:return send_raw_tcp(raw_info,payload,payloadlen);
  1600. case mode_udp: return send_raw_udp(raw_info,payload,payloadlen);
  1601. case mode_icmp: return send_raw_icmp(raw_info,payload,payloadlen);
  1602. default:return -1;
  1603. }
  1604. }
  1605. int recv_raw0(raw_info_t &raw_info,char * &payload,int &payloadlen)
  1606. {
  1607. packet_info_t &send_info=raw_info.send_info;
  1608. packet_info_t &recv_info=raw_info.recv_info;
  1609. switch(raw_mode)
  1610. {
  1611. case mode_faketcp:return recv_raw_tcp(raw_info,payload,payloadlen);
  1612. case mode_udp: return recv_raw_udp(raw_info,payload,payloadlen);
  1613. case mode_icmp: return recv_raw_icmp(raw_info,payload,payloadlen);
  1614. default: return -1;
  1615. }
  1616. }
  1617. int after_send_raw0(raw_info_t &raw_info)
  1618. {
  1619. packet_info_t &send_info=raw_info.send_info;
  1620. packet_info_t &recv_info=raw_info.recv_info;
  1621. if(raw_mode==mode_faketcp)
  1622. {
  1623. if (send_info.syn == 0 && send_info.ack == 1&& raw_info.send_info.data_len != 0) //only modify send_info when the packet is not part of handshake
  1624. {
  1625. if (seq_mode == 0)
  1626. {
  1627. } else if (seq_mode == 1)
  1628. {
  1629. send_info.seq += raw_info.send_info.data_len; //////////////////modify
  1630. } else if (seq_mode == 2)
  1631. {
  1632. if (random() % 5 == 3)
  1633. send_info.seq += raw_info.send_info.data_len; //////////////////modify
  1634. }
  1635. else if(seq_mode==3||seq_mode==4)
  1636. {
  1637. send_info.seq += raw_info.send_info.data_len;
  1638. u32_t window_size;
  1639. if(seq_mode==3)
  1640. {
  1641. window_size=(u32_t)((u32_t)receive_window_lower_bound<<(u32_t)wscale);
  1642. }
  1643. else//seq_mode==4
  1644. {
  1645. window_size=(u32_t)((u32_t)receive_window_lower_bound);
  1646. }
  1647. if(larger_than_u32(send_info.seq+max_data_len,recv_info.ack_seq+window_size))
  1648. {
  1649. send_info.seq=raw_info.recv_info.ack_seq;
  1650. }
  1651. if(recv_info.ack_seq_counter>=3) //simulate tcp fast re-transmit
  1652. {
  1653. recv_info.ack_seq_counter=0;
  1654. send_info.seq=raw_info.recv_info.ack_seq;
  1655. }
  1656. if(larger_than_u32(raw_info.recv_info.ack_seq,send_info.seq)) //for further use,currently no effect.
  1657. {
  1658. send_info.seq=raw_info.recv_info.ack_seq;
  1659. }
  1660. }
  1661. }
  1662. }
  1663. if(raw_mode==mode_icmp)
  1664. {
  1665. if(program_mode==client_mode)
  1666. {
  1667. send_info.icmp_seq++;
  1668. }
  1669. }
  1670. return 0;
  1671. }
  1672. int after_recv_raw0(raw_info_t &raw_info)
  1673. {
  1674. packet_info_t &send_info=raw_info.send_info;
  1675. packet_info_t &recv_info=raw_info.recv_info;
  1676. if(raw_mode==mode_faketcp)
  1677. {
  1678. if(recv_info.has_ts)
  1679. send_info.ts_ack=recv_info.ts;
  1680. if (recv_info.syn == 0 && recv_info.ack == 1 && raw_info.recv_info.data_len != 0) //only modify send_info when the packet is not part of handshake
  1681. {
  1682. if(seq_mode==0||seq_mode==1||seq_mode==2)
  1683. {
  1684. if(larger_than_u32(recv_info.seq+raw_info.recv_info.data_len,send_info.ack_seq))
  1685. send_info.ack_seq = recv_info.seq+raw_info.recv_info.data_len;//TODO only update if its larger
  1686. }
  1687. else if(seq_mode==3||seq_mode==4)
  1688. {
  1689. if(recv_info.seq==send_info.ack_seq)
  1690. {
  1691. send_info.ack_seq=recv_info.seq+raw_info.recv_info.data_len;//currently we dont remembr tcp segments,this is the simplest way
  1692. //TODO implement tcp segment remembering and SACK.
  1693. }
  1694. }
  1695. }
  1696. }
  1697. if(raw_mode==mode_icmp)
  1698. {
  1699. if(program_mode==server_mode)
  1700. {
  1701. if(larger_than_u16(recv_info.icmp_seq,send_info.icmp_seq))
  1702. send_info.icmp_seq = recv_info.icmp_seq; //TODO only update if its larger
  1703. }
  1704. }
  1705. return 0;
  1706. }
  1707. /*
  1708. int send_raw(raw_info_t &raw_info,const char * payload,int payloadlen)
  1709. {
  1710. packet_info_t &send_info=raw_info.send_info;
  1711. packet_info_t &recv_info=raw_info.recv_info;
  1712. int ret=send_raw0(raw_info,payload,payloadlen);
  1713. if(ret<0) return ret;
  1714. else
  1715. {
  1716. after_send_raw0(raw_info);
  1717. return ret;
  1718. }
  1719. }
  1720. int recv_raw(raw_info_t &raw_info,char *& payload,int & payloadlen)
  1721. {
  1722. packet_info_t &send_info=raw_info.send_info;
  1723. packet_info_t &recv_info=raw_info.recv_info;
  1724. int ret=recv_raw0(raw_info,payload,payloadlen);
  1725. if(ret<0) return ret;
  1726. else
  1727. {
  1728. after_recv_raw0(raw_info);
  1729. return ret;
  1730. }
  1731. }*/
  1732. /*
  1733. int get_src_adress(u32_t &ip,u32_t remote_ip_uint32,int remote_port) //a trick to get src adress for a dest adress,so that we can use the src address in raw socket as source ip
  1734. {
  1735. struct sockaddr_in remote_addr_in={0};
  1736. socklen_t slen = sizeof(sockaddr_in);
  1737. //memset(&remote_addr_in, 0, sizeof(remote_addr_in));
  1738. remote_addr_in.sin_family = AF_INET;
  1739. remote_addr_in.sin_port = htons(remote_port);
  1740. remote_addr_in.sin_addr.s_addr = remote_ip_uint32;
  1741. int new_udp_fd=socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1742. if(new_udp_fd<0)
  1743. {
  1744. mylog(log_warn,"create udp_fd error\n");
  1745. return -1;
  1746. }
  1747. //set_buf_size(new_udp_fd);
  1748. mylog(log_debug,"created new udp_fd %d\n",new_udp_fd);
  1749. int ret = connect(new_udp_fd, (struct sockaddr *) &remote_addr_in, slen);
  1750. if(ret!=0)
  1751. {
  1752. mylog(log_warn,"udp fd connect fail\n");
  1753. close(new_udp_fd);
  1754. return -1;
  1755. }
  1756. struct sockaddr_in my_addr={0};
  1757. socklen_t len=sizeof(my_addr);
  1758. if(getsockname(new_udp_fd, (struct sockaddr *) &my_addr, &len)!=0){close(new_udp_fd); return -1;}
  1759. ip=my_addr.sin_addr.s_addr;
  1760. close(new_udp_fd);
  1761. return 0;
  1762. }*/
  1763. int get_src_adress2(address_t &output_addr,address_t remote_addr)
  1764. {
  1765. int new_udp_fd=remote_addr.new_connected_udp_fd();
  1766. if(new_udp_fd<0)
  1767. {
  1768. mylog(log_warn,"create udp_fd error\n");
  1769. return -1;
  1770. }
  1771. socklen_t len=sizeof(output_addr.inner);
  1772. if(getsockname(new_udp_fd, (struct sockaddr *) &output_addr.inner, &len)!=0) {close(new_udp_fd); return -1;}
  1773. assert(output_addr.get_type()==remote_addr.get_type());
  1774. close(new_udp_fd);
  1775. return 0;
  1776. }
  1777. /*
  1778. int try_to_list_and_bind(int &fd,u32_t local_ip_uint32,int port) //try to bind to a port,may fail.
  1779. {
  1780. int old_bind_fd=fd;
  1781. if(raw_mode==mode_faketcp)
  1782. {
  1783. fd=socket(AF_INET,SOCK_STREAM,0);
  1784. }
  1785. else if(raw_mode==mode_udp||raw_mode==mode_icmp)
  1786. {
  1787. fd=socket(AF_INET,SOCK_DGRAM,0);
  1788. }
  1789. if(old_bind_fd!=-1)
  1790. {
  1791. close(old_bind_fd);
  1792. }
  1793. struct sockaddr_in temp_bind_addr={0};
  1794. //bzero(&temp_bind_addr, sizeof(temp_bind_addr));
  1795. temp_bind_addr.sin_family = AF_INET;
  1796. temp_bind_addr.sin_port = htons(port);
  1797. temp_bind_addr.sin_addr.s_addr = local_ip_uint32;
  1798. if (bind(fd, (struct sockaddr*)&temp_bind_addr, sizeof(temp_bind_addr)) !=0)
  1799. {
  1800. mylog(log_debug,"bind fail\n");
  1801. return -1;
  1802. }
  1803. if(raw_mode==mode_faketcp)
  1804. {
  1805. if (listen(fd, SOMAXCONN) != 0) {
  1806. mylog(log_warn,"listen fail\n");
  1807. return -1;
  1808. }
  1809. }
  1810. return 0;
  1811. }*/
  1812. int try_to_list_and_bind2(int &fd,address_t address) //try to bind to a port,may fail.
  1813. {
  1814. int old_bind_fd=fd;
  1815. if(raw_mode==mode_faketcp)
  1816. {
  1817. fd=socket(address.get_type(),SOCK_STREAM,0);
  1818. }
  1819. else if(raw_mode==mode_udp||raw_mode==mode_icmp)
  1820. {
  1821. fd=socket(address.get_type(),SOCK_DGRAM,0);
  1822. }
  1823. if(old_bind_fd!=-1)
  1824. {
  1825. close(old_bind_fd);
  1826. }
  1827. /*struct sockaddr_in temp_bind_addr={0};
  1828. //bzero(&temp_bind_addr, sizeof(temp_bind_addr));
  1829. temp_bind_addr.sin_family = AF_INET;
  1830. temp_bind_addr.sin_port = htons(port);
  1831. temp_bind_addr.sin_addr.s_addr = local_ip_uint32;*/
  1832. if (bind(fd, (struct sockaddr*)&address.inner, address.get_len()) !=0)
  1833. {
  1834. mylog(log_debug,"bind fail\n");
  1835. return -1;
  1836. }
  1837. if(raw_mode==mode_faketcp)
  1838. {
  1839. if (listen(fd, SOMAXCONN) != 0) {
  1840. mylog(log_warn,"listen fail\n");
  1841. return -1;
  1842. }
  1843. }
  1844. return 0;
  1845. }
  1846. /*
  1847. int client_bind_to_a_new_port(int &fd,u32_t local_ip_uint32)//find a free port and bind to it.
  1848. {
  1849. int raw_send_port=10000+get_true_random_number()%(65535-10000);
  1850. for(int i=0;i<1000;i++)//try 1000 times at max,this should be enough
  1851. {
  1852. if (try_to_list_and_bind(fd,local_ip_uint32,raw_send_port)==0)
  1853. {
  1854. return raw_send_port;
  1855. }
  1856. }
  1857. mylog(log_fatal,"bind port fail\n");
  1858. myexit(-1);
  1859. return -1;////for compiler check
  1860. }*/
  1861. int client_bind_to_a_new_port2(int &fd,const address_t& address)//find a free port and bind to it.
  1862. {
  1863. address_t tmp=address;
  1864. int raw_send_port=10000+get_true_random_number()%(65535-10000);
  1865. for(int i=0;i<1000;i++)//try 1000 times at max,this should be enough
  1866. {
  1867. tmp.set_port(raw_send_port);
  1868. if (try_to_list_and_bind2(fd,address)==0)
  1869. {
  1870. return raw_send_port;
  1871. }
  1872. }
  1873. mylog(log_fatal,"bind port fail\n");
  1874. myexit(-1);
  1875. return -1;////for compiler check
  1876. }