netsniff-ng: Move variable definition
[netsniff-ng.git] / staging / mausezahn.c
blobf5b470f9cdf2bb29debc283be659f511963c2567
1 /*
2 * netsniff-ng - the packet sniffing beast
3 * Mausezahn, a fast versatile traffic generator
4 * Copyright 2008, 2009, 2010 Herbert Haas.
5 * Subject to the GPL, version 2.
6 */
8 #define _GNU_SOURCE
9 #include <libnet.h>
10 #include <pcap/pcap.h>
11 #include <stdio.h>
12 #include <unistd.h>
13 #include <string.h>
14 #include <stdlib.h>
15 #include <errno.h>
16 #include <limits.h>
17 #include <sys/time.h>
18 #include <time.h>
19 #include <signal.h>
20 #include <sys/types.h>
21 #include <sys/socket.h>
22 #include <arpa/inet.h>
23 #include <sys/ioctl.h>
24 #include <netinet/in.h>
25 #include <stdarg.h>
27 #include "mz.h"
28 #include "cli.h"
29 #include "mops.h"
30 #include "config.h"
31 #include "llist.h"
32 #include "die.h"
34 int verbose_level = 0;
36 static const char *short_options = "46hqvVSxra:A:b:B:c:d:E:f:F:l:p:P:t:T:M:Q:X:";
38 static void signal_handler(int number)
40 clean_up(number);
43 void clean_up(int sig)
45 int i;
46 struct arp_table_struct *cur, *next;
48 if (!quiet) fprintf(stderr, "\nMausezahn cleans up...\n");
50 if (fp != NULL) {
51 verbose_l1(" close files (1) ...\n");
53 fflush(fp);
54 fclose(fp);
57 if (fp2!=NULL) {
58 if (verbose) fprintf(stderr, " close files (2) ...\n");
59 (void) fflush(fp2);
60 (void) fclose(fp2);
63 // interactive mode?
64 if (mz_port) {
65 if (verbose) fprintf(stderr, " clear mops list...\n");
66 mops_cleanup(mp_head);
67 if (verbose) fprintf(stderr, " clear automops list...\n");
68 automops_cleanup(amp_head);
69 if (verbose) fprintf(stderr, " clear packet sequences...\n");
70 mz_ll_delete_list(packet_sequences);
73 for (i=0; i<device_list_entries; i++) {
74 if (device_list[i].p_arp!=NULL) {
75 pcap_close(device_list[i].p_arp);
76 fprintf(stderr, " stopped ARP process for device %s\n", device_list[i].dev);
78 if (device_list[i].arprx_thread!=0) {
79 pthread_cancel(device_list[i].arprx_thread);
80 if (verbose)
81 fprintf(stderr, " (ARP thread for device %s done)\n", device_list[i].dev);
84 if (device_list[i].arp_table!=NULL) {
85 cur=device_list[i].arp_table;
86 while (cur!=NULL) {
87 next = cur->next;
88 if (cur!=NULL) free(cur);
89 cur=next;
93 // close packet sockets
94 if (device_list[i].ps>=0) {
95 close(device_list[i].ps);
100 if (verbose) fprintf(stderr, "finished.\n");
101 exit(sig);
105 static void help(void)
107 printf("\nmausezahn %s, a fast versatile traffic generator\n", VERSION_STRING);
108 puts("http://www.netsniff-ng.org\n\n"
109 "Usage: mausezahn [options] [interface] <keyword>|<arg-string>|<hex-string>\n"
110 "Options:\n"
111 " -x <port> Interactive mode with telnet CLI, default port: 25542\n"
112 " -l <ip> Listen address to bind to when in interactive mode, default: 0.0.0.0\n"
113 " -4 IPv4 mode (default)\n"
114 " -6 IPv6 mode\n"
115 " -c <count> Send packet count times, default:1, infinite:0\n"
116 " -d <delay> Apply delay between transmissions. The delay value can be\n"
117 " specified in usec (default, no additional unit needed), or in\n"
118 " msec (e.g. 100m or 100msec), or in seconds (e.g. 100s or 100sec)\n"
119 " -r Multiplies the specified delay with a random value\n"
120 " -p <length> Pad the raw frame to specified length (using random bytes)\n"
121 " -a <srcmac|keyword> Use specified source mac address, no matter what has\n"
122 " been specified with other arguments; keywords see below,\n"
123 " Default is own interface\n"
124 " -b <dstmac|keyword> Same with destination mac address; keywords:\n"
125 " rand Use a random MAC address\n"
126 " bc Use a broadcast MAC address\n"
127 " own Use own interface MAC address (default for source MAC)\n"
128 " stp Use IEEE 802.1d STP multicast address\n"
129 " cisco Use Cisco multicast address as used for CDP, VTP, or PVST+\n"
130 " -A <srcip> Use specified source IP address (default is own interface IP)\n"
131 " -B <dstip|dnsname> Send packet to specified destination IP or domain name\n"
132 " -P <ascii payload> Use the specified ASCII payload\n"
133 " -f <filename> Read the ASCII payload from a file\n"
134 " -F <filename> Read the hexadecimal payload from a file\n"
135 " -Q <[CoS:]vlan> Specify 802.1Q VLAN tag and optional Class of Service, you can\n"
136 " specify multiple 802.1Q VLAN tags (QinQ...) by separating them\n"
137 " via a comma or a period (e.g. '5:10,20,2:30')\n"
138 " -t <packet-type> Specify packet type for autobuild (you don't need to care for\n"
139 " encapsulations in lower layers, most packet types allow/require\n"
140 " additional packet-specific arguments in an <arg-string>;\n"
141 " Currently supported types: arp, bpdu, cdp, ip, icmp, udp, tcp,\n"
142 " dns, rtp, syslog, lldp and more;\n"
143 " For context-help use 'help' as <arg-string>!\n"
144 " -T <packet-type> Specify packet type for server mode, currently only rtp is supported;\n"
145 " Enter -T help or -T rtp help for further information\n"
146 " -M <MPLS-label> Insert a MPLS label, enter '-M help' for a syntax description\n"
147 " -V|VV|... Verbose and more verbose mode\n"
148 " -q Quiet mode, even omit 'important' standard short messages\n"
149 " -S Simulation mode: DOES NOT put anything on the wire, this is\n"
150 " typically combined with one of the verbose modes (v or V)\n"
151 " -v Show version\n"
152 " -h Print this help\n\n"
153 "Examples:\n"
154 " mausezahn -x 99\n"
155 " mausezahn -c 0 -d 2s -t bpdu conf\n"
156 " mausezahn -t cdp change -c 0\n"
157 " mausezahn -t syslog sev=3 -P \"You have been mausezahned.\" -A 10.1.1.109 -B 192.168.7.7\n"
158 " mausezahn eth0 -A rand -B 1.1.1.1 -c 0 -t tcp \"dp=1-1023, flags=syn\"\n\n"
159 "Note:\n"
160 " This tool is targeted for network developers! You should\n"
161 " be aware of what you are doing and what these options above\n"
162 " mean! Only use this tool in an isolated LAN that you own!\n\n"
163 "Please report bugs to <bugs@netsniff-ng.org>\n"
164 "Copyright (C) 2008-2010 Herbert Haas <herbert@perihel.at>,\n"
165 "Copyright (C) 2011 Daniel Borkmann <dborkma@tik.ee.ethz.ch>,\n"
166 "Swiss federal institute of technology (ETH Zurich)\n"
167 "License: GNU GPL version 2.0\n"
168 "This is free software: you are free to change and redistribute it.\n"
169 "There is NO WARRANTY, to the extent permitted by law.\n");
170 die();
173 static void version(void)
175 printf("\nmausezahn %s, Git id: %s\n", VERSION_LONG, GITVERSION);
176 puts("a fast versatile traffic generator\n"
177 "http://www.netsniff-ng.org\n\n"
178 "Please report bugs to <bugs@netsniff-ng.org>\n"
179 "Copyright (C) 2008-2010 Herbert Haas <herbert@perihel.at>,\n"
180 "Copyright (C) 2011 Daniel Borkmann <dborkma@tik.ee.ethz.ch>,\n"
181 "Swiss federal institute of technology (ETH Zurich)\n"
182 "License: GNU GPL version 2.0\n"
183 "This is free software: you are free to change and redistribute it.\n"
184 "There is NO WARRANTY, to the extent permitted by law.\n");
185 die();
188 int reset(void)
190 int i;
191 time_t t;
193 // Determine platform type sizes:
194 MZ_SIZE_LONG_INT = sizeof(long int);
196 mz_default_config_path[0] = 0x00;
197 mz_default_log_path[0] = 0x00;
199 // Reset globals:
200 quiet = 0;
201 ipv6_mode = 0;
202 verbose = 0;
203 simulate = 0;
204 filename[0] = '\0';
205 path[0] = '\0';
206 gind=0;
207 gind_max = TIME_COUNT;
208 fp = NULL;
209 fp2 = NULL;
210 mz_port = 0;
211 mz_rand = 0;
212 char mz_listen_addr[16] = "0.0.0.0";
213 mp_head = NULL;
215 for (i=0;i<TIME_COUNT_MAX;i++) jitter[i] = 0;
217 time0_flag = 0; // If set then time0 has valid data
218 sqnr0_flag = 0; // If set then sqnr_last and sqnr_next has valid data
219 rtp_log = 0;
220 mz_ssrc[0]=0; mz_ssrc[1]=0; mz_ssrc[2]=0; mz_ssrc[3]=0;
222 // Reset mgmt parameters of TX:
223 tx.packet_mode = 1; // assume we don't care about L2
224 tx.count = 1;
225 tx.delay = DEFAULT_DELAY;
226 tx.arg_string[0] = '\0';
228 // Reset Ethernet parameters of TX:
229 tx.eth_params_already_set = 0;
230 for (i=0; i<6; i++) tx.eth_dst[i] = 0xff;
231 for (i=0; i<6; i++) tx.eth_src[i] = 0; // TODO: Get own MAC !!!
232 tx.eth_dst_txt[0] = '\0';
233 tx.eth_src_txt[0] = '\0';
234 tx.eth_dst_rand = 0;
235 tx.eth_src_rand = 0;
237 tx.eth_type = 0x800;
238 tx.eth_len = 0;
239 tx.eth_payload[0] = '\0';
240 tx.eth_payload_s = 0;
241 tx.padding = 0;
243 // Reset CDP parameters for TX:
244 tx.cdp_sum = 0;
245 tx.cdp_version = 0;
246 tx.cdp_ttl = 0;
247 tx.cdp_payload[0] = '\0';
248 tx.cdp_payload_s = 0;
249 tx.cdp_tlv_id[0] = '\0';
250 tx.cdp_tlv_id_len = 0;
252 // Reset 802.1Q parameters of TX:
253 tx.dot1Q=0;
254 tx.dot1Q_txt[0] = '\0';
256 // ASCII Payload:
257 tx.ascii = 0; // 1 if specified
258 tx.ascii_payload[0]= '\0';
260 // HEX Payload:
261 tx.hex_payload_s = 0;
263 // Reset MPLS parameters of TX:
264 tx.mpls = 0;
265 tx.mpls_txt[0] = '\0';
266 tx.mpls_label = 0;
267 tx.mpls_exp = 0;
268 tx.mpls_bos = 1;
269 tx.mpls_ttl = 255;
270 tx.mpls_verbose_string[0] = '\0';
272 // Reset IP parameters of TX:
273 tx.ip_src_txt[0] = '\0';
274 tx.ip_src_rand = 0;
275 tx.ip_dst_txt[0] = '\0';
276 tx.ip_src_isrange = 0;
277 tx.ip_src_start = 0;
278 tx.ip_src_stop = 0;
280 tx.ip_dst_start = 0;
281 tx.ip_dst_stop = 0;
282 tx.ip_dst_isrange = 0;
284 tx.ip_len = 0;
285 tx.ip_payload[0]= '\0';
286 tx.ip_payload_s = 0;
287 tx.ip_option[0]= '\0';
288 tx.ip_option_s = 0;
290 // Reset ICMP parameters:
291 tx.icmp_type=0;
292 tx.icmp_code=0;
293 tx.icmp_chksum=0; // 0=autofill
294 tx.icmp_ident=0x42;
295 tx.icmp_sqnr=0x1;
296 tx.icmp_payload_s=0;
298 // Reset general L4 parameters:
299 tx.sp = 0;
300 tx.dp = 0;
301 tx.sp_start = 0;
302 tx.sp_stop = 0;
303 tx.dp_start = 0;
304 tx.dp_stop = 0;
305 tx.sp_isrange = 0;
306 tx.dp_isrange = 0;
308 // Reset UDP parameters of TX:
310 tx.udp_len = 0; // If set to zero then create_udp_packet will calculate it
311 tx.udp_sum = 0;
312 tx.udp_payload[0] = '\0';
313 tx.udp_payload_s = 0;
315 // Reset TCP parameters of TX:
317 tx.tcp_seq = 42;
318 tx.tcp_seq_stop = 42;
319 tx.tcp_seq_delta = 0; // also used as 'isrange' meaning
320 tx.tcp_ack = 42;
321 tx.tcp_control = 0;
322 tx.tcp_win = 10000;
323 tx.tcp_sum = 0;
324 tx.tcp_urg = 0;
325 tx.tcp_len = 20; // Least size (TCP header only)
326 tx.tcp_payload[0] = '\0';
327 tx.tcp_payload_s = 0;
329 // Reset RTP parameters of TX:
330 tx.rtp_sqnr = 0;
331 tx.rtp_stmp = 0;
333 // Initialize random generator
334 time(&t);
335 srand((unsigned int)t);
337 // Reset device_list
338 for (i=0; i<MZ_MAX_DEVICES; i++) {
339 device_list[i].arprx_thread = 0;
340 device_list[i].p_arp = NULL;
341 device_list[i].arp_table = NULL;
342 device_list[i].ps=-1;
343 device_list[i].cli=0;
344 device_list[i].mgmt_only=0;
347 return 0;
352 // Purpose: Properly handle arguments and configure global structs (tx)
353 int getopts (int argc, char *argv[])
355 int i, c, rargs, RX=0, count_set=0, delay_set=0;
356 unsigned int time_factor;
357 char *packet_type=NULL, *mops_type=NULL;
358 char *dum;
359 unsigned char *dum1, *dum2;
361 libnet_t *l;
362 char err_buf[LIBNET_ERRBUF_SIZE];
363 struct libnet_ether_addr *mymac;
365 FILE *afp;
366 char hexpld[MAX_PAYLOAD_SIZE*2];
367 int hexpld_specified=0;
369 opterr = 1; // let getopt print error message if necessary
372 while ((c = getopt(argc, argv, short_options)) != -1)
373 switch (c) {
374 case '4':
375 tx.eth_type = 0x0800;
376 ipv6_mode=0;
377 break;
378 case '6':
379 tx.eth_type = 0x86dd;
380 ipv6_mode=1;
381 break;
382 case 'h':
383 help();
384 break;
385 case 'q':
386 quiet=1;
387 break;
388 case 'v':
389 version();
390 break;
391 case 'V':
392 verbose++;
393 break;
394 case 'S':
395 simulate=1;
396 break;
397 case 'x':
398 mz_port = MZ_DEFAULT_PORT;
399 break;
400 case 'l':
401 strncpy (mz_listen_addr, optarg, sizeof(mz_listen_addr));
402 break;
403 case 'a':
404 strncpy (tx.eth_src_txt, optarg, 32);
405 tx.packet_mode = 0;
406 break;
407 case 'A':
408 strncpy (tx.ip_src_txt, optarg, sizeof(tx.ip_src_txt));
409 break;
410 case 'b':
411 strncpy (tx.eth_dst_txt, optarg, 32);
412 tx.packet_mode = 0;
413 break;
414 case 'B':
415 strncpy (tx.ip_dst_txt, optarg, sizeof(tx.ip_dst_txt));
416 break;
417 case 'c':
418 errno=0;
419 tx.count = strtol(optarg, (char **)NULL, 10);
420 if ((errno == ERANGE && (tx.count == LONG_MAX || tx.count == LONG_MIN))
421 || (errno != 0 && tx.count == 0)) {
422 perror("strtol");
423 return (-1);
425 if (tx.count<0) tx.count=1; //TODO: Allow count=0 which means infinity (need to update all send_functions)
426 count_set=1;
427 break;
428 case 'd':
429 errno=0;
430 // determine whether seconds or msecs are used
431 // default is usec!!!
432 time_factor=1;
433 if (exists(optarg,"s") || exists(optarg,"sec")) time_factor=1000000;
434 if (exists(optarg,"m") || exists(optarg,"msec")) time_factor=1000;
435 dum = strtok(optarg,"ms");
436 tx.delay = strtol(dum, (char **)NULL, 10) * time_factor;
437 if ((errno == ERANGE && (tx.delay == LONG_MAX || tx.delay == LONG_MIN))
438 || (errno != 0 && tx.delay == 0)) {
439 perror("strtol");
440 return (-1);
442 if (tx.delay<0) tx.delay=0; // no delay
443 delay_set=1;
444 break;
445 case 'p':
446 errno=0;
447 tx.padding = strtol(optarg, (char **)NULL, 10);
448 if ((errno == ERANGE && (tx.padding == LONG_MAX || tx.padding == LONG_MIN))
449 || (errno != 0 && tx.padding == 0)) {
450 perror("strtol");
451 return (-1);
453 if (tx.padding>10000) {
454 fprintf(stderr, " Warning: Padding must not exceed 10000!\n");
455 return -1;
457 break;
458 case 't':
459 packet_type = optarg; // analyzed below
460 break;
461 case 'X':
462 mops_type = optarg; // MOPS TRANSITION STRATEGY -- analyzed below
463 break;
464 case 'T':
465 packet_type = optarg;
466 RX = 1;
467 break;
468 case 'r':
469 mz_rand = 1;
470 break;
471 case 'M':
472 if (strncmp(optarg,"help",4)==0) {
473 (void) get_mpls_params("help ");
475 else {
476 strncpy (tx.mpls_txt, optarg, 128);
477 tx.eth_type = ETHERTYPE_MPLS;
478 tx.packet_mode = 0;
479 tx.mpls=1;
481 break;
482 case 'P': // ASCII payload
483 strncpy((char*)tx.ascii_payload, optarg, MAX_PAYLOAD_SIZE);
484 tx.ascii = 1;
485 break;
486 case 'f': // ASCII payload in FILE
487 afp = fopen(optarg, "r");
488 if (fgets((char*)tx.ascii_payload, MAX_PAYLOAD_SIZE, afp) == NULL)
489 fprintf(stderr, " mz/getopts: File empty?\n");
490 fclose(afp);
491 tx.ascii = 1;
492 break;
493 case 'F': // HEX payload in FILE
494 afp = fopen(optarg, "r");
495 i=0;
496 while ( (hexpld[i]=fgetc(afp))!=EOF ) {
497 if (isspace(hexpld[i])) {
498 hexpld[i]=':';
500 i++;
502 hexpld[i]='\0';
503 fclose(afp);
504 hexpld_specified=1;
505 break;
506 case 'Q': // VLAN TAG
507 if (strncmp(optarg,"help",4)==0) {
508 print_dot1Q_help(); // ugly but most simple and safe solution
510 else {
511 strncpy (tx.dot1Q_txt, optarg, 32);
512 tx.dot1Q=1;
513 // determine number of VLAN tags
514 for (i=0; i<strlen(tx.dot1Q_txt); i++) {
515 if (tx.dot1Q_txt[i]==',') tx.dot1Q++;
517 tx.packet_mode = 0;
519 break;
520 case '?':
521 if ((optopt == 'a') || (optopt == 'b') || (optopt = 'c') ||
522 (optopt == 'd') || (optopt == 'f') || (optopt = 'p') ||
523 (optopt == 't') || (optopt == 'm'))
524 fprintf (stderr, " mz/getopts: Option -%c requires an argument.\n", optopt);
525 else if (isprint (optopt))
526 fprintf (stderr, " mz/getopts: Unknown option -%c'.\n", optopt);
527 else
528 fprintf (stderr, " mz/getopts: Unknown option character \\x%x'.\n", optopt);
529 return 1;
530 default:
531 fprintf (stderr," mz/getopts: Could not handle arguments properly!\n");
532 return 1;
535 // ********************************************
536 // Handle additional arguments
537 // ********************************************
539 // Greeting text
540 if (verbose) {
541 fprintf(stderr,"\n"
542 MAUSEZAHN_VERSION
543 "\n"
544 "Use at your own risk and responsibility!\n"
545 "-- Verbose mode --\n"
546 "\n");
549 if (argc<2) {
550 help();
553 if ((rargs=argc-optind)>2) { // number of remaining arguments
554 fprintf(stderr," mz/getopts: Too many arguments!\n");
555 return -1;
559 // There can be 0-2 additional arguments
560 switch (rargs) {
561 case 0:
562 if (lookupdev()) { // no device found
563 if (verbose) fprintf(stderr, " mz: no active interfaces found!\n");
564 strcpy(tx.device, "lo");
566 break;
567 case 1: // arg_string OR device given => find out!
568 if ( (strncmp(argv[optind],"eth",3)==0)
569 || (strncmp(argv[optind],"ath",3)==0)
570 || ((strncmp(argv[optind],"lo",2)==0)&&(strncmp(argv[optind],"log",3)!=0))
571 || (strncmp(argv[optind],"vmnet",5)==0)
572 || (strncmp(argv[optind],"wifi",4)==0) ) {
573 // device has been specified!
574 strncpy (tx.device, argv[optind], 16);
576 else { /// arg_string given => no device has been specified -- let's find one!
577 strncpy (tx.arg_string, argv[optind], MAX_PAYLOAD_SIZE);
578 if (lookupdev()) { // no device found
579 if (verbose) fprintf(stderr, " mz: no active interfaces found!\n");
580 strcpy(tx.device, "lo");
582 if (verbose)
583 fprintf(stderr," mz: device not given, will use %s\n",tx.device);
585 break;
586 case 2: // both device and arg_string given
587 strncpy (tx.device, argv[optind], 16);
588 strncpy (tx.arg_string, argv[optind+1], MAX_PAYLOAD_SIZE);
589 break;
590 default:
591 fprintf(stderr," mz/getopts: Unknown argument problem!\n");
592 return 1;
595 if (hexpld_specified) {
596 strcat(tx.arg_string, ",p=");
597 strcat(tx.arg_string, hexpld);
601 //////////////////////////////////////////////////////////////////////////
603 // Initialize MAC and IP Addresses.
605 // - tx.eth_src = own interface MAC
606 // - tx.ip_src = own interface IP or user specified
607 // - tx.ip_dst = 255.255.255.255 or user specified (can be a range)
608 // - tx.ip_src_rand ... is set if needed.
611 // Get own device MAC address:
612 // Don't open context if only a help text is requested
613 if (getarg(tx.arg_string,"help", NULL)!=1) {
614 l = libnet_init (LIBNET_LINK_ADV, tx.device, err_buf );
615 if (l == NULL) {
616 fprintf(stderr, " mz/getopts: libnet_init() failed (%s)", err_buf);
617 return -1;
619 mymac = libnet_get_hwaddr(l);
620 for (i=0; i<6; i++) {
621 tx.eth_src[i] = mymac->ether_addr_octet[i];
622 tx.eth_mac_own[i] = mymac->ether_addr_octet[i];
625 // Set source IP address:
626 if (strlen(tx.ip_src_txt)) { // option -A has been specified
627 if (mz_strcmp(tx.ip_src_txt, "bcast", 2)==0) {
628 tx.ip_src = libnet_name2addr4 (l, "255.255.255.255", LIBNET_DONT_RESOLVE);
629 } else if (strcmp(tx.ip_src_txt, "rand") == 0) {
630 tx.ip_src_rand = 1;
631 tx.ip_src_h = (u_int32_t) ( ((float) rand()/RAND_MAX)*0xE0000000); //this is 224.0.0.0
633 else if (get_ip_range_src(tx.ip_src_txt)) { // returns 1 when no range has been specified
634 // name2addr4 accepts a DOTTED DECIMAL ADDRESS or a FQDN:
635 if (ipv6_mode)
636 tx.ip6_src = libnet_name2addr6 (l, tx.ip_src_txt, LIBNET_RESOLVE);
637 else
638 tx.ip_src = libnet_name2addr4 (l, tx.ip_src_txt, LIBNET_RESOLVE);
641 else { // no source IP specified: by default use own IP address
642 if (ipv6_mode) {
643 tx.ip6_src = libnet_get_ipaddr6(l);
644 if (strncmp((char*)&tx.ip6_src,(char*)&in6addr_error,sizeof(in6addr_error))==0)
645 printf("Failed to set source IPv6 address: %s", l->err_buf);
647 else
648 tx.ip_src = libnet_get_ipaddr4(l);
651 // Set destination IP address:
652 if (strlen(tx.ip_dst_txt)) { // option -B has been specified
653 if (mz_strcmp(tx.ip_dst_txt, "rand", 2)==0) {
654 fprintf(stderr, "Option -B does not support random destination IP addresses currently.\n");
655 return 1;
658 if (mz_strcmp(tx.ip_dst_txt, "bcast", 2)==0) {
659 tx.ip_dst = libnet_name2addr4 (l, "255.255.255.255", LIBNET_DONT_RESOLVE);
660 } else if (get_ip_range_dst(tx.ip_dst_txt)) { // returns 1 when no range has been specified
661 // name2addr4 accepts a DOTTED DECIMAL ADDRESS or a FQDN:
662 if (ipv6_mode)
663 tx.ip6_dst = libnet_name2addr6 (l, tx.ip_dst_txt, LIBNET_RESOLVE);
664 else
665 tx.ip_dst = libnet_name2addr4 (l, tx.ip_dst_txt, LIBNET_RESOLVE);
668 else { // no destination IP specified: by default use broadcast
669 tx.ip_dst = libnet_name2addr4 (l, "255.255.255.255", LIBNET_DONT_RESOLVE);
672 // Initialize tx.ip_src_h and tx.ip_dst_h which are used by 'print_frame_details()'
673 // in verbose mode. See 'modifications.c'.
675 if (tx.ip_src_rand) { // ip_src_h already given, convert to ip_src
676 dum1 = (unsigned char*) &tx.ip_src_h;
677 dum2 = (unsigned char*) &tx.ip_src;
679 else { // ip_src already given, convert to ip_src_h
680 dum1 = (unsigned char*) &tx.ip_src;
681 dum2 = (unsigned char*) &tx.ip_src_h;
684 *dum2 = *(dum1+3);
685 dum2++;
686 *dum2 = *(dum1+2);
687 dum2++;
688 *dum2 = *(dum1+1);
689 dum2++;
690 *dum2 = *dum1;
692 dum1 = (unsigned char*) &tx.ip_dst;
693 dum2 = (unsigned char*) &tx.ip_dst_h;
695 *dum2 = *(dum1+3);
696 dum2++;
697 *dum2 = *(dum1+2);
698 dum2++;
699 *dum2 = *(dum1+1);
700 dum2++;
701 *dum2 = *dum1;
703 libnet_destroy(l);
707 // END OF ADDRESS INITIALIZATION
709 //////////////////////////////////////////////////////////////////////////
712 ////// retrieve interface parameters ///////
714 for (i=0; i<device_list_entries; i++) {
715 get_dev_params(device_list[i].dev);
719 //////////////////////////////////////////////////////////////////////////
721 // Mausezahn CLI desired?
722 if (mz_port) {
723 // has port number been specified?
724 if (strlen(tx.arg_string)) {
725 mz_port = (int) str2int (tx.arg_string);
728 mz_cli_init();
729 cli();
732 //////////////////////////////////////////////////////////////////////////
734 // Mode decision
736 // Consider -t and -m option (used exclusively)
737 // -t => special packet types, stateless
739 // If -t not present then evaluate arg_string which must
740 // contain a byte-string in hexadecimal notation.
744 // ***** NEW: MOPS TRANSITION STRATEGY *****
745 if (mops_type != NULL) {
747 if (mz_strcmp(mops_type,"lldp",4)==0) {
748 mops_direct(tx.device, MOPS_LLDP, tx.arg_string);
753 if (packet_type == NULL) { // raw hex string given
754 mode = BYTE_STREAM;
756 else if (strcmp(packet_type,"arp")==0) {
757 mode = ARP;
759 else if (strcmp(packet_type,"bpdu")==0) {
760 mode = BPDU;
762 else if (strcmp(packet_type,"ip")==0) {
763 mode = IP;
765 else if (strcmp(packet_type,"udp")==0) {
766 mode = UDP;
768 else if (strcmp(packet_type,"icmp")==0) {
769 mode = ICMP;
771 else if (strcmp(packet_type,"icmp6")==0) {
772 mode = ICMP6;
774 else if (strcmp(packet_type,"tcp")==0) {
775 mode = TCP;
777 else if (strcmp(packet_type,"dns")==0) {
778 mode = DNS;
780 else if (strcmp(packet_type,"cdp")==0) {
781 mode = CDP;
783 else if (strcmp(packet_type,"syslog")==0) {
784 mode = SYSLOG;
786 else if (strcmp(packet_type,"lldp")==0) {
787 mode = LLDP;
788 tx.packet_mode=0; // create whole frame by ourself
790 else if (strcmp(packet_type,"rtp")==0) {
791 if (RX) {
792 mode = RX_RTP;
794 else {
795 mode = RTP;
796 if (!count_set) tx.count = 0;
797 if (!delay_set) tx.delay = 20000; // 20 msec inter-packet delay for RTP
800 else if (strcmp(packet_type,"help")==0) {
801 fprintf(stderr, "\n"
802 MAUSEZAHN_VERSION
803 "\n"
804 "| The following packet types are currently implemented:\n"
805 "|\n"
806 "| arp ... sends ARP packets\n"
807 "| bpdu ... sends BPDU packets (STP or PVST+)\n"
808 "| cdp ... sends CDP messages\n"
809 "| ip ... sends IPv4 packets\n"
810 "| udp ... sends UDP datagrams\n"
811 "| tcp ... sends TCP segments\n"
812 "| icmp ... sends ICMP messages\n"
813 "| dns ... sends DNS messages\n"
814 "| rtp ... sends RTP datagrams\n"
815 "| syslog ... sends Syslog messages\n"
816 "|\n"
817 "| Of course you can build any other packet type 'manually' using the direct layer 2 mode.\n"
818 "| FYI: The interactive mode supports additional protocols. (Try mz -x <port>)\n"
819 "\n"
821 exit(1);
823 else {
824 fprintf(stderr, " mz: you must specify a valid packet type!\n");
828 //////////////////////////////////////////////////////////////////////////
830 // TODO: Implement macro support
831 // Check macro types here
833 return 0;
836 int main(int argc, char **argv)
838 // These handles are only used when creating L3 and above packets.
839 libnet_t *l; // the context
840 libnet_ptag_t t2=0, t3=0, t4=0; // handles to layers
841 double cpu_time_used;
843 reset();
845 if ( getopts(argc, argv) )
847 (void) fprintf(stderr, " Invalid command line parameters!\n");
848 help();
851 // Check whether hires timers are supported or not:
852 (void) check_timer();
854 signal(SIGINT, signal_handler); // to close all file pointers etc upon SIGINT
856 switch (mode)
858 case BYTE_STREAM:
859 send_eth();
860 break;
862 case ARP:
863 (void) send_arp();
864 break;
866 case BPDU:
867 (void) send_bpdu();
868 break;
870 case CDP:
871 (void) send_cdp();
872 break;
874 case IP: // From now on a new much more modular method is used:
875 l = get_link_context();
876 t3 = create_ip_packet(l); // t3 can be used for later header changes
877 if (!quiet) complexity();
878 if (tx.packet_mode==0) // Ethernet manipulation features does NOT use ARP to determine eth_dst
879 t2 = create_eth_frame(l, t3, t4); // t2 can be used for later header changes
880 else
881 send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
882 break;
884 case ICMP:
885 tx.ip_proto = 1;
886 l = get_link_context();
887 t4 = create_icmp_packet(l); // t4 can be used for later header changes
888 t3 = create_ip_packet(l); // t3 can be used for later header changes
889 if (!quiet) complexity();
890 if (tx.packet_mode==0) // Ethernet manipulation features does NOT use ARP to determine eth_dst
891 t2 = create_eth_frame(l, t3, t4); // t2 can be used for later header changes
892 else
893 send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
894 break;
896 case ICMP6:
897 tx.ip_proto = 58;
898 l = get_link_context();
899 t4 = create_icmp6_packet(l); // t4 can be used for later header changes
900 t3 = create_ip_packet(l); // t3 can be used for later header changes
901 if (ipv6_mode)
902 update_ISUM(l, t4);
903 if (!quiet) complexity();
904 if (tx.packet_mode==0) // Ethernet manipulation features does NOT use ARP to determine eth_dst
905 t2 = create_eth_frame(l, t3, t4); // t2 can be used for later header changes
906 else
907 send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
908 break;
910 case UDP:
911 tx.ip_proto = 17;
912 l = get_link_context();
913 t4 = create_udp_packet(l); // t4 can be used for later header changes
914 t3 = create_ip_packet(l); // t3 can be used for later header changes
915 if (ipv6_mode)
916 update_USUM(l, t4);
917 if (!quiet) complexity();
918 if (tx.packet_mode==0) // Ethernet manipulation features does NOT use ARP to determine eth_dst
919 t2 = create_eth_frame(l, t3, t4); // t2 can be used for later header changes
920 else
921 send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
922 break;
924 case TCP:
925 tx.ip_proto = 6;
926 l = get_link_context();
927 t4 = create_tcp_packet(l); // t4 can be used for later header changes
928 t3 = create_ip_packet(l); // t3 can be used for later header changes
929 if (ipv6_mode)
930 update_TSUM(l, t4);
931 if (!quiet) complexity();
932 if (tx.packet_mode==0) // Ethernet manipulation features does NOT use ARP to determine eth_dst
933 t2 = create_eth_frame(l, t3, t4); // t2 can be used for later header changes
934 else
935 send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
936 break;
938 case DNS:
939 tx.ip_proto = 17;
940 l = get_link_context();
941 (void) create_dns_packet();
942 t4 = create_udp_packet(l); // t4 can be used for later header changes
943 t3 = create_ip_packet(l); // t3 can be used for later header changes
944 if (!quiet) complexity();
945 if (tx.packet_mode==0) // Ethernet manipulation features does NOT use ARP to determine eth_dst
946 t2 = create_eth_frame(l, t3, t4); // t2 can be used for later header changes
947 else
948 send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
949 break;
951 case RTP:
952 tx.ip_proto = 17;
953 l = get_link_context();
954 if (!quiet) fprintf(stderr, " mz: RTP mode! (count=%u, delay=%u usec)\n\n", tx.count, tx.delay);
955 (void) create_rtp_packet();
956 t4 = create_udp_packet(l); // t4 can be used for later header changes
957 t3 = create_ip_packet(l); // t3 can be used for later header changes
958 if (!quiet) complexity();
959 if (tx.packet_mode==0) // Ethernet manipulation features does NOT use ARP to determine eth_dst
960 t2 = create_eth_frame(l, t3, t4); // t2 can be used for later header changes
961 else
962 send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
963 break;
965 case RX_RTP: // Receive RTP packets
966 rcv_rtp_init();
967 rcv_rtp();
968 break;
970 case SYSLOG:
971 tx.ip_proto = 17;
972 l = get_link_context();
973 (void) create_syslog_packet();
974 t4 = create_udp_packet(l); // t4 can be used for later header changes
975 t3 = create_ip_packet(l); // t3 can be used for later header changes
976 if (!quiet) complexity();
978 if (tx.packet_mode==0) // Ethernet manipulation features does NOT use ARP to determine eth_dst
979 t2 = create_eth_frame(l, t3, t4); // t2 can be used for later header changes
980 else
981 send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
982 break;
984 case LLDP: // start with a new concept here
985 //l = get_link_context();
986 //(void) create_lldp_packet();
987 // // // printf("SIZE=%lu\n",sizeof(struct tx_struct));
988 fprintf(stderr, "LLDP is currently only supported via the interactive mode\n");
989 exit(1);
990 break;
993 default:
994 (void) fprintf(stderr," mz/main: unknown mode! Stop.\n");
995 return (1);
998 if (!quiet)
1000 mz_stop = clock();
1001 cpu_time_used = ((double) (mz_stop - mz_start)) / CLOCKS_PER_SEC;
1002 if (cpu_time_used > 0)
1004 total_d /= cpu_time_used;
1005 fprintf(stderr, "%.2f seconds (%.Lf packets per second)\n",cpu_time_used,total_d);
1007 else
1009 fprintf(stderr, "\n");
1013 return(0);