network.cpp 54 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217
  1. /*
  2. * network.cpp
  3. *
  4. * Created on: Jul 29, 2017
  5. * Author: wangyu
  6. */
  7. #include "common.h"
  8. #include "network.h"
  9. #include "log.h"
  10. #include "misc.h"
  11. int raw_recv_fd=-1;
  12. int raw_send_fd=-1;
  13. u32_t link_level_header_len=0;//set it to 14 if SOCK_RAW is used in socket(PF_PACKET, SOCK_RAW, htons(ETH_P_IP));
  14. int seq_mode=3;
  15. int max_seq_mode=4;
  16. int random_drop=0;
  17. int filter_port=-1;
  18. int disable_bpf_filter=0; //for test only,most time no need to disable this
  19. u32_t bind_address_uint32=0;
  20. //int lower_level=0;
  21. int lower_level_manual=0;
  22. int ifindex=-1;
  23. char if_name[100]="";
  24. char dev[100]="";
  25. unsigned short g_ip_id_counter=0;
  26. //unsigned char dest_hw_addr[sizeof(sockaddr_ll::sll_addr)]=
  27. // {0xff,0xff,0xff,0xff,0xff,0xff,0,0};
  28. //{0x00,0x23,0x45,0x67,0x89,0xb9};
  29. const u32_t receive_window_lower_bound=40960;
  30. const u32_t receive_window_random_range=512;
  31. const unsigned char wscale=0x05;
  32. #ifndef NO_LIBNET
  33. libnet_t *libnet_handle;
  34. libnet_ptag_t g_ptag=0;
  35. int send_with_pcap=0;
  36. #else
  37. int send_with_pcap=1;
  38. #endif
  39. int pcap_header_captured=0;
  40. int pcap_header_buf[buf_len];
  41. pcap_t *pcap_handle;
  42. int pcap_link_header_len=-1;
  43. //int pcap_cnt=0;
  44. queue_t my_queue;
  45. pthread_mutex_t queue_mutex = PTHREAD_MUTEX_INITIALIZER;
  46. pthread_mutex_t filter_mutex = PTHREAD_MUTEX_INITIALIZER;
  47. ev_async async_watcher;
  48. ev_loop* g_default_loop;
  49. pthread_t pcap_recv_thread;
  50. char g_packet_buf[buf_len]; //dirty code, fix it later
  51. int g_packet_buf_len=1;
  52. int g_packet_buf_cnt=0;
  53. struct bpf_program g_filter;
  54. int use_tcp_dummy_socket=0;
  55. /*
  56. struct sock_filter code_tcp_old[] = {
  57. { 0x28, 0, 0, 0x0000000c },//0
  58. { 0x15, 0, 10, 0x00000800 },//1
  59. { 0x30, 0, 0, 0x00000017 },//2
  60. { 0x15, 0, 8, 0x00000006 },//3
  61. { 0x28, 0, 0, 0x00000014 },//4
  62. { 0x45, 6, 0, 0x00001fff },//5
  63. { 0xb1, 0, 0, 0x0000000e },//6
  64. { 0x48, 0, 0, 0x0000000e },//7
  65. { 0x15, 2, 0, 0x0000ef32 },//8
  66. { 0x48, 0, 0, 0x00000010 },//9
  67. { 0x15, 0, 1, 0x0000ef32 },//10
  68. { 0x6, 0, 0, 0x0000ffff },//11
  69. { 0x6, 0, 0, 0x00000000 },//12
  70. };
  71. struct sock_filter code_tcp[] = {
  72. //{ 0x5, 0, 0, 0x00000001 },//0 //jump to 2,dirty hack from tcpdump -d's output
  73. //{ 0x5, 0, 0, 0x00000000 },//1
  74. { 0x30, 0, 0, 0x00000009 },//2
  75. { 0x15, 0, 6, 0x00000006 },//3
  76. { 0x28, 0, 0, 0x00000006 },//4
  77. { 0x45, 4, 0, 0x00001fff },//5
  78. { 0xb1, 0, 0, 0x00000000 },//6
  79. { 0x48, 0, 0, 0x00000002 },//7
  80. { 0x15, 0, 1, 0x0000fffe },//8 //modify this fffe to the port you listen on
  81. { 0x6, 0, 0, 0x0000ffff },//9
  82. { 0x6, 0, 0, 0x00000000 },//10
  83. };
  84. int code_tcp_port_index=6;
  85. struct sock_filter code_udp[] = {
  86. //{ 0x5, 0, 0, 0x00000001 },
  87. //{ 0x5, 0, 0, 0x00000000 },
  88. { 0x30, 0, 0, 0x00000009 },
  89. { 0x15, 0, 6, 0x00000011 },
  90. { 0x28, 0, 0, 0x00000006 },
  91. { 0x45, 4, 0, 0x00001fff },
  92. { 0xb1, 0, 0, 0x00000000 },
  93. { 0x48, 0, 0, 0x00000002 },
  94. { 0x15, 0, 1, 0x0000fffe }, //modify this fffe to the port you listen on
  95. { 0x6, 0, 0, 0x0000ffff },
  96. { 0x6, 0, 0, 0x00000000 },
  97. };
  98. int code_udp_port_index=6;
  99. struct sock_filter code_icmp[] = {
  100. //{ 0x5, 0, 0, 0x00000001 },
  101. //{ 0x5, 0, 0, 0x00000000 },
  102. { 0x30, 0, 0, 0x00000009 },
  103. { 0x15, 0, 1, 0x00000001 },
  104. { 0x6, 0, 0, 0x0000ffff },
  105. { 0x6, 0, 0, 0x00000000 },
  106. };*/
  107. /*
  108. tcpdump -i eth1 ip and icmp -d
  109. (000) ldh [12]
  110. (001) jeq #0x800 jt 2 jf 5
  111. (002) ldb [23]
  112. (003) jeq #0x1 jt 4 jf 5
  113. (004) ret #65535
  114. (005) ret #0
  115. tcpdump -i eth1 ip and icmp -dd
  116. { 0x28, 0, 0, 0x0000000c },
  117. { 0x15, 0, 3, 0x00000800 },
  118. { 0x30, 0, 0, 0x00000017 },
  119. { 0x15, 0, 1, 0x00000001 },
  120. { 0x6, 0, 0, 0x0000ffff },
  121. { 0x6, 0, 0, 0x00000000 },
  122. */
  123. /*
  124. tcpdump -i eth1 ip and tcp and dst port 65534 -dd
  125. { 0x28, 0, 0, 0x0000000c },
  126. { 0x15, 0, 8, 0x00000800 },
  127. { 0x30, 0, 0, 0x00000017 },
  128. { 0x15, 0, 6, 0x00000006 },
  129. { 0x28, 0, 0, 0x00000014 },
  130. { 0x45, 4, 0, 0x00001fff },
  131. { 0xb1, 0, 0, 0x0000000e },
  132. { 0x48, 0, 0, 0x00000010 },
  133. { 0x15, 0, 1, 0x0000fffe },
  134. { 0x6, 0, 0, 0x0000ffff },
  135. { 0x6, 0, 0, 0x00000000 },
  136. (000) ldh [12]
  137. (001) jeq #0x800 jt 2 jf 10
  138. (002) ldb [23]
  139. (003) jeq #0x6 jt 4 jf 10
  140. (004) ldh [20]
  141. (005) jset #0x1fff jt 10 jf 6
  142. (006) ldxb 4*([14]&0xf)
  143. (007) ldh [x + 16]
  144. (008) jeq #0xfffe jt 9 jf 10
  145. (009) ret #65535
  146. (010) ret #0
  147. */
  148. packet_info_t::packet_info_t()
  149. {
  150. src_port=0;
  151. dst_port=0;
  152. if (raw_mode == mode_faketcp)
  153. {
  154. protocol = IPPROTO_TCP;
  155. ack_seq = get_true_random_number();
  156. seq = get_true_random_number();
  157. has_ts=0;
  158. ts_ack=0;
  159. syn=0;
  160. ack=1;
  161. ack_seq_counter=0;
  162. //mylog(log_info,"<cons ,ts_ack= %u>\n",ts_ack);
  163. }
  164. else if (raw_mode == mode_udp)
  165. {
  166. protocol = IPPROTO_UDP;
  167. }
  168. else if (raw_mode == mode_icmp)
  169. {
  170. protocol = IPPROTO_ICMP;
  171. my_icmp_seq=0;
  172. }
  173. }
  174. void my_packet_handler(
  175. u_char *args,
  176. const struct pcap_pkthdr *packet_header,
  177. const u_char *pkt_data
  178. )
  179. {
  180. /*printf("<%d %d>\n",(int)packet_header->caplen,(int)packet_header->len );
  181. for(int i=0;i<sizeof(pcap_pkthdr);i++)
  182. {
  183. char *p=(char *) packet_header;
  184. printf("<%x>",int( p[i] ));
  185. }
  186. printf("\n");*/
  187. assert(packet_header->caplen <= packet_header->len);
  188. assert(packet_header->caplen <= max_data_len);
  189. //if(packet_header->caplen > max_data_len) return ;
  190. if(packet_header->caplen<packet_header->len) return;
  191. if((int)packet_header->caplen<pcap_link_header_len) return;
  192. pthread_mutex_lock(&queue_mutex);
  193. if(!my_queue.full())
  194. my_queue.push_back((char *)pkt_data,(int)(packet_header->caplen));
  195. pthread_mutex_unlock(&queue_mutex);
  196. //pcap_cnt++;
  197. ev_async_send (g_default_loop,&async_watcher);
  198. return;
  199. }
  200. void *pcap_recv_thread_entry(void *none)
  201. {
  202. struct pcap_pkthdr *packet_header;
  203. const u_char *pkt_data;
  204. int ret=pcap_loop(pcap_handle, 0, my_packet_handler, NULL);
  205. mylog(log_fatal,"pcap_loop returned with value %d\n",ret);
  206. myexit(-1);
  207. /*
  208. while(1)
  209. {
  210. //printf("!!!\n");
  211. //pthread_mutex_lock(&filter_mutex);
  212. int ret=pcap_next_ex(pcap_handle,&packet_header,&pkt_data);
  213. //pthread_mutex_unlock(&filter_mutex);
  214. switch (ret)
  215. {
  216. case 0:
  217. continue;
  218. case 1:
  219. break;
  220. case -1:
  221. mylog(log_fatal,"pcap_next_ex error [%s]\n",pcap_geterr(pcap_handle));
  222. myexit(-1);
  223. break;
  224. case -2:
  225. assert(0==1);
  226. break;
  227. default:
  228. assert(0==1);
  229. }
  230. }
  231. myexit(-1);*/
  232. return 0;
  233. }
  234. extern void async_cb(struct ev_loop *loop, struct ev_async *watcher, int revents);
  235. int init_raw_socket()
  236. {
  237. #ifndef NO_LIBNET
  238. char libnet_errbuf[LIBNET_ERRBUF_SIZE];
  239. libnet_handle = libnet_init(LIBNET_RAW4, dev, libnet_errbuf);
  240. if(libnet_handle==0)
  241. {
  242. mylog(log_fatal,"libnet_init failed bc of [%s]\n",libnet_errbuf);
  243. myexit(-1);
  244. }
  245. g_ptag=0;
  246. libnet_clear_packet(libnet_handle);
  247. #endif
  248. char pcap_errbuf[PCAP_ERRBUF_SIZE];
  249. //pcap_handle=pcap_open_live(dev,max_data_len,0,1000,pcap_errbuf);
  250. pcap_handle = pcap_create( dev, pcap_errbuf );
  251. if(pcap_handle==0)
  252. {
  253. mylog(log_fatal,"pcap_create failed bc of [%s]\n",pcap_errbuf);
  254. myexit(-1);
  255. }
  256. assert( pcap_set_snaplen(pcap_handle, max_data_len) ==0);
  257. assert( pcap_set_promisc(pcap_handle, 0) ==0);
  258. assert( pcap_set_timeout(pcap_handle, 1) ==0);
  259. assert( pcap_set_immediate_mode(pcap_handle,1) ==0);
  260. if(send_with_pcap)
  261. {
  262. pcap_setdirection(pcap_handle,PCAP_D_INOUT);
  263. }
  264. int ret = pcap_activate( pcap_handle );
  265. if( ret < 0 )
  266. {
  267. printf("pcap_activate failed %s\n", pcap_geterr(pcap_handle));
  268. assert(0==1);
  269. }
  270. ret=pcap_datalink(pcap_handle);
  271. if(ret==DLT_EN10MB)
  272. {
  273. pcap_link_header_len=14;
  274. }
  275. else if(ret==DLT_NULL)
  276. {
  277. pcap_link_header_len=4;
  278. }
  279. else
  280. {
  281. mylog(log_fatal,"unknown pcap link type : %d\n",ret);
  282. myexit(-1);
  283. }
  284. char filter_exp[1000];
  285. assert(source_ip_uint32!=0);
  286. sprintf(filter_exp,"src %s and dst %s and (tcp or udp or icmp)",my_ntoa(source_ip_uint32),remote_ip);
  287. if (pcap_compile(pcap_handle, &g_filter, filter_exp, 0, PCAP_NETMASK_UNKNOWN ) == -1) {
  288. printf("Bad filter - %s\n", pcap_geterr(pcap_handle));
  289. assert(0==1);
  290. }
  291. if (pcap_setfilter(pcap_handle, &g_filter) == -1) {
  292. printf("Error setting filter - %s\n", pcap_geterr(pcap_handle));
  293. assert(0==1);
  294. }
  295. if(pthread_create(&pcap_recv_thread, NULL, pcap_recv_thread_entry, 0)) {
  296. mylog(log_fatal, "Error creating thread\n");
  297. myexit(-1);
  298. }
  299. g_ip_id_counter=get_true_random_number()%65535;
  300. /*
  301. if(lower_level==0)
  302. {
  303. raw_send_fd = socket(AF_INET , SOCK_RAW , IPPROTO_TCP);
  304. if(raw_send_fd == -1) {
  305. mylog(log_fatal,"Failed to create raw_send_fd\n");
  306. //perror("Failed to create raw_send_fd");
  307. myexit(1);
  308. }
  309. int one = 1;
  310. const int *val = &one;
  311. if (setsockopt (raw_send_fd, IPPROTO_IP, IP_HDRINCL, val, sizeof (one)) < 0) {
  312. mylog(log_fatal,"Error setting IP_HDRINCL %d\n",errno);
  313. //perror("Error setting IP_HDRINCL");
  314. myexit(2);
  315. }
  316. }
  317. else
  318. {
  319. raw_send_fd = socket(PF_PACKET , SOCK_DGRAM , htons(ETH_P_IP));
  320. if(raw_send_fd == -1) {
  321. mylog(log_fatal,"Failed to create raw_send_fd\n");
  322. //perror("Failed to create raw_send_fd");
  323. myexit(1);
  324. }
  325. //init_ifindex(if_name);
  326. }
  327. if(force_socket_buf)
  328. {
  329. if(setsockopt(raw_send_fd, SOL_SOCKET, SO_SNDBUFFORCE, &socket_buf_size, sizeof(socket_buf_size))<0)
  330. {
  331. mylog(log_fatal,"SO_SNDBUFFORCE fail socket_buf_size=%d errno=%s\n",socket_buf_size,strerror(errno));
  332. myexit(1);
  333. }
  334. }
  335. else
  336. {
  337. if(setsockopt(raw_send_fd, SOL_SOCKET, SO_SNDBUF, &socket_buf_size, sizeof(socket_buf_size))<0)
  338. {
  339. mylog(log_fatal,"SO_SNDBUF fail socket_buf_size=%d errno=%s\n",socket_buf_size,strerror(errno));
  340. myexit(1);
  341. }
  342. }
  343. //raw_fd = socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL));
  344. raw_recv_fd= socket(PF_PACKET, SOCK_DGRAM, htons(ETH_P_IP));
  345. if(raw_recv_fd == -1) {
  346. mylog(log_fatal,"Failed to create raw_recv_fd\n");
  347. //perror("");
  348. myexit(1);
  349. }
  350. if(force_socket_buf)
  351. {
  352. if(setsockopt(raw_recv_fd, SOL_SOCKET, SO_RCVBUFFORCE, &socket_buf_size, sizeof(socket_buf_size))<0)
  353. {
  354. mylog(log_fatal,"SO_RCVBUFFORCE fail socket_buf_size=%d errno=%s\n",socket_buf_size,strerror(errno));
  355. myexit(1);
  356. }
  357. }
  358. else
  359. {
  360. if(setsockopt(raw_recv_fd, SOL_SOCKET, SO_RCVBUF, &socket_buf_size, sizeof(socket_buf_size))<0)
  361. {
  362. mylog(log_fatal,"SO_RCVBUF fail socket_buf_size=%d errno=%s\n",socket_buf_size,strerror(errno));
  363. myexit(1);
  364. }
  365. }
  366. //IP_HDRINCL to tell the kernel that headers are included in the packet
  367. setnonblocking(raw_send_fd); //not really necessary
  368. setnonblocking(raw_recv_fd);*/
  369. return 0;
  370. }
  371. void init_filter(int port)
  372. {
  373. /*
  374. sock_fprog bpf;*/
  375. if(raw_mode==mode_faketcp||raw_mode==mode_udp)
  376. {
  377. filter_port=port;
  378. }
  379. char filter_exp[1000];
  380. if(raw_mode==mode_faketcp)
  381. {
  382. sprintf(filter_exp,"tcp and src %s and src port %d and dst port %d",remote_ip,remote_port,port);
  383. }
  384. else if(raw_mode==mode_udp)
  385. {
  386. sprintf(filter_exp,"udp and src %s and src port %d abd dst port %d",remote_ip,remote_port,port);
  387. }
  388. else if(raw_mode==mode_icmp)
  389. {
  390. sprintf(filter_exp,"icmp and src %s",remote_ip);
  391. }
  392. else
  393. {
  394. assert(0==1);
  395. }
  396. mylog(log_info,"filter expression is [%s]\n",filter_exp);
  397. //pthread_mutex_lock(&filter_mutex);//not sure if mutex is needed here
  398. pcap_freecode(&g_filter);
  399. if (pcap_compile(pcap_handle, &g_filter, filter_exp, 0, PCAP_NETMASK_UNKNOWN ) == -1) {
  400. mylog(log_fatal,"Bad filter - %s\n", pcap_geterr(pcap_handle));
  401. assert(0==1);
  402. }
  403. if (pcap_setfilter(pcap_handle, &g_filter) == -1)
  404. {
  405. mylog(log_fatal,"Error setting filter - %s\n", pcap_geterr(pcap_handle));
  406. assert(0==1);
  407. }
  408. //pthread_mutex_unlock(&filter_mutex);
  409. /*
  410. if(disable_bpf_filter) return;
  411. //if(raw_mode==mode_icmp) return ;
  412. //code_tcp[8].k=code_tcp[10].k=port;
  413. if(raw_mode==mode_faketcp)
  414. {
  415. bpf.len = sizeof(code_tcp)/sizeof(code_tcp[0]);
  416. code_tcp[code_tcp_port_index].k=port;
  417. bpf.filter = code_tcp;
  418. }
  419. else if(raw_mode==mode_udp)
  420. {
  421. bpf.len = sizeof(code_udp)/sizeof(code_udp[0]);
  422. code_udp[code_udp_port_index].k=port;
  423. bpf.filter = code_udp;
  424. }
  425. else if(raw_mode==mode_icmp)
  426. {
  427. bpf.len = sizeof(code_icmp)/sizeof(code_icmp[0]);
  428. bpf.filter = code_icmp;
  429. }
  430. int dummy;
  431. int ret=setsockopt(raw_recv_fd, SOL_SOCKET, SO_DETACH_FILTER, &dummy, sizeof(dummy)); //in case i forgot to remove
  432. if (ret != 0)
  433. {
  434. mylog(log_debug,"error remove fiter\n");
  435. //perror("filter");
  436. //exit(-1);
  437. }
  438. ret = setsockopt(raw_recv_fd, SOL_SOCKET, SO_ATTACH_FILTER, &bpf, sizeof(bpf));
  439. if (ret != 0)
  440. {
  441. mylog(log_fatal,"error set fiter\n");
  442. //perror("filter");
  443. myexit(-1);
  444. }*/
  445. }
  446. void remove_filter()
  447. {
  448. filter_port=0;
  449. /*
  450. int dummy;
  451. int ret=setsockopt(raw_recv_fd, SOL_SOCKET, SO_DETACH_FILTER, &dummy, sizeof(dummy));
  452. if (ret != 0)
  453. {
  454. mylog(log_debug,"error remove fiter\n");
  455. //perror("filter");
  456. //exit(-1);
  457. }
  458. */
  459. }
  460. int init_ifindex(const char * if_name,int &index)
  461. {
  462. /*
  463. struct ifreq ifr;
  464. size_t if_name_len=strlen(if_name);
  465. if (if_name_len<sizeof(ifr.ifr_name)) {
  466. memcpy(ifr.ifr_name,if_name,if_name_len);
  467. ifr.ifr_name[if_name_len]=0;
  468. } else {
  469. mylog(log_fatal,"interface name is too long\n");
  470. myexit(-1);
  471. }
  472. if (ioctl(raw_send_fd,SIOCGIFINDEX,&ifr)==-1) {
  473. mylog(log_fatal,"SIOCGIFINDEX fail ,%s\n",strerror(errno));
  474. myexit(-1);
  475. }
  476. index=ifr.ifr_ifindex;
  477. mylog(log_info,"ifname:%s ifindex:%d\n",if_name,index);
  478. */
  479. return 0;
  480. }
  481. bool interface_has_arp(const char * interface) {
  482. struct ifreq ifr;
  483. // int sock = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
  484. int sock=raw_send_fd;
  485. memset(&ifr, 0, sizeof(ifr));
  486. strcpy(ifr.ifr_name, interface);
  487. if (ioctl(sock, SIOCGIFFLAGS, &ifr) < 0) {
  488. //perror("SIOCGIFFLAGS");
  489. mylog(log_fatal,"ioctl(sock, SIOCGIFFLAGS, &ifr) failed for interface %s,errno %s\n",interface,strerror(errno));
  490. myexit(-1);
  491. }
  492. //close(sock);
  493. return !(ifr.ifr_flags & IFF_NOARP);
  494. }
  495. struct route_info_t
  496. {
  497. string if_name;
  498. u32_t dest;
  499. u32_t mask;
  500. u32_t gw;
  501. u32_t flag;
  502. };
  503. int dest_idx=1;
  504. int gw_idx=2;
  505. int if_idx=0;
  506. int mask_idx=7;
  507. int flag_idx=3;
  508. vector<int> find_route_entry(const vector<route_info_t> &route_info_vec,u32_t ip)
  509. {
  510. vector<int> res;
  511. for(u32_t i=0;i<=32;i++)
  512. {
  513. u32_t mask=0xffffffff;
  514. //mask >>=i;
  515. //if(i==32) mask=0; //why 0xffffffff>>32 equals 0xffffffff??
  516. mask <<=i;
  517. if(i==32) mask=0;
  518. log_bare(log_debug,"(mask:%x)",mask);
  519. for(u32_t j=0;j<route_info_vec.size();j++)
  520. {
  521. const route_info_t & info=route_info_vec[j];
  522. if(info.mask!=mask)
  523. continue;
  524. log_bare(log_debug,"<<%d,%d>>",i,j);
  525. if((info.dest&mask)==(ip&mask))
  526. {
  527. log_bare(log_debug,"found!");
  528. res.push_back(j);
  529. }
  530. }
  531. if(res.size()!=0)
  532. {
  533. return res;
  534. }
  535. }
  536. return res;
  537. }
  538. /*
  539. int find_direct_dest(const vector<route_info_t> &route_info_vec,u32_t ip,u32_t &dest_ip,string &if_name)
  540. {
  541. vector<int> res;
  542. for(int i=0;i<1000;i++)
  543. {
  544. res=find_route_entry(route_info_vec,ip);
  545. log_bare(log_debug,"<entry:%u>",(u32_t)res.size());
  546. if(res.size()==0)
  547. {
  548. mylog(log_error,"cant find route entry\n");
  549. return -1;
  550. }
  551. if(res.size()>1)
  552. {
  553. mylog(log_error,"found duplicated entries\n");
  554. return -1;
  555. }
  556. if((route_info_vec[res[0]].flag&2)==0)
  557. {
  558. dest_ip=ip;
  559. if_name=route_info_vec[res[0]].if_name;
  560. return 0;
  561. }
  562. else
  563. {
  564. ip=route_info_vec[res[0]].gw;
  565. }
  566. }
  567. mylog(log_error,"dead loop in find_direct_dest\n");
  568. return -1;
  569. }*/
  570. struct arp_info_t
  571. {
  572. u32_t ip;
  573. string hw;
  574. string if_name;
  575. };
  576. int arp_ip_idx=0;
  577. int arp_hw_idx=3;
  578. int arp_if_idx=5;
  579. int find_arp(const vector<arp_info_t> &arp_info_vec,u32_t ip,string if_name,string &hw)
  580. {
  581. int pos=-1;
  582. int count=0;
  583. for(u32_t i=0;i<arp_info_vec.size();i++)
  584. {
  585. const arp_info_t & info=arp_info_vec[i];
  586. if(info.if_name!=if_name) continue;
  587. if(info.ip==ip)
  588. {
  589. count++;
  590. pos=i;
  591. }
  592. }
  593. if(count==0)
  594. {
  595. //mylog(log_warn,"cant find arp entry for %s %s,using 00:00:00:00:00:00\n",my_ntoa(ip),if_name.c_str());
  596. //hw="00:00:00:00:00:00";
  597. mylog(log_error,"cant find arp entry for %s %s\n",my_ntoa(ip),if_name.c_str());
  598. return -1;
  599. }
  600. if(count>1)
  601. {
  602. mylog(log_error,"find multiple arp entry for %s %s\n",my_ntoa(ip),if_name.c_str());
  603. return -1;
  604. }
  605. hw=arp_info_vec[pos].hw;
  606. return 0;
  607. }
  608. /*
  609. int find_lower_level_info(u32_t ip,u32_t &dest_ip,string &if_name,string &hw)
  610. {
  611. ip=htonl(ip);
  612. if(ip==htonl(inet_addr("127.0.0.1")))
  613. {
  614. dest_ip=ntohl(ip);
  615. if_name="lo";
  616. hw="00:00:00:00:00:00";
  617. return 0;
  618. }
  619. string route_file;
  620. if(read_file("/proc/net/route",route_file)!=0) return -1;
  621. string arp_file;
  622. if(read_file("/proc/net/arp",arp_file)!=0) return -1;
  623. log_bare(log_debug,"/proc/net/route:<<%s>>\n",route_file.c_str());
  624. log_bare(log_debug,"/proc/net/arp:<<%s>>\n",route_file.c_str());
  625. auto route_vec2=string_to_vec2(route_file.c_str());
  626. vector<route_info_t> route_info_vec;
  627. for(u32_t i=1;i<route_vec2.size();i++)
  628. {
  629. log_bare(log_debug,"<size:%u>",(u32_t)route_vec2[i].size());
  630. if(route_vec2[i].size()!=11)
  631. {
  632. mylog(log_error,"route coloum %d !=11 \n",int(route_vec2[i].size()));
  633. return -1;
  634. }
  635. route_info_t tmp;
  636. tmp.if_name=route_vec2[i][if_idx];
  637. if(hex_to_u32_with_endian(route_vec2[i][dest_idx],tmp.dest)!=0) return -1;
  638. if(hex_to_u32_with_endian(route_vec2[i][gw_idx],tmp.gw)!=0) return -1;
  639. if(hex_to_u32_with_endian(route_vec2[i][mask_idx],tmp.mask)!=0) return -1;
  640. if(hex_to_u32(route_vec2[i][flag_idx],tmp.flag)!=0)return -1;
  641. route_info_vec.push_back(tmp);
  642. for(u32_t j=0;j<route_vec2[i].size();j++)
  643. {
  644. log_bare(log_debug,"<%s>",route_vec2[i][j].c_str());
  645. }
  646. log_bare(log_debug,"%s dest:%x mask:%x gw:%x flag:%x",tmp.if_name.c_str(),tmp.dest,tmp.mask,tmp.gw,tmp.flag);
  647. log_bare(log_debug,"\n");
  648. }
  649. if(find_direct_dest(route_info_vec,ip,dest_ip,if_name)!=0)
  650. {
  651. mylog(log_error,"find_direct_dest failed for ip %s\n",my_ntoa(ntohl(ip)));
  652. return -1;
  653. }
  654. log_bare(log_debug,"========\n");
  655. auto arp_vec2=string_to_vec2(arp_file.c_str());
  656. vector<arp_info_t> arp_info_vec;
  657. for(u32_t i=1;i<arp_vec2.size();i++)
  658. {
  659. log_bare(log_debug,"<<arp_vec2[i].size(): %d>>",(int)arp_vec2[i].size());
  660. for(u32_t j=0;j<arp_vec2[i].size();j++)
  661. {
  662. log_bare(log_debug,"<%s>",arp_vec2[i][j].c_str());
  663. }
  664. if(arp_vec2[i].size()!=6)
  665. {
  666. mylog(log_error,"arp coloum %d !=11 \n",int(arp_vec2[i].size()));
  667. return -1;
  668. }
  669. arp_info_t tmp;
  670. tmp.if_name=arp_vec2[i][arp_if_idx];
  671. tmp.hw=arp_vec2[i][arp_hw_idx];
  672. tmp.ip=htonl(inet_addr(arp_vec2[i][arp_ip_idx].c_str()));
  673. arp_info_vec.push_back(tmp);
  674. log_bare(log_debug,"\n");
  675. }
  676. if(!interface_has_arp(if_name.c_str()))
  677. {
  678. mylog(log_info,"%s is a noarp interface,using 00:00:00:00:00:00\n",if_name.c_str());
  679. hw="00:00:00:00:00:00";
  680. }
  681. else if(find_arp(arp_info_vec,dest_ip,if_name,hw)!=0)
  682. {
  683. mylog(log_error,"find_arp failed for dest_ip %s ,if_name %s\n",my_ntoa(ntohl(ip)),if_name.c_str());
  684. return -1;
  685. }
  686. //printf("%s\n",hw.c_str());
  687. dest_ip=ntohl(dest_ip);
  688. return 0;
  689. }*/
  690. int send_raw_ip(raw_info_t &raw_info,const char * payload,int payloadlen)
  691. {
  692. const packet_info_t &send_info=raw_info.send_info;
  693. const packet_info_t &recv_info=raw_info.recv_info;
  694. char send_raw_ip_buf0[buf_len+pcap_link_header_len];
  695. char * send_raw_ip_buf=send_raw_ip_buf0+pcap_link_header_len;
  696. if(raw_info.disabled)
  697. {
  698. mylog(log_debug,"[%s,%d]connection disabled, no packet will be sent\n",my_ntoa(recv_info.src_ip),recv_info.src_port);
  699. assert(max_rst_allowed>=0);
  700. return 0;
  701. }
  702. struct my_iphdr *iph = (struct my_iphdr *) send_raw_ip_buf;
  703. memset(iph,0,sizeof(my_iphdr));
  704. iph->ihl = sizeof(my_iphdr)/4; //we dont use ip options,so the length is just sizeof(iphdr)
  705. iph->version = 4;
  706. iph->tos = 0;
  707. /* if(lower_level)
  708. {
  709. //iph->id=0;
  710. iph->id = htons (g_ip_id_counter++); //Id of this packet
  711. }
  712. else*/
  713. iph->id = htons (g_ip_id_counter); //Id of this packet
  714. g_ip_id_counter++;
  715. //iph->id = 0; //Id of this packet ,kernel will auto fill this if id is zero ,or really?????// todo //seems like there is a problem
  716. iph->frag_off = htons(0x4000); //DF set,others are zero
  717. // iph->frag_off = htons(0x0000); //DF set,others are zero
  718. iph->ttl = (unsigned char)ttl_value;
  719. iph->protocol = send_info.protocol;
  720. iph->check = 0; //Set to 0 before calculating checksum
  721. iph->saddr = send_info.src_ip; //Spoof the source ip address
  722. iph->daddr = send_info.dst_ip;
  723. uint16_t ip_tot_len=sizeof (struct my_iphdr)+payloadlen;
  724. /* if(lower_level)iph->tot_len = htons(ip_tot_len); //this is not necessary ,kernel will always auto fill this //http://man7.org/linux/man-pages/man7/raw.7.html
  725. else*/
  726. iph->tot_len = 0;
  727. memcpy(send_raw_ip_buf+sizeof(my_iphdr) , payload, payloadlen);
  728. /*if(lower_level) iph->check =
  729. csum ((unsigned short *) send_raw_ip_buf, iph->ihl*4); //this is not necessary ,kernel will always auto fill this
  730. else
  731. iph->check=0;
  732. */
  733. if(! send_with_pcap)
  734. {
  735. #ifndef NO_LIBNET
  736. g_ptag=libnet_build_ipv4(ip_tot_len, iph->tos, ntohs(iph->id), ntohs(iph->frag_off),
  737. iph->ttl , iph->protocol , iph->check , iph->saddr, iph->daddr,
  738. (const unsigned char *)payload, payloadlen, libnet_handle, g_ptag);
  739. assert(g_ptag!=-1 &&g_ptag!=0);
  740. int ret;
  741. ret= libnet_write(libnet_handle);
  742. assert(ret!=-1);
  743. /*
  744. iph->tot_len=htons(ip_tot_len);
  745. iph->check =csum ((unsigned short *) send_raw_ip_buf, iph->ihl*4);
  746. libnet_write_raw_ipv4(libnet_handle,(const unsigned char *)send_raw_ip_buf,ip_tot_len); //this api is marked as internal, so avoid using it.
  747. */
  748. #endif
  749. }
  750. else
  751. {
  752. iph->tot_len=htons(ip_tot_len);
  753. iph->check =csum ((unsigned short *) send_raw_ip_buf, iph->ihl*4);
  754. assert(pcap_header_captured==1);
  755. assert(pcap_link_header_len!=-1);
  756. memcpy(send_raw_ip_buf0,pcap_header_buf,pcap_link_header_len);
  757. assert(pcap_sendpacket(pcap_handle,(const unsigned char *)send_raw_ip_buf0,ip_tot_len+pcap_link_header_len)==0);
  758. }
  759. /*
  760. if(lower_level==0)
  761. {
  762. struct sockaddr_in sin={0};
  763. sin.sin_family = AF_INET;
  764. //sin.sin_port = htons(info.dst_port); //dont need this
  765. sin.sin_addr.s_addr = send_info.dst_ip;
  766. ret = sendto(raw_send_fd, send_raw_ip_buf, ip_tot_len , 0, (struct sockaddr *) &sin, sizeof (sin));
  767. }
  768. else
  769. {
  770. struct sockaddr_ll addr={0}; //={0} not necessary
  771. memcpy(&addr,&send_info.addr_ll,sizeof(addr));
  772. ret = sendto(raw_send_fd, send_raw_ip_buf, ip_tot_len , 0, (struct sockaddr *) &addr, sizeof (addr));
  773. }
  774. if(ret==-1)
  775. {
  776. mylog(log_trace,"sendto failed\n");
  777. //perror("why?");
  778. return -1;
  779. }
  780. else
  781. {
  782. //mylog(log_info,"sendto succ\n");
  783. }*/
  784. return 0;
  785. }
  786. int peek_raw(packet_info_t &peek_info)
  787. { static char peek_raw_buf[buf_len];
  788. char *ip_begin=peek_raw_buf+link_level_header_len;
  789. struct sockaddr saddr={0};
  790. socklen_t saddr_size=sizeof(saddr);
  791. int recv_len = recvfrom(raw_recv_fd, peek_raw_buf,max_data_len, MSG_PEEK ,&saddr , &saddr_size);//change max_data_len to something smaller,we only need header here
  792. my_iphdr * iph = (struct my_iphdr *) (ip_begin);
  793. //mylog(log_info,"recv_len %d\n",recv_len);
  794. if(recv_len<int(sizeof(my_iphdr)))
  795. {
  796. mylog(log_trace,"failed here %d %d\n",recv_len,int(sizeof(my_iphdr)));
  797. mylog(log_trace,"%s\n ",strerror(errno));
  798. return -1;
  799. }
  800. peek_info.src_ip=iph->saddr;
  801. unsigned short iphdrlen =iph->ihl*4;
  802. char *payload=ip_begin+iphdrlen;
  803. //mylog(log_info,"protocol %d\n",iph->protocol);
  804. switch(raw_mode)
  805. {
  806. case mode_faketcp:
  807. {
  808. if(iph->protocol!=IPPROTO_TCP)
  809. {
  810. mylog(log_trace,"failed here");
  811. return -1;
  812. }
  813. struct my_tcphdr *tcph=(my_tcphdr *)payload;
  814. if(recv_len<int( iphdrlen+sizeof(my_tcphdr) ))
  815. {
  816. mylog(log_trace,"failed here");
  817. return -1;
  818. }
  819. peek_info.src_port=ntohs(tcph->source);
  820. peek_info.syn=tcph->syn;
  821. break;
  822. }
  823. case mode_udp:
  824. {
  825. if(iph->protocol!=IPPROTO_UDP) return -1;
  826. struct my_udphdr *udph=(my_udphdr *)payload;
  827. if(recv_len<int(iphdrlen+sizeof(my_udphdr)))
  828. return -1;
  829. peek_info.src_port=ntohs(udph->source);
  830. break;
  831. }
  832. case mode_icmp:
  833. {
  834. if(iph->protocol!=IPPROTO_ICMP) return -1;
  835. struct icmphdr *icmph=(icmphdr *)payload;
  836. if(recv_len<int( iphdrlen+sizeof(icmphdr) ))
  837. return -1;
  838. peek_info.src_port=ntohs(icmph->id);
  839. break;
  840. }
  841. default:return -1;
  842. }
  843. return 0;
  844. }
  845. int recv_raw_ip(raw_info_t &raw_info,char * &payload,int &payloadlen)
  846. {
  847. const packet_info_t &send_info=raw_info.send_info;
  848. packet_info_t &recv_info=raw_info.recv_info;
  849. //static char recv_raw_ip_buf[buf_len];
  850. my_iphdr * iph;
  851. /*struct sockaddr_ll saddr={0};
  852. socklen_t saddr_size = sizeof(saddr);*/
  853. int flag=0;
  854. //int recv_len = recvfrom(raw_recv_fd, recv_raw_ip_buf, max_data_len+1, flag ,(sockaddr*)&saddr , &saddr_size);
  855. assert(g_packet_buf_cnt==1);
  856. g_packet_buf_cnt--;
  857. int recv_len=g_packet_buf_len;
  858. char *recv_raw_ip_buf=g_packet_buf;
  859. if(recv_len==max_data_len+1)
  860. {
  861. mylog(log_warn,"huge packet, data_len > %d,dropped\n",max_data_len);
  862. return -1;
  863. }
  864. if(recv_len<0)
  865. {
  866. mylog(log_trace,"recv_len %d\n",recv_len);
  867. return -1;
  868. }
  869. if(recv_len<int(link_level_header_len))
  870. {
  871. mylog(log_trace,"length error\n");
  872. }
  873. if(link_level_header_len ==14&&(recv_raw_ip_buf[12]!=8||recv_raw_ip_buf[13]!=0))
  874. {
  875. mylog(log_trace,"not an ipv4 packet!\n");
  876. return -1;
  877. }
  878. char *ip_begin=recv_raw_ip_buf+link_level_header_len; //14 is eth net header
  879. iph = (struct my_iphdr *) (ip_begin);
  880. recv_info.src_ip=iph->saddr;
  881. recv_info.dst_ip=iph->daddr;
  882. recv_info.protocol=iph->protocol;
  883. /*
  884. if(lower_level)
  885. {
  886. memcpy(&recv_info.addr_ll,&saddr,sizeof(recv_info.addr_ll));
  887. }*/
  888. if(bind_address_uint32!=0 &&recv_info.dst_ip!=bind_address_uint32)
  889. {
  890. mylog(log_trace,"bind adress doenst match, dropped\n");
  891. //printf(" bind adress doenst match, dropped\n");
  892. return -1;
  893. }
  894. if (!(iph->ihl > 0 && iph->ihl <=60)) {
  895. mylog(log_trace,"iph ihl error\n");
  896. return -1;
  897. }
  898. int ip_len=ntohs(iph->tot_len);
  899. if(recv_len-int(link_level_header_len) <ip_len)
  900. {
  901. mylog(log_debug,"incomplete packet\n");
  902. return -1;
  903. }
  904. unsigned short iphdrlen =iph->ihl*4;
  905. u32_t ip_chk=csum ((unsigned short *) ip_begin, iphdrlen);
  906. if(ip_chk!=0)
  907. {
  908. mylog(log_debug,"ip header error %x\n",ip_chk);
  909. return -1;
  910. }
  911. payload=ip_begin+iphdrlen;
  912. payloadlen=ip_len-iphdrlen;
  913. if(payloadlen<0)
  914. {
  915. mylog(log_warn,"error payload len\n");
  916. return -1;
  917. }
  918. return 0;
  919. }
  920. int send_raw_icmp(raw_info_t &raw_info, const char * payload, int payloadlen)
  921. {
  922. const packet_info_t &send_info=raw_info.send_info;
  923. const packet_info_t &recv_info=raw_info.recv_info;
  924. char send_raw_icmp_buf[buf_len];
  925. icmphdr *icmph=(struct icmphdr *) (send_raw_icmp_buf);
  926. memset(icmph,0,sizeof(icmphdr));
  927. if(program_mode==client_mode)
  928. {
  929. icmph->type=8;
  930. }
  931. else
  932. {
  933. icmph->type=0;
  934. }
  935. icmph->code=0;
  936. icmph->id=htons(send_info.src_port);
  937. icmph->seq=htons(send_info.my_icmp_seq); /////////////modify
  938. memcpy(send_raw_icmp_buf+sizeof(icmphdr),payload,payloadlen);
  939. icmph->check_sum = csum( (unsigned short*) send_raw_icmp_buf, sizeof(icmphdr)+payloadlen);
  940. if(send_raw_ip(raw_info,send_raw_icmp_buf,sizeof(icmphdr)+payloadlen)!=0)
  941. {
  942. return -1;
  943. }
  944. /*if(program_mode==client_mode)
  945. {
  946. send_info.icmp_seq++;
  947. }*/
  948. return 0;
  949. }
  950. int send_raw_udp(raw_info_t &raw_info, const char * payload, int payloadlen)
  951. {
  952. const packet_info_t &send_info=raw_info.send_info;
  953. const packet_info_t &recv_info=raw_info.recv_info;
  954. char send_raw_udp_buf[buf_len];
  955. my_udphdr *udph=(struct my_udphdr *) (send_raw_udp_buf
  956. + sizeof(struct pseudo_header));
  957. memset(udph,0,sizeof(my_udphdr));
  958. struct pseudo_header *psh = (struct pseudo_header *) (send_raw_udp_buf);
  959. udph->source = htons(send_info.src_port);
  960. udph->dest = htons(send_info.dst_port);
  961. int udp_tot_len=payloadlen+sizeof(my_udphdr);
  962. if(udp_tot_len>65535)
  963. {
  964. mylog(log_debug,"invalid len\n");
  965. return -1;
  966. }
  967. mylog(log_trace,"udp_len:%d %d\n",udp_tot_len,udph->len);
  968. udph->len=htons(uint16_t(udp_tot_len));
  969. memcpy(send_raw_udp_buf+sizeof(struct pseudo_header)+sizeof(my_udphdr),payload,payloadlen);
  970. psh->source_address = send_info.src_ip;
  971. psh->dest_address = send_info.dst_ip;
  972. psh->placeholder = 0;
  973. psh->protocol = IPPROTO_UDP;
  974. psh->tcp_length = htons(uint16_t(udp_tot_len));
  975. int csum_size = sizeof(struct pseudo_header) +udp_tot_len ;
  976. udph->check = csum( (unsigned short*) send_raw_udp_buf, csum_size);
  977. if(send_raw_ip(raw_info,send_raw_udp_buf+ sizeof(struct pseudo_header),udp_tot_len)!=0)
  978. {
  979. return -1;
  980. }
  981. return 0;
  982. }
  983. int send_raw_tcp(raw_info_t &raw_info,const char * payload, int payloadlen) { //TODO seq increase
  984. const packet_info_t &send_info=raw_info.send_info;
  985. const packet_info_t &recv_info=raw_info.recv_info;
  986. //mylog(log_debug,"syn %d\n",send_info.syn);
  987. char send_raw_tcp_buf[buf_len];
  988. //char *send_raw_tcp_buf=send_raw_tcp_buf0;
  989. struct my_tcphdr *tcph = (struct my_tcphdr *) (send_raw_tcp_buf
  990. + sizeof(struct pseudo_header));
  991. memset(tcph,0,sizeof(my_tcphdr));
  992. struct pseudo_header *psh = (struct pseudo_header *) (send_raw_tcp_buf);
  993. //TCP Header
  994. tcph->source = htons(send_info.src_port);
  995. tcph->dest = htons(send_info.dst_port);
  996. tcph->seq = htonl(send_info.seq);
  997. tcph->ack_seq = htonl(send_info.ack_seq);
  998. tcph->fin = 0;
  999. tcph->syn = send_info.syn;
  1000. tcph->rst = 0;
  1001. tcph->psh = send_info.psh;
  1002. tcph->ack = send_info.ack;
  1003. if (tcph->syn == 1) {
  1004. tcph->doff = 10; //tcp header size
  1005. int i = sizeof(pseudo_header)+sizeof(my_tcphdr);
  1006. send_raw_tcp_buf[i++] = 0x02; //mss
  1007. send_raw_tcp_buf[i++] = 0x04;
  1008. send_raw_tcp_buf[i++] = 0x05;
  1009. send_raw_tcp_buf[i++] = (char)0xb4;
  1010. //raw_send_buf[i++]=0x01;
  1011. //raw_send_buf[i++]=0x01;
  1012. send_raw_tcp_buf[i++] = 0x04; //sack ok
  1013. send_raw_tcp_buf[i++] = 0x02; //sack ok
  1014. send_raw_tcp_buf[i++] = 0x08; //ts i=6
  1015. send_raw_tcp_buf[i++] = 0x0a; //i=7
  1016. //*(u32_t*) (&send_raw_tcp_buf[i]) = htonl(
  1017. // (u32_t) get_current_time());
  1018. u32_t ts=htonl((u32_t) get_current_time());
  1019. memcpy(&send_raw_tcp_buf[i],&ts,sizeof(ts));
  1020. i += 4;
  1021. //mylog(log_info,"[syn]<send_info.ts_ack= %u>\n",send_info.ts_ack);
  1022. //*(u32_t*) (&send_raw_tcp_buf[i]) = htonl(send_info.ts_ack);
  1023. u32_t ts_ack=htonl(send_info.ts_ack);
  1024. memcpy(&send_raw_tcp_buf[i],&ts_ack,sizeof(ts_ack));
  1025. i += 4;
  1026. send_raw_tcp_buf[i++] = 0x01;
  1027. send_raw_tcp_buf[i++] = 0x03;
  1028. send_raw_tcp_buf[i++] = 0x03;
  1029. send_raw_tcp_buf[i++] = wscale;
  1030. } else {
  1031. tcph->doff = 8;
  1032. int i = sizeof(pseudo_header)+sizeof(my_tcphdr);
  1033. send_raw_tcp_buf[i++] = 0x01;
  1034. send_raw_tcp_buf[i++] = 0x01;
  1035. send_raw_tcp_buf[i++] = 0x08; //ts //i=2
  1036. send_raw_tcp_buf[i++] = 0x0a; //i=3;
  1037. //*(u32_t*) (&send_raw_tcp_buf[i]) = htonl(
  1038. // (u32_t) get_current_time());
  1039. u32_t ts=htonl((u32_t) get_current_time());
  1040. memcpy(&send_raw_tcp_buf[i],&ts,sizeof(ts));
  1041. i += 4;
  1042. //mylog(log_info,"<send_info.ts_ack= %u>\n",send_info.ts_ack);
  1043. //*(u32_t*) (&send_raw_tcp_buf[i]) = htonl(send_info.ts_ack);
  1044. u32_t ts_ack=htonl(send_info.ts_ack);
  1045. memcpy(&send_raw_tcp_buf[i],&ts_ack,sizeof(ts_ack));
  1046. i += 4;
  1047. }
  1048. tcph->urg = 0;
  1049. //tcph->window = htons((uint16_t)(1024));
  1050. tcph->window = htons((uint16_t) (receive_window_lower_bound + random() % receive_window_random_range));
  1051. tcph->check = 0; //leave checksum 0 now, filled later by pseudo header
  1052. tcph->urg_ptr = 0;
  1053. char *tcp_data = send_raw_tcp_buf+sizeof(struct pseudo_header) + tcph->doff * 4;
  1054. memcpy(tcp_data, payload, payloadlen);
  1055. psh->source_address = send_info.src_ip;
  1056. psh->dest_address = send_info.dst_ip;
  1057. psh->placeholder = 0;
  1058. psh->protocol = IPPROTO_TCP;
  1059. psh->tcp_length = htons(tcph->doff * 4 + payloadlen);
  1060. int csum_size = sizeof(struct pseudo_header) + tcph->doff*4 + payloadlen;
  1061. tcph->check = csum( (unsigned short*) send_raw_tcp_buf, csum_size);
  1062. int tcp_totlen=tcph->doff*4 + payloadlen;
  1063. if(send_raw_ip(raw_info,send_raw_tcp_buf+ sizeof(struct pseudo_header),tcp_totlen)!=0)
  1064. {
  1065. return -1;
  1066. }
  1067. raw_info.send_info.data_len=payloadlen;
  1068. return 0;
  1069. }
  1070. /*
  1071. int send_raw_tcp_deprecated(const packet_info_t &info,const char * payload,int payloadlen)
  1072. {
  1073. static uint16_t ip_id=1;
  1074. char raw_send_buf[buf_len];
  1075. char raw_send_buf2[buf_len];
  1076. //if((prog_mode==client_mode&& payloadlen!=9) ||(prog_mode==server_mode&& payloadlen!=5 ) )
  1077. mylog(log_trace,"send raw from to %d %d %d %d\n",info.src_ip,info.src_port,info.dst_ip,info.dst_port);
  1078. char *data;
  1079. memset(raw_send_buf,0,payloadlen+100);
  1080. struct iphdr *iph = (struct iphdr *) raw_send_buf;
  1081. //TCP header
  1082. struct tcphdr *tcph = (struct tcphdr *) (raw_send_buf + sizeof (struct ip));
  1083. struct sockaddr_in sin;
  1084. struct pseudo_header psh;
  1085. //some address resolution
  1086. sin.sin_family = AF_INET;
  1087. sin.sin_port = htons(info.dst_port);
  1088. sin.sin_addr.s_addr = info.dst_ip;
  1089. //Fill in the IP Header
  1090. iph->ihl = 5;
  1091. iph->version = 4;
  1092. iph->tos = 0;
  1093. iph->id = htonl (ip_id++); //Id of this packet
  1094. iph->frag_off = htons(0x4000); //DF set,others are zero
  1095. iph->ttl = (unsigned char)ttl_value;
  1096. iph->protocol = IPPROTO_TCP;
  1097. iph->check = 0; //Set to 0 before calculating checksum
  1098. iph->saddr = info.src_ip; //Spoof the source ip address
  1099. iph->daddr = info.dst_ip;
  1100. //TCP Header
  1101. tcph->source = htons(info.src_port);
  1102. tcph->dest = htons(info.dst_port);
  1103. tcph->seq =htonl(info.seq);
  1104. tcph->ack_seq = htonl(info.ack_seq);
  1105. tcph->fin=0;
  1106. tcph->syn=info.syn;
  1107. tcph->rst=0;
  1108. tcph->psh=info.psh;
  1109. tcph->ack=info.ack;
  1110. if(tcph->syn==1)
  1111. {
  1112. tcph->doff = 10; //tcp header size
  1113. int i=sizeof (struct iphdr)+20;
  1114. raw_send_buf[i++]=0x02;//mss
  1115. raw_send_buf[i++]=0x04;
  1116. raw_send_buf[i++]=0x05;
  1117. raw_send_buf[i++]=0xb4;
  1118. //raw_send_buf[i++]=0x01;
  1119. //raw_send_buf[i++]=0x01;
  1120. raw_send_buf[i++]=0x04; //sack ok
  1121. raw_send_buf[i++]=0x02; //sack ok
  1122. raw_send_buf[i++]=0x08; //i=6;
  1123. raw_send_buf[i++]=0x0a;
  1124. *(uint32_t*)(& raw_send_buf[i])=htonl((uint32_t)get_current_time());
  1125. i+=4;
  1126. *(uint32_t*)(& raw_send_buf[i])=htonl(info.ts_ack);
  1127. i+=4;
  1128. raw_send_buf[i++]=0x01;
  1129. raw_send_buf[i++]=0x03;
  1130. raw_send_buf[i++]=0x03;
  1131. raw_send_buf[i++]=0x05;
  1132. }
  1133. else
  1134. {
  1135. tcph->doff=8;
  1136. int i=sizeof (struct iphdr)+20;
  1137. raw_send_buf[i++]=0x01;
  1138. raw_send_buf[i++]=0x01;
  1139. raw_send_buf[i++]=0x08; //i=0;
  1140. raw_send_buf[i++]=0x0a;
  1141. *(uint32_t*)(& raw_send_buf[i])=htonl((uint32_t)get_current_time());
  1142. i+=4;
  1143. *(uint32_t*)(& raw_send_buf[i])=htonl(info.ts_ack);
  1144. i+=4;
  1145. }
  1146. tcph->urg=0;
  1147. //tcph->window = htons((uint16_t)(1024));
  1148. tcph->window = htons((uint16_t)(10240+random()%100));
  1149. tcph->check = 0; //leave checksum 0 now, filled later by pseudo header
  1150. tcph->urg_ptr = 0;
  1151. //Data part
  1152. data = raw_send_buf + sizeof(struct iphdr) + tcph->doff*4;
  1153. iph->tot_len = sizeof (struct iphdr) + tcph->doff*4 + payloadlen;
  1154. memcpy(data , payload, payloadlen);
  1155. psh.source_address = info.src_ip;
  1156. psh.dest_address = sin.sin_addr.s_addr;
  1157. psh.placeholder = 0;
  1158. psh.protocol = IPPROTO_TCP;
  1159. psh.tcp_length = htons(tcph->doff*4 + payloadlen );
  1160. int psize = sizeof(struct pseudo_header) + tcph->doff*4 + payloadlen;
  1161. memcpy(raw_send_buf2 , (char*) &psh , sizeof (struct pseudo_header));
  1162. memcpy(raw_send_buf2 + sizeof(struct pseudo_header) , tcph , tcph->doff*4 + payloadlen);
  1163. tcph->check = csum( (unsigned short*) raw_send_buf2, psize);
  1164. //Ip checksum
  1165. iph->check = csum ((unsigned short *) raw_send_buf, iph->tot_len);
  1166. mylog(log_trace,"sent seq ack_seq len<%u %u %d>\n",g_packet_info_send.seq,g_packet_info_send.ack_seq,payloadlen);
  1167. int ret = sendto(raw_send_fd, raw_send_buf, iph->tot_len , 0, (struct sockaddr *) &sin, sizeof (sin));
  1168. if(g_packet_info_send.syn==0&&g_packet_info_send.ack==1&&payloadlen!=0)
  1169. {
  1170. if(seq_mode==0)
  1171. {
  1172. }
  1173. else if(seq_mode==1)
  1174. {
  1175. g_packet_info_send.seq+=payloadlen;
  1176. }
  1177. else if(seq_mode==2)
  1178. {
  1179. if(random()% 5==3 )
  1180. g_packet_info_send.seq+=payloadlen;
  1181. }
  1182. }
  1183. mylog(log_trace,"<ret:%d>\n",ret);
  1184. if(ret<0)
  1185. {
  1186. mylog(log_fatal,"");
  1187. perror("raw send error\n");
  1188. //printf("send error\n");
  1189. }
  1190. return 0;
  1191. }
  1192. */
  1193. int recv_raw_icmp(raw_info_t &raw_info, char *&payload, int &payloadlen)
  1194. {
  1195. const packet_info_t &send_info=raw_info.send_info;
  1196. packet_info_t &recv_info=raw_info.recv_info;
  1197. static char recv_raw_icmp_buf[buf_len];
  1198. char * ip_payload;
  1199. int ip_payloadlen;
  1200. if(recv_raw_ip(raw_info,ip_payload,ip_payloadlen)!=0)
  1201. {
  1202. mylog(log_debug,"recv_raw_ip error\n");
  1203. return -1;
  1204. }
  1205. if(recv_info.protocol!=IPPROTO_ICMP)
  1206. {
  1207. //printf("not udp protocol\n");
  1208. return -1;
  1209. }
  1210. icmphdr *icmph=(struct icmphdr *) (ip_payload);
  1211. if(ntohs(icmph->id)!=send_info.src_port)
  1212. {
  1213. mylog(log_debug,"icmp id mis-match,ignored\n");
  1214. return -1;
  1215. }
  1216. recv_info.src_port=recv_info.dst_port=ntohs(icmph->id);
  1217. recv_info.my_icmp_seq=ntohs(icmph->seq);
  1218. if(program_mode==client_mode)
  1219. {
  1220. if(icmph->type!=0)
  1221. return -1;
  1222. }
  1223. else
  1224. {
  1225. if(icmph->type!=8)
  1226. return -1;
  1227. }
  1228. if(icmph->code!=0)
  1229. return -1;
  1230. unsigned short check = csum( (unsigned short*) ip_payload, ip_payloadlen);
  1231. if(check!=0)
  1232. {
  1233. mylog(log_debug,"icmp checksum fail %x\n",check);
  1234. return -1;
  1235. }
  1236. //mylog(log_info,"program_mode=%d\n",program_mode);
  1237. /*
  1238. if(program_mode==server_mode)
  1239. {
  1240. send_info.icmp_seq=ntohs(icmph->seq);
  1241. //mylog(log_info,"send_info.seq=%d\n",send_info.seq);
  1242. }*/
  1243. payload=ip_payload+sizeof(icmphdr);
  1244. payloadlen=ip_payloadlen-sizeof(icmphdr);
  1245. mylog(log_trace,"get a packet len=%d\n",payloadlen);
  1246. return 0;
  1247. }
  1248. int recv_raw_udp(raw_info_t &raw_info, char *&payload, int &payloadlen)
  1249. {
  1250. const packet_info_t &send_info=raw_info.send_info;
  1251. packet_info_t &recv_info=raw_info.recv_info;
  1252. static char recv_raw_udp_buf[buf_len];
  1253. char * ip_payload;
  1254. int ip_payloadlen;
  1255. if(recv_raw_ip(raw_info,ip_payload,ip_payloadlen)!=0)
  1256. {
  1257. mylog(log_debug,"recv_raw_ip error\n");
  1258. return -1;
  1259. }
  1260. if(recv_info.protocol!=IPPROTO_UDP)
  1261. {
  1262. //printf("not udp protocol\n");
  1263. return -1;
  1264. }
  1265. if(ip_payloadlen<int( sizeof(my_udphdr) ))
  1266. {
  1267. mylog(log_debug,"too short to hold udpheader\n");
  1268. return -1;
  1269. }
  1270. my_udphdr *udph=(struct my_udphdr*)ip_payload;
  1271. if(int(ntohs(udph->len))!=ip_payloadlen)
  1272. {
  1273. mylog(log_debug,"udp length error %d %d \n",ntohs(udph->len),ip_payloadlen);
  1274. return -1;
  1275. }
  1276. if(udph->dest!=ntohs(uint16_t(filter_port)))
  1277. {
  1278. mylog(log_debug,"dropped packet for other ports\n");
  1279. //printf("%x %x",tcph->dest,);
  1280. return -1;
  1281. }
  1282. memcpy(recv_raw_udp_buf+ sizeof(struct pseudo_header) , ip_payload , ip_payloadlen);
  1283. struct pseudo_header *psh=(pseudo_header *)recv_raw_udp_buf ;
  1284. psh->source_address = recv_info.src_ip;
  1285. psh->dest_address = recv_info.dst_ip;
  1286. psh->placeholder = 0;
  1287. psh->protocol = IPPROTO_UDP;
  1288. psh->tcp_length = htons(ip_payloadlen);
  1289. int csum_len=sizeof(struct pseudo_header)+ip_payloadlen;
  1290. uint16_t udp_chk = csum( (unsigned short*) recv_raw_udp_buf, csum_len);
  1291. if(udp_chk!=0)
  1292. {
  1293. mylog(log_debug,"udp_chk:%x\n",udp_chk);
  1294. mylog(log_debug,"udp header error\n");
  1295. return -1;
  1296. }
  1297. char *udp_begin=recv_raw_udp_buf+sizeof(struct pseudo_header);
  1298. recv_info.src_port=ntohs(udph->source);
  1299. recv_info.dst_port=ntohs(udph->dest);
  1300. payloadlen = ip_payloadlen-sizeof(my_udphdr);
  1301. payload=udp_begin+sizeof(my_udphdr);
  1302. return 0;
  1303. }
  1304. int recv_raw_tcp(raw_info_t &raw_info,char * &payload,int &payloadlen)
  1305. {
  1306. const packet_info_t &send_info=raw_info.send_info;
  1307. packet_info_t &recv_info=raw_info.recv_info;
  1308. static char recv_raw_tcp_buf[buf_len];
  1309. char * ip_payload;
  1310. int ip_payloadlen;
  1311. if(recv_raw_ip(raw_info,ip_payload,ip_payloadlen)!=0)
  1312. {
  1313. mylog(log_debug,"recv_raw_ip error\n");
  1314. return -1;
  1315. }
  1316. if(recv_info.protocol!=IPPROTO_TCP)
  1317. {
  1318. //printf("not tcp protocol\n");
  1319. return -1;
  1320. }
  1321. my_tcphdr * tcph=(struct my_tcphdr*)ip_payload;
  1322. unsigned short tcphdrlen = tcph->doff*4;
  1323. if (!(tcphdrlen > 0 && tcphdrlen <=60)) {
  1324. mylog(log_debug,"tcph error\n");
  1325. return 0;
  1326. }
  1327. if(tcph->dest!=ntohs(uint16_t(filter_port)))
  1328. {
  1329. mylog(log_debug,"dropped packet for other ports\n");
  1330. //printf("%x %x",tcph->dest,);
  1331. return -1;
  1332. }
  1333. memcpy(recv_raw_tcp_buf+ sizeof(struct pseudo_header) , ip_payload , ip_payloadlen);
  1334. struct pseudo_header *psh=(pseudo_header *)recv_raw_tcp_buf ;
  1335. psh->source_address = recv_info.src_ip;
  1336. psh->dest_address = recv_info.dst_ip;
  1337. psh->placeholder = 0;
  1338. psh->protocol = IPPROTO_TCP;
  1339. psh->tcp_length = htons(ip_payloadlen);
  1340. int csum_len=sizeof(struct pseudo_header)+ip_payloadlen;
  1341. uint16_t tcp_chk = csum( (unsigned short*) recv_raw_tcp_buf, csum_len);
  1342. if(tcp_chk!=0)
  1343. {
  1344. mylog(log_debug,"tcp_chk:%x\n",tcp_chk);
  1345. mylog(log_debug,"tcp header error\n");
  1346. return -1;
  1347. }
  1348. char *tcp_begin=recv_raw_tcp_buf+sizeof(struct pseudo_header); //ip packet's data part
  1349. char *tcp_option=recv_raw_tcp_buf+sizeof(struct pseudo_header)+sizeof(my_tcphdr);
  1350. recv_info.has_ts=0;
  1351. recv_info.ts=0;
  1352. if(tcph->doff==10)
  1353. {
  1354. if(tcp_option[6]==0x08 &&tcp_option[7]==0x0a)
  1355. {
  1356. recv_info.has_ts=1;
  1357. //recv_info.ts=ntohl(*(u32_t*)(&tcp_option[8]));
  1358. memcpy(&recv_info.ts,&tcp_option[8],sizeof(recv_info.ts));
  1359. recv_info.ts=ntohl(recv_info.ts);
  1360. //recv_info.ts_ack=ntohl(*(u32_t*)(&tcp_option[12]));
  1361. memcpy(&recv_info.ts_ack,&tcp_option[12],sizeof(recv_info.ts_ack));
  1362. recv_info.ts_ack=ntohl(recv_info.ts_ack);
  1363. //g_packet_info_send.ts_ack= ntohl(*(uint32_t*)(&tcp_option[8]));
  1364. }
  1365. else
  1366. {
  1367. // mylog(log_info,"\n");
  1368. }
  1369. }
  1370. else if(tcph->doff==8)
  1371. {
  1372. if(tcp_option[2]==0x08 &&tcp_option[3]==0x0a)
  1373. {
  1374. recv_info.has_ts=1;
  1375. //recv_info.ts=ntohl(*(u32_t*)(&tcp_option[4]));
  1376. memcpy(&recv_info.ts,&tcp_option[4],sizeof(recv_info.ts));
  1377. recv_info.ts=ntohl(recv_info.ts);
  1378. //recv_info.ts_ack=ntohl(*(u32_t*)(&tcp_option[8]));
  1379. memcpy(&recv_info.ts_ack,&tcp_option[8],sizeof(recv_info.ts_ack));
  1380. recv_info.ts_ack=ntohl(recv_info.ts_ack);
  1381. //g_packet_info_send.ts_ack= ntohl(*(uint32_t*)(&tcp_option[0]));
  1382. }
  1383. else
  1384. {
  1385. //mylog(log_info,"!!!\n");
  1386. }
  1387. }
  1388. else
  1389. {
  1390. //mylog(log_info,"tcph->doff= %u\n",tcph->doff);
  1391. }
  1392. recv_info.ack=tcph->ack;
  1393. recv_info.syn=tcph->syn;
  1394. recv_info.rst=tcph->rst;
  1395. recv_info.src_port=ntohs(tcph->source);
  1396. recv_info.dst_port=ntohs(tcph->dest);
  1397. recv_info.seq=ntohl(tcph->seq);
  1398. // recv_info.last_last_ack_seq=recv_info.last_ack_seq;
  1399. //recv_info.last_ack_seq=recv_info.ack_seq;
  1400. u32_t last_ack_seq=recv_info.ack_seq;
  1401. recv_info.ack_seq=ntohl(tcph->ack_seq);
  1402. if(recv_info.ack_seq==last_ack_seq)
  1403. {
  1404. recv_info.ack_seq_counter++;
  1405. }
  1406. else
  1407. {
  1408. recv_info.ack_seq_counter=0;
  1409. }
  1410. recv_info.psh=tcph->psh;
  1411. if(tcph->rst==1)
  1412. {
  1413. raw_info.rst_received++;
  1414. if(max_rst_to_show>0)
  1415. {
  1416. if(raw_info.rst_received < max_rst_to_show)
  1417. {
  1418. mylog(log_warn,"[%s,%d]rst==1,cnt=%d\n",my_ntoa(recv_info.src_ip),recv_info.src_port,(int)raw_info.rst_received);
  1419. }
  1420. else if(raw_info.rst_received == max_rst_to_show)
  1421. {
  1422. mylog(log_warn,"[%s,%d]rst==1,cnt=%d >=max_rst_to_show, this log will be muted for current connection\n",my_ntoa(recv_info.src_ip),recv_info.src_port,(int)raw_info.rst_received);
  1423. }
  1424. else
  1425. {
  1426. mylog(log_debug,"[%s,%d]rst==1,cnt=%d\n",my_ntoa(recv_info.src_ip),recv_info.src_port,(int)raw_info.rst_received);
  1427. }
  1428. }
  1429. else if(max_rst_to_show==0)
  1430. {
  1431. mylog(log_debug,"[%s,%d]rst==1,cnt=%d\n",my_ntoa(recv_info.src_ip),recv_info.src_port,(int)raw_info.rst_received);
  1432. }
  1433. else
  1434. {
  1435. mylog(log_warn,"[%s,%d]rst==1,cnt=%d\n",my_ntoa(recv_info.src_ip),recv_info.src_port,(int)raw_info.rst_received);
  1436. }
  1437. if(max_rst_allowed>=0 && raw_info.rst_received==max_rst_allowed+1 )
  1438. {
  1439. mylog(log_warn,"[%s,%d]connection disabled because of rst_received=%d > max_rst_allow=%d\n",my_ntoa(recv_info.src_ip),recv_info.src_port,(int)raw_info.rst_received,(int)max_rst_allowed );
  1440. raw_info.disabled=1;
  1441. }
  1442. }
  1443. /* if(recv_info.has_ts)
  1444. {
  1445. send_info.ts_ack=recv_info.ts; //////////////////////////////////////////////modify
  1446. }*/
  1447. payloadlen = ip_payloadlen-tcphdrlen;
  1448. payload=tcp_begin+tcphdrlen;
  1449. /*if (recv_info.syn == 0 && recv_info.ack == 1&& payloadlen != 0) //only modify send_info when the packet is not part of handshake
  1450. {
  1451. send_info.ack_seq=recv_info.seq;
  1452. }*/
  1453. raw_info.recv_info.data_len=payloadlen;
  1454. return 0;
  1455. }
  1456. /*
  1457. int recv_raw_tcp_deprecated(packet_info_t &info,char * &payload,int &payloadlen)
  1458. {
  1459. static char buf[buf_len];
  1460. char raw_recv_buf[buf_len];
  1461. char raw_recv_buf2[buf_len];
  1462. char raw_recv_buf3[buf_len];
  1463. iphdr * iph;
  1464. tcphdr * tcph;
  1465. int size;
  1466. struct sockaddr saddr;
  1467. socklen_t saddr_size;
  1468. saddr_size = sizeof(saddr);
  1469. mylog(log_trace,"raw!\n");
  1470. size = recvfrom(raw_recv_fd, buf, max_data_len, 0 ,&saddr , &saddr_size);
  1471. if(buf[12]!=8||buf[13]!=0)
  1472. {
  1473. mylog(log_debug,"not an ipv4 packet!\n");
  1474. return -1;
  1475. }
  1476. char *ip_begin=buf+14;
  1477. iph = (struct iphdr *) (ip_begin);
  1478. if (!(iph->ihl > 0 && iph->ihl <=60)) {
  1479. mylog(log_debug,"iph ihl error");
  1480. return -1;
  1481. }
  1482. if (iph->protocol != IPPROTO_TCP) {
  1483. mylog(log_debug,"iph protocal != tcp\n");
  1484. return -1;
  1485. }
  1486. int ip_len=ntohs(iph->tot_len);
  1487. unsigned short iphdrlen =iph->ihl*4;
  1488. tcph=(struct tcphdr*)(ip_begin+ iphdrlen);
  1489. unsigned short tcphdrlen = tcph->doff*4;
  1490. if (!(tcph->doff > 0 && tcph->doff <=60)) {
  1491. mylog(log_debug,"tcph error");
  1492. return 0;
  1493. }
  1494. if(tcph->dest!=ntohs(uint16_t(filter_port)))
  1495. {
  1496. //printf("%x %x",tcph->dest,);
  1497. return -1;
  1498. }
  1499. /////ip
  1500. uint32_t ip_chk=csum ((unsigned short *) ip_begin, iphdrlen);
  1501. int psize = sizeof(struct pseudo_header) + ip_len-iphdrlen;
  1502. /////ip end
  1503. ///tcp
  1504. struct pseudo_header psh;
  1505. psh.source_address = iph->saddr;
  1506. psh.dest_address = iph->daddr;
  1507. psh.placeholder = 0;
  1508. psh.protocol = IPPROTO_TCP;
  1509. psh.tcp_length = htons(ip_len-iphdrlen);
  1510. memcpy(raw_recv_buf2 , (char*) &psh , sizeof (struct pseudo_header));
  1511. memcpy(raw_recv_buf2 + sizeof(struct pseudo_header) , ip_begin+ iphdrlen , ip_len-iphdrlen);
  1512. uint16_t tcp_chk = csum( (unsigned short*) raw_recv_buf2, psize);
  1513. if(ip_chk!=0)
  1514. {
  1515. mylog(log_debug,"ip header error %d\n",ip_chk);
  1516. return -1;
  1517. }
  1518. if(tcp_chk!=0)
  1519. {
  1520. mylog(log_debug,"tcp_chk:%x\n",tcp_chk);
  1521. mylog(log_debug,"tcp header error\n");
  1522. return -1;
  1523. }
  1524. char *tcp_begin=raw_recv_buf2+sizeof(struct pseudo_header); //ip packet's data part
  1525. char *tcp_option=raw_recv_buf2+sizeof(struct pseudo_header)+sizeof(tcphdr);
  1526. info.has_ts=0;
  1527. if(tcph->doff==10)
  1528. {
  1529. if(tcp_option[6]==0x08 &&tcp_option[7]==0x0a)
  1530. {
  1531. info.has_ts=1;
  1532. info.ts=ntohl(*(uint32_t*)(&tcp_option[8]));
  1533. info.ts_ack=ntohl(*(uint32_t*)(&tcp_option[12]));
  1534. //g_packet_info_send.ts_ack= ntohl(*(uint32_t*)(&tcp_option[8]));
  1535. }
  1536. }
  1537. else if(tcph->doff==8)
  1538. {
  1539. if(tcp_option[3]==0x08 &&tcp_option[4]==0x0a)
  1540. {
  1541. info.has_ts=1;
  1542. info.ts=ntohl(*(uint32_t*)(&tcp_option[0]));
  1543. info.ts_ack=ntohl(*(uint32_t*)(&tcp_option[4]));
  1544. //g_packet_info_send.ts_ack= ntohl(*(uint32_t*)(&tcp_option[0]));
  1545. }
  1546. }
  1547. if(tcph->rst==1)
  1548. {
  1549. mylog(log_warn,"%%%%%%%%%%rst==1%%%%%%%%%%%%%\n");
  1550. }
  1551. info.ack=tcph->ack;
  1552. info.syn=tcph->syn;
  1553. info.rst=tcph->rst;
  1554. info.src_port=ntohs(tcph->source);
  1555. info.src_ip=iph->saddr;
  1556. info.seq=ntohl(tcph->seq);
  1557. info.ack_seq=ntohl(tcph->ack_seq);
  1558. info.psh=tcph->psh;
  1559. if(info.has_ts)
  1560. {
  1561. g_packet_info_send.ts_ack=info.ts;
  1562. }
  1563. ////tcp end
  1564. payloadlen = ip_len-tcphdrlen-iphdrlen;
  1565. payload=ip_begin+tcphdrlen+iphdrlen;
  1566. if(payloadlen>0&&payload[0]=='h')
  1567. {
  1568. mylog(log_debug,"recvd <%u %u %d>\n",ntohl(tcph->seq ),ntohl(tcph->ack_seq), payloadlen);
  1569. }
  1570. if(payloadlen>0&&tcph->syn==0&&tcph->ack==1)
  1571. {
  1572. //if(seq_increse)
  1573. g_packet_info_send.ack_seq=ntohl(tcph->seq)+(uint32_t)payloadlen;
  1574. }
  1575. //printf("%d\n",ip_len);
  1576. mylog(log_trace,"<%u,%u,%u,%u,%d>\n",(unsigned int)iphdrlen,(unsigned int)tcphdrlen,(unsigned int)tcph->syn,(unsigned int)tcph->ack,payloadlen);
  1577. return 0;
  1578. }*/
  1579. int send_raw0(raw_info_t &raw_info,const char * payload,int payloadlen)
  1580. {
  1581. if (random_drop != 0) {
  1582. if (get_true_random_number() % 10000 < (u32_t) random_drop) {
  1583. return 0;
  1584. }
  1585. }
  1586. packet_info_t &send_info=raw_info.send_info;
  1587. packet_info_t &recv_info=raw_info.recv_info;
  1588. mylog(log_trace,"send_raw : from %x %d to %x %d\n",send_info.src_ip,send_info.src_port,send_info.dst_ip,send_info.dst_port);
  1589. switch(raw_mode)
  1590. {
  1591. case mode_faketcp:return send_raw_tcp(raw_info,payload,payloadlen);
  1592. case mode_udp: return send_raw_udp(raw_info,payload,payloadlen);
  1593. case mode_icmp: return send_raw_icmp(raw_info,payload,payloadlen);
  1594. default:return -1;
  1595. }
  1596. }
  1597. int recv_raw0(raw_info_t &raw_info,char * &payload,int &payloadlen)
  1598. {
  1599. packet_info_t &send_info=raw_info.send_info;
  1600. packet_info_t &recv_info=raw_info.recv_info;
  1601. switch(raw_mode)
  1602. {
  1603. case mode_faketcp:return recv_raw_tcp(raw_info,payload,payloadlen);
  1604. case mode_udp: return recv_raw_udp(raw_info,payload,payloadlen);
  1605. case mode_icmp: return recv_raw_icmp(raw_info,payload,payloadlen);
  1606. default: return -1;
  1607. }
  1608. }
  1609. int after_send_raw0(raw_info_t &raw_info)
  1610. {
  1611. packet_info_t &send_info=raw_info.send_info;
  1612. packet_info_t &recv_info=raw_info.recv_info;
  1613. if(raw_mode==mode_faketcp)
  1614. {
  1615. if (send_info.syn == 0 && send_info.ack == 1&& raw_info.send_info.data_len != 0) //only modify send_info when the packet is not part of handshake
  1616. {
  1617. if (seq_mode == 0)
  1618. {
  1619. } else if (seq_mode == 1)
  1620. {
  1621. send_info.seq += raw_info.send_info.data_len; //////////////////modify
  1622. } else if (seq_mode == 2)
  1623. {
  1624. if (random() % 5 == 3)
  1625. send_info.seq += raw_info.send_info.data_len; //////////////////modify
  1626. }
  1627. else if(seq_mode==3||seq_mode==4)
  1628. {
  1629. send_info.seq += raw_info.send_info.data_len;
  1630. u32_t window_size;
  1631. if(seq_mode==3)
  1632. {
  1633. window_size=(u32_t)((u32_t)receive_window_lower_bound<<(u32_t)wscale);
  1634. }
  1635. else//seq_mode==4
  1636. {
  1637. window_size=(u32_t)((u32_t)receive_window_lower_bound);
  1638. }
  1639. if(larger_than_u32(send_info.seq+max_data_len,recv_info.ack_seq+window_size))
  1640. {
  1641. send_info.seq=raw_info.recv_info.ack_seq;
  1642. }
  1643. if(recv_info.ack_seq_counter>=3) //simulate tcp fast re-transmit
  1644. {
  1645. recv_info.ack_seq_counter=0;
  1646. send_info.seq=raw_info.recv_info.ack_seq;
  1647. }
  1648. if(larger_than_u32(raw_info.recv_info.ack_seq,send_info.seq)) //for further use,currently no effect.
  1649. {
  1650. send_info.seq=raw_info.recv_info.ack_seq;
  1651. }
  1652. }
  1653. }
  1654. }
  1655. if(raw_mode==mode_icmp)
  1656. {
  1657. if(program_mode==client_mode)
  1658. {
  1659. send_info.my_icmp_seq++;
  1660. }
  1661. }
  1662. return 0;
  1663. }
  1664. int after_recv_raw0(raw_info_t &raw_info)
  1665. {
  1666. packet_info_t &send_info=raw_info.send_info;
  1667. packet_info_t &recv_info=raw_info.recv_info;
  1668. if(raw_mode==mode_faketcp)
  1669. {
  1670. if(recv_info.has_ts)
  1671. send_info.ts_ack=recv_info.ts;
  1672. if (recv_info.syn == 0 && recv_info.ack == 1 && raw_info.recv_info.data_len != 0) //only modify send_info when the packet is not part of handshake
  1673. {
  1674. if(seq_mode==0||seq_mode==1||seq_mode==2)
  1675. {
  1676. if(larger_than_u32(recv_info.seq+raw_info.recv_info.data_len,send_info.ack_seq))
  1677. send_info.ack_seq = recv_info.seq+raw_info.recv_info.data_len;//TODO only update if its larger
  1678. }
  1679. else if(seq_mode==3||seq_mode==4)
  1680. {
  1681. if(recv_info.seq==send_info.ack_seq)
  1682. {
  1683. send_info.ack_seq=recv_info.seq+raw_info.recv_info.data_len;//currently we dont remembr tcp segments,this is the simplest way
  1684. //TODO implement tcp segment remembering and SACK.
  1685. }
  1686. }
  1687. }
  1688. }
  1689. if(raw_mode==mode_icmp)
  1690. {
  1691. if(program_mode==server_mode)
  1692. {
  1693. if(larger_than_u16(recv_info.my_icmp_seq,send_info.my_icmp_seq))
  1694. send_info.my_icmp_seq = recv_info.my_icmp_seq; //TODO only update if its larger
  1695. }
  1696. }
  1697. return 0;
  1698. }
  1699. /*
  1700. int send_raw(raw_info_t &raw_info,const char * payload,int payloadlen)
  1701. {
  1702. packet_info_t &send_info=raw_info.send_info;
  1703. packet_info_t &recv_info=raw_info.recv_info;
  1704. int ret=send_raw0(raw_info,payload,payloadlen);
  1705. if(ret<0) return ret;
  1706. else
  1707. {
  1708. after_send_raw0(raw_info);
  1709. return ret;
  1710. }
  1711. }
  1712. int recv_raw(raw_info_t &raw_info,char *& payload,int & payloadlen)
  1713. {
  1714. packet_info_t &send_info=raw_info.send_info;
  1715. packet_info_t &recv_info=raw_info.recv_info;
  1716. int ret=recv_raw0(raw_info,payload,payloadlen);
  1717. if(ret<0) return ret;
  1718. else
  1719. {
  1720. after_recv_raw0(raw_info);
  1721. return ret;
  1722. }
  1723. }*/
  1724. int get_src_adress(u32_t &ip,u32_t remote_ip_uint32,int remote_port) //a trick to get src adress for a dest adress,so that we can use the src address in raw socket as source ip
  1725. {
  1726. struct sockaddr_in remote_addr_in={0};
  1727. socklen_t slen = sizeof(sockaddr_in);
  1728. //memset(&remote_addr_in, 0, sizeof(remote_addr_in));
  1729. remote_addr_in.sin_family = AF_INET;
  1730. remote_addr_in.sin_port = htons(remote_port);
  1731. remote_addr_in.sin_addr.s_addr = remote_ip_uint32;
  1732. int new_udp_fd=socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
  1733. if(new_udp_fd<0)
  1734. {
  1735. mylog(log_warn,"create udp_fd error\n");
  1736. return -1;
  1737. }
  1738. //set_buf_size(new_udp_fd);
  1739. mylog(log_debug,"created new udp_fd %d\n",new_udp_fd);
  1740. int ret = connect(new_udp_fd, (struct sockaddr *) &remote_addr_in, slen);
  1741. if(ret!=0)
  1742. {
  1743. mylog(log_warn,"udp fd connect fail\n");
  1744. close(new_udp_fd);
  1745. return -1;
  1746. }
  1747. struct sockaddr_in my_addr={0};
  1748. socklen_t len=sizeof(my_addr);
  1749. if(getsockname(new_udp_fd, (struct sockaddr *) &my_addr, &len)!=0) return -1;
  1750. ip=my_addr.sin_addr.s_addr;
  1751. close(new_udp_fd);
  1752. return 0;
  1753. }
  1754. int try_to_list_and_bind(int &fd,u32_t local_ip_uint32,int port) //try to bind to a port,may fail.
  1755. {
  1756. int old_bind_fd=fd;
  1757. if(raw_mode==mode_faketcp)
  1758. {
  1759. fd=socket(AF_INET,SOCK_STREAM,IPPROTO_TCP);
  1760. }
  1761. else if(raw_mode==mode_udp||raw_mode==mode_icmp)
  1762. {
  1763. fd=socket(AF_INET,SOCK_DGRAM,0);
  1764. }
  1765. if(old_bind_fd!=-1)
  1766. {
  1767. close(old_bind_fd);
  1768. }
  1769. struct sockaddr_in temp_bind_addr={0};
  1770. //bzero(&temp_bind_addr, sizeof(temp_bind_addr));
  1771. temp_bind_addr.sin_family = AF_INET;
  1772. temp_bind_addr.sin_port = htons(port);
  1773. temp_bind_addr.sin_addr.s_addr = local_ip_uint32;
  1774. if (::bind(fd, (struct sockaddr*)&temp_bind_addr, sizeof(temp_bind_addr)) !=0)
  1775. {
  1776. mylog(log_debug,"bind fail\n");
  1777. return -1;
  1778. }
  1779. if(raw_mode==mode_faketcp &&!use_tcp_dummy_socket)
  1780. {
  1781. if (listen(fd, SOMAXCONN) != 0) {
  1782. mylog(log_warn,"listen fail\n");
  1783. return -1;
  1784. }
  1785. }
  1786. return 0;
  1787. }
  1788. int client_bind_to_a_new_port(int &fd,u32_t local_ip_uint32)//find a free port and bind to it.
  1789. {
  1790. int raw_send_port=10000+get_true_random_number()%(65535-10000);
  1791. for(int i=0;i<1000;i++)//try 1000 times at max,this should be enough
  1792. {
  1793. if (try_to_list_and_bind(fd,local_ip_uint32,raw_send_port)==0)
  1794. {
  1795. return raw_send_port;
  1796. }
  1797. }
  1798. mylog(log_fatal,"bind port fail\n");
  1799. myexit(-1);
  1800. return -1;////for compiler check
  1801. }