staging/mausezahn.c

   1 /*
   2  * netsniff-ng - the packet sniffing beast
   3  * Mausezahn, a fast versatile traffic generator
   4  * Copyright 2008, 2009, 2010 Herbert Haas.
   5  * Subject to the GPL, version 2.
   6  */
   7
   8 #define _GNU_SOURCE
   9 #include <libnet.h>
  10 #include <pcap/pcap.h>
  11 #include <stdio.h>
  12 #include <unistd.h>
  13 #include <string.h>
  14 #include <stdlib.h>
  15 #include <errno.h>
  16 #include <limits.h>
  17 #include <sys/time.h>
  18 #include <time.h>
  19 #include <signal.h>
  20 #include <sys/types.h>
  21 #include <sys/socket.h>
  22 #include <arpa/inet.h>
  23 #include <sys/ioctl.h>
  24 #include <netinet/in.h>
  25 #include <stdarg.h>
  26
  27 #include "mz.h"
  28 #include "cli.h"
  29 #include "mops.h"
  30 #include "config.h"
  31 #include "llist.h"
  32 #include "die.h"
  33 #include "dev.h"
  34
  35 int verbose_level = 0;
  36
  37 static const char *short_options = "46hqvVSxra:A:b:B:c:d:E:f:F:l:p:P:t:T:M:Q:X:";
  38
  39 static void signal_handler(int number)
  40 {
  41         clean_up(number);
  42 }
  43
  44 void  clean_up(int sig)
  45 {
  46         int i;
  47         struct arp_table_struct *cur, *next;
  48
  49         if (!quiet) fprintf(stderr, "\nMausezahn cleans up...\n");
  50
  51         if (fp != NULL) {
  52                 verbose_l1(" close files (1) ...\n");
  53
  54                 fflush(fp);
  55                 fclose(fp);
  56         }
  57
  58         if (fp2!=NULL) {
  59                 if (verbose) fprintf(stderr, " close files (2) ...\n");
  60                 (void) fflush(fp2);
  61                 (void) fclose(fp2);
  62         }
  63
  64         // interactive mode?
  65         if (mz_port) {
  66                 if (verbose) fprintf(stderr, " clear mops list...\n");
  67                 mops_cleanup(mp_head);
  68                 if (verbose) fprintf(stderr, " clear automops list...\n");
  69                 automops_cleanup(amp_head);
  70                 if (verbose) fprintf(stderr, " clear packet sequences...\n");
  71                 mz_ll_delete_list(packet_sequences);
  72         }
  73
  74         for (i=0; i<device_list_entries; i++) {
  75                 if (device_list[i].p_arp!=NULL) {
  76                         pcap_close(device_list[i].p_arp);
  77                         fprintf(stderr, " stopped ARP process for device %s\n", device_list[i].dev);
  78                 }
  79                 if (device_list[i].arprx_thread!=0) {
  80                         pthread_cancel(device_list[i].arprx_thread);
  81                         if (verbose)
  82                                 fprintf(stderr, " (ARP thread for device %s done)\n", device_list[i].dev);
  83                 }
  84
  85                 if (device_list[i].arp_table!=NULL) {
  86                         cur=device_list[i].arp_table;
  87                         while (cur!=NULL) {
  88                                 next = cur->next;
  89                                 if (cur!=NULL) free(cur);
  90                                 cur=next;
  91                         }
  92                 }
  93
  94                 // close packet sockets
  95                 if (device_list[i].ps>=0) {
  96                         close(device_list[i].ps);
  97                 }
  98
  99         }
 100
 101         if (verbose) fprintf(stderr, "finished.\n");
 102         exit(sig);
 103 }
 104
 105
 106 static void help(void)
 107 {
 108         printf("\nmausezahn %s, a fast versatile traffic generator\n", VERSION_STRING);
 109         puts("http://www.netsniff-ng.org\n\n"
 110              "Usage: mausezahn [options] [interface] <keyword>|<arg-string>|<hex-string>\n"
 111              "Options:\n"
 112              "  -x <port>             Interactive mode with telnet CLI, default port: 25542\n"
 113              "  -l <ip>               Listen address to bind to when in interactive mode, default: 0.0.0.0\n"
 114              "  -4                    IPv4 mode (default)\n"
 115              "  -6                    IPv6 mode\n"
 116              "  -c <count>            Send packet count times, default:1, infinite:0\n"
 117              "  -d <delay>            Apply delay between transmissions. The delay value can be\n"
 118              "                        specified in usec (default, no additional unit needed), or in\n"
 119              "                        msec (e.g. 100m or 100msec), or in seconds (e.g. 100s or 100sec)\n"
 120              "  -r                    Multiplies the specified delay with a random value\n"
 121              "  -p <length>           Pad the raw frame to specified length (using random bytes)\n"
 122              "  -a <srcmac|keyword>   Use specified source mac address, no matter what has\n"
 123              "                        been specified with other arguments; keywords see below,\n"
 124              "                        Default is own interface\n"
 125              "  -b <dstmac|keyword>   Same with destination mac address; keywords:\n"
 126              "     rand               Use a random MAC address\n"
 127              "     bc                 Use a broadcast MAC address\n"
 128              "     own                Use own interface MAC address (default for source MAC)\n"
 129              "     stp                Use IEEE 802.1d STP multicast address\n"
 130              "     cisco              Use Cisco multicast address as used for CDP, VTP, or PVST+\n"
 131              "  -A <srcip>            Use specified source IP address (default is own interface IP)\n"
 132              "  -B <dstip|dnsname>    Send packet to specified destination IP or domain name\n"
 133              "  -P <ascii payload>    Use the specified ASCII payload\n"
 134              "  -f <filename>         Read the ASCII payload from a file\n"
 135              "  -F <filename>         Read the hexadecimal payload from a file\n"
 136              "  -Q <[CoS:]vlan>       Specify 802.1Q VLAN tag and optional Class of Service, you can\n"
 137              "                        specify multiple 802.1Q VLAN tags (QinQ...) by separating them\n"
 138              "                        via a comma or a period (e.g. '5:10,20,2:30')\n"
 139              "  -t <packet-type|help> Specify packet type for autobuild (you don't need to care for\n"
 140              "                        encapsulations in lower layers, most packet types allow/require\n"
 141              "                        additional packet-specific arguments in an <arg-string>;\n"
 142              "                        Currently supported types: arp, bpdu, cdp, ip, icmp, udp, tcp,\n"
 143              "                        dns, rtp, syslog, lldp and more;\n"
 144              "                        For context-help use 'help' as <arg-string>!\n"
 145              "  -T <packet-type>      Specify packet type for server mode, currently only rtp is supported;\n"
 146              "                        Enter -T help or -T rtp help for further information\n"
 147              "  -M <MPLS-label>       Insert a MPLS label, enter '-M help' for a syntax description\n"
 148              "  -V|VV|...             Verbose and more verbose mode\n"
 149              "  -q                    Quiet mode, even omit 'important' standard short messages\n"
 150              "  -S                    Simulation mode: DOES NOT put anything on the wire, this is\n"
 151              "                        typically combined with one of the verbose modes (v or V)\n"
 152              "  -v                    Show version\n"
 153              "  -h                    Print this help\n\n"
 154              "Examples:\n"
 155              "  mausezahn -x 99\n"
 156              "  mausezahn -c 0 -d 2s -t bpdu conf\n"
 157              "  mausezahn -t cdp change -c 0\n"
 158              "  mausezahn -t syslog sev=3 -P \"You have been mausezahned.\" -A 10.1.1.109 -B 192.168.7.7\n"
 159              "  mausezahn eth0 -A rand -B 1.1.1.1 -c 0 -t tcp \"dp=1-1023, flags=syn\"\n\n"
 160              "Note:\n"
 161              "  This tool is targeted for network developers! You should\n"
 162              "  be aware of what you are doing and what these options above\n"
 163              "  mean! Only use this tool in an isolated LAN that you own!\n\n"
 164              "Please report bugs to <bugs@netsniff-ng.org>\n"
 165              "Copyright (C) 2008-2010 Herbert Haas <herbert@perihel.at>,\n"
 166              "Copyright (C) 2011 Daniel Borkmann <dborkma@tik.ee.ethz.ch>,\n"
 167              "Swiss federal institute of technology (ETH Zurich)\n"
 168              "License: GNU GPL version 2.0\n"
 169              "This is free software: you are free to change and redistribute it.\n"
 170              "There is NO WARRANTY, to the extent permitted by law.\n");
 171         die();
 172 }
 173
 174 static void version(void)
 175 {
 176         printf("\nmausezahn %s, Git id: %s\n", VERSION_LONG, GITVERSION);
 177         puts("a fast versatile traffic generator\n"
 178              "http://www.netsniff-ng.org\n\n"
 179              "Please report bugs to <bugs@netsniff-ng.org>\n"
 180              "Copyright (C) 2008-2010 Herbert Haas <herbert@perihel.at>,\n"
 181              "Copyright (C) 2011 Daniel Borkmann <dborkma@tik.ee.ethz.ch>,\n"
 182              "Swiss federal institute of technology (ETH Zurich)\n"
 183              "License: GNU GPL version 2.0\n"
 184              "This is free software: you are free to change and redistribute it.\n"
 185              "There is NO WARRANTY, to the extent permitted by law.\n");
 186         die();
 187 }
 188
 189 int reset(void)
 190 {
 191    int i;
 192    time_t t;
 193
 194    // Determine platform type sizes:
 195    MZ_SIZE_LONG_INT = sizeof(long int);
 196
 197    mz_default_config_path[0] = 0x00;
 198    mz_default_log_path[0] = 0x00;
 199
 200    // Reset globals:
 201    quiet = 0;
 202    ipv6_mode = 0;
 203    verbose = 0;
 204    simulate = 0;
 205    filename[0] = '\0';
 206    path[0] = '\0';
 207    gind=0;
 208    gind_max = TIME_COUNT;
 209    fp = NULL;
 210    fp2 = NULL;
 211    mz_port = 0;
 212    mz_rand = 0;
 213    char mz_listen_addr[16] = "0.0.0.0";
 214    mp_head = NULL;
 215
 216    for (i=0;i<TIME_COUNT_MAX;i++) jitter[i] = 0;
 217
 218    time0_flag = 0; // If set then time0 has valid data
 219    sqnr0_flag = 0; // If set then sqnr_last and sqnr_next has valid data
 220    rtp_log = 0;
 221    mz_ssrc[0]=0; mz_ssrc[1]=0; mz_ssrc[2]=0; mz_ssrc[3]=0;
 222
 223    // Reset mgmt parameters of TX:
 224    tx.packet_mode = 1;     // assume we don't care about L2
 225    tx.count = 1;
 226    tx.delay = DEFAULT_DELAY;
 227    tx.arg_string[0] = '\0';
 228
 229    // Reset Ethernet parameters of TX:
 230    tx.eth_params_already_set = 0;
 231    for (i=0; i<6; i++)   tx.eth_dst[i] = 0xff;
 232    for (i=0; i<6; i++)   tx.eth_src[i] = 0; // TODO: Get own MAC !!!
 233    tx.eth_dst_txt[0] = '\0';
 234    tx.eth_src_txt[0] = '\0';
 235    tx.eth_dst_rand = 0;
 236    tx.eth_src_rand = 0;
 237
 238    tx.eth_type = 0x800;
 239    tx.eth_len = 0;
 240    tx.eth_payload[0] = '\0';
 241    tx.eth_payload_s = 0;
 242    tx.padding = 0;
 243
 244    // Reset CDP parameters for TX:
 245    tx.cdp_sum  = 0;
 246    tx.cdp_version = 0;
 247    tx.cdp_ttl = 0;
 248    tx.cdp_payload[0] = '\0';
 249    tx.cdp_payload_s = 0;
 250    tx.cdp_tlv_id[0] = '\0';
 251    tx.cdp_tlv_id_len = 0;
 252
 253    // Reset 802.1Q parameters of TX:
 254    tx.dot1Q=0;
 255    tx.dot1Q_txt[0] = '\0';
 256
 257    // ASCII Payload:
 258    tx.ascii = 0;                       // 1 if specified
 259    tx.ascii_payload[0]= '\0';
 260
 261    // HEX Payload:
 262    tx.hex_payload_s = 0;
 263
 264    // Reset MPLS parameters of TX:
 265    tx.mpls = 0;
 266    tx.mpls_txt[0] = '\0';
 267    tx.mpls_label = 0;
 268    tx.mpls_exp = 0;
 269    tx.mpls_bos = 1;
 270    tx.mpls_ttl = 255;
 271    tx.mpls_verbose_string[0] = '\0';
 272
 273    // Reset IP parameters of TX:
 274    tx.ip_src_txt[0] = '\0';
 275    tx.ip_src_rand = 0;
 276    tx.ip_dst_txt[0] = '\0';
 277    tx.ip_src_isrange = 0;
 278    tx.ip_src_start = 0;
 279    tx.ip_src_stop = 0;
 280    memset(&tx.ip6_src_start, 0, sizeof(tx.ip6_src_start));
 281    memset(&tx.ip6_src_stop, 0, sizeof(tx.ip6_src_stop));
 282
 283    tx.ip_dst_start = 0;
 284    tx.ip_dst_stop = 0;
 285    memset(&tx.ip6_dst_start, 0, sizeof(tx.ip6_dst_start));
 286    memset(&tx.ip6_dst_stop, 0, sizeof(tx.ip6_dst_stop));
 287    tx.ip_dst_isrange = 0;
 288
 289    tx.ip_ttl = 0;
 290    tx.ip_len = 0;
 291    tx.ip_payload[0]= '\0';
 292    tx.ip_payload_s = 0;
 293    tx.ip_option[0]= '\0';
 294    tx.ip_option_s = 0;
 295
 296    // Reset ICMP parameters:
 297    tx.icmp_type=0;
 298    tx.icmp_code=0;
 299    tx.icmp_chksum=0;            // 0=autofill
 300    tx.icmp_ident=0x42;
 301    tx.icmp_sqnr=0x1;
 302    tx.icmp_payload_s=0;
 303
 304    // Reset general L4 parameters:
 305    tx.sp = 0;
 306    tx.dp = 0;
 307    tx.sp_start = 0;
 308    tx.sp_stop = 0;
 309    tx.dp_start = 0;
 310    tx.dp_stop = 0;
 311    tx.sp_isrange = 0;
 312    tx.dp_isrange = 0;
 313
 314    // Reset UDP parameters of TX:
 315
 316    tx.udp_len = 0;                    // If set to zero then create_udp_packet will calculate it
 317    tx.udp_sum = 0;
 318    tx.udp_payload[0] = '\0';
 319    tx.udp_payload_s = 0;
 320
 321    // Reset TCP parameters of TX:
 322
 323    tx.tcp_seq = 42;
 324    tx.tcp_seq_stop = 42;
 325    tx.tcp_seq_delta = 0;              // also used as 'isrange' meaning
 326    tx.tcp_ack = 42;
 327    tx.tcp_control = 0;
 328    tx.tcp_win = 10000;
 329    tx.tcp_sum = 0;
 330    tx.tcp_urg = 0;
 331    tx.tcp_len = 20;                   // Least size (TCP header only)
 332    tx.tcp_payload[0] = '\0';
 333    tx.tcp_payload_s = 0;
 334
 335    // Reset RTP parameters of TX:
 336    tx.rtp_sqnr = 0;
 337    tx.rtp_stmp = 0;
 338
 339    // Initialize random generator
 340    time(&t);
 341    srand((unsigned int)t);
 342
 343    // Reset device_list
 344    for (i=0; i<MZ_MAX_DEVICES; i++) {
 345            device_list[i].arprx_thread = 0;
 346            device_list[i].p_arp = NULL;
 347            device_list[i].arp_table = NULL;
 348            device_list[i].ps=-1;
 349            device_list[i].cli=0;
 350            device_list[i].mgmt_only=0;
 351    }
 352
 353    return 0;
 354 }
 355
 356 static void print_packet_types(void)
 357 {
 358         fprintf(stderr, "\n"
 359             MAUSEZAHN_VERSION
 360             "\n"
 361             "|  The following packet types are currently implemented:\n"
 362             "|\n"
 363             "|  arp            ... sends ARP packets\n"
 364             "|  bpdu           ... sends BPDU packets (STP or PVST+)\n"
 365             "|  cdp            ... sends CDP messages\n"
 366             "|  ip             ... sends IPv4 packets\n"
 367             "|  udp            ... sends UDP datagrams\n"
 368             "|  tcp            ... sends TCP segments\n"
 369             "|  icmp           ... sends ICMP messages\n"
 370             "|  igmp           ... sends IGMP messages\n"
 371             "|  dns            ... sends DNS messages\n"
 372             "|  rtp            ... sends RTP datagrams\n"
 373             "|  syslog         ... sends Syslog messages\n"
 374             "|\n"
 375             "| Of course you can build any other packet type 'manually' using the direct layer 2 mode.\n"
 376             "| FYI: The interactive mode supports additional protocols. (Try mz -x <port>)\n"
 377             "\n");
 378
 379         die();
 380 }
 381
 382 // Purpose: Properly handle arguments and configure global structs (tx)
 383 int getopts (int argc, char *argv[])
 384 {
 385         int i, c, rargs, RX=0, count_set=0, delay_set=0;
 386         unsigned int time_factor;
 387         char *packet_type=NULL, *mops_type=NULL;
 388         char *dum;
 389         unsigned char *dum1, *dum2;
 390         bool do_help = false;
 391
 392         libnet_t       *l;
 393         char err_buf[LIBNET_ERRBUF_SIZE];
 394         struct libnet_ether_addr *mymac;
 395
 396         FILE *afp;
 397         char hexpld[MAX_PAYLOAD_SIZE*2];
 398         int hexpld_specified=0;
 399
 400         opterr = 1; // let getopt print error message if necessary
 401
 402
 403         while ((c = getopt(argc, argv, short_options)) != -1)
 404                 switch (c) {
 405                  case '4':
 406                         tx.eth_type = 0x0800;
 407                         ipv6_mode=0;
 408                         break;
 409                  case '6':
 410                         tx.eth_type = 0x86dd;
 411                         ipv6_mode=1;
 412                         break;
 413                  case 'h':
 414                         help();
 415                         break;
 416                  case 'q':
 417                         quiet=1;
 418                         break;
 419                  case 'v':
 420                         version();
 421                         break;
 422                  case 'V':
 423                         verbose++;
 424                         break;
 425                  case 'S':
 426                         simulate=1;
 427                         break;
 428                  case 'x':
 429                         mz_port = MZ_DEFAULT_PORT;
 430                         break;
 431                  case 'l':
 432                         strncpy (mz_listen_addr, optarg, sizeof(mz_listen_addr));
 433                         break;
 434                  case 'a':
 435                         strncpy (tx.eth_src_txt, optarg, 32);
 436                         tx.packet_mode = 0;
 437                         break;
 438                  case 'A':
 439                         strncpy (tx.ip_src_txt, optarg, sizeof(tx.ip_src_txt));
 440                         break;
 441                  case 'b':
 442                         strncpy (tx.eth_dst_txt, optarg, 32);
 443                         tx.packet_mode = 0;
 444                         break;
 445                  case 'B':
 446                         strncpy (tx.ip_dst_txt, optarg, sizeof(tx.ip_dst_txt));
 447                         break;
 448                  case 'c':
 449                         errno=0;
 450                         tx.count = strtol(optarg, (char **)NULL, 10);
 451                         if ((errno == ERANGE && (tx.count == LONG_MAX || tx.count == LONG_MIN))
 452                             || (errno != 0 && tx.count == 0)) {
 453                                 perror("strtol");
 454                                 return (-1);
 455                         }
 456                         if (tx.count<0) tx.count=1;       //TODO: Allow count=0 which means infinity (need to update all send_functions)
 457                         count_set=1;
 458                         break;
 459                  case 'd':
 460                         errno=0;
 461                         // determine whether seconds or msecs are used
 462                         // default is usec!!!
 463                         time_factor=1;
 464                         if (exists(optarg,"s") || exists(optarg,"sec")) time_factor=1000000;
 465                         if (exists(optarg,"m") || exists(optarg,"msec")) time_factor=1000;
 466                         dum = strtok(optarg,"ms");
 467                         tx.delay = strtol(dum, (char **)NULL, 10) * time_factor;
 468                         if ((errno == ERANGE && (tx.delay == LONG_MAX || tx.delay == LONG_MIN))
 469                             || (errno != 0 && tx.delay == 0)) {
 470                                 perror("strtol");
 471                                 return (-1);
 472                         }
 473                         if (tx.delay<0) tx.delay=0; // no delay
 474                         delay_set=1;
 475                         break;
 476                  case 'p':
 477                         errno=0;
 478                         tx.padding = strtol(optarg, (char **)NULL, 10);
 479                         if ((errno == ERANGE && (tx.padding == LONG_MAX || tx.padding == LONG_MIN))
 480                             || (errno != 0 && tx.padding == 0))  {
 481                                 perror("strtol");
 482                                 return (-1);
 483                         }
 484                         if (tx.padding>10000) {
 485                                 fprintf(stderr, " Warning: Padding must not exceed 10000!\n");
 486                                 return -1;
 487                         }
 488                         break;
 489                  case 't':
 490                         packet_type = optarg; // analyzed below
 491                         if (strcmp(packet_type,"help") == 0)
 492                                 print_packet_types();
 493                         break;
 494                  case 'X':
 495                         mops_type = optarg; // MOPS TRANSITION STRATEGY -- analyzed below
 496                         break;
 497                  case 'T':
 498                         packet_type = optarg;
 499                         RX = 1;
 500                         break;
 501                  case 'r':
 502                         mz_rand = 1;
 503                         break;
 504                  case 'M':
 505                         if (strncmp(optarg,"help",4)==0) {
 506                                 (void) get_mpls_params("help ");
 507                         }
 508                         else {
 509                                 strncpy (tx.mpls_txt, optarg, 128);
 510                                 tx.eth_type = ETHERTYPE_MPLS;
 511                                 tx.packet_mode = 0;
 512                                 tx.mpls=1;
 513                         }
 514                         break;
 515                  case 'P':  // ASCII payload
 516                         strncpy((char*)tx.ascii_payload,  optarg, MAX_PAYLOAD_SIZE);
 517                         tx.ascii = 1;
 518                         break;
 519                  case 'f': // ASCII payload in FILE
 520                         afp = fopen(optarg, "r");
 521                         if (!afp) {
 522                                 fprintf(stderr, " mz/getopts: Can not open file %s. %s!\n", optarg, strerror(errno));
 523                                 return -1;
 524                         }
 525                         if (fgets((char*)tx.ascii_payload, MAX_PAYLOAD_SIZE, afp) == NULL)
 526                                 fprintf(stderr, " mz/getopts: File empty?\n");
 527                         fclose(afp);
 528                         tx.ascii = 1;
 529                         break;
 530                  case 'F': // HEX payload in FILE
 531                         afp = fopen(optarg, "r");
 532                         if (!afp) {
 533                                 fprintf(stderr, " mz/getopts: Can not open file %s. %s!\n", optarg, strerror(errno));
 534                                 return -1;
 535                         }
 536                         i=0;
 537                         while ( (hexpld[i]=fgetc(afp))!=EOF ) {
 538                                 if (isspace(hexpld[i])) {
 539                                         hexpld[i]=':';
 540                                 }
 541                                 i++;
 542                         }
 543                         hexpld[i]='\0';
 544                         fclose(afp);
 545                         hexpld_specified=1;
 546                         break;
 547                  case 'Q': // VLAN TAG
 548                         if (strncmp(optarg,"help",4)==0) {
 549                                 print_dot1Q_help(); // ugly but most simple and safe solution
 550                         }
 551                         else {
 552                                 strncpy (tx.dot1Q_txt, optarg, 32);
 553                                 tx.dot1Q=1;
 554                                 // determine number of VLAN tags
 555                                 for (i=0; i<strlen(tx.dot1Q_txt); i++) {
 556                                         if (tx.dot1Q_txt[i]==',') tx.dot1Q++;
 557                                 }
 558                                 tx.packet_mode = 0;
 559                         }
 560                         break;
 561                  case '?':
 562                         if ((optopt == 'a') || (optopt == 'b') || (optopt = 'c') ||
 563                             (optopt == 'd') || (optopt == 'f') || (optopt = 'p') ||
 564                             (optopt == 't') || (optopt == 'm'))
 565                                 fprintf (stderr, " mz/getopts: Option -%c requires an argument.\n", optopt);
 566                         else if (isprint (optopt))
 567                                 fprintf (stderr, " mz/getopts: Unknown option -%c'.\n", optopt);
 568                         else
 569                                 fprintf (stderr, " mz/getopts: Unknown option character \\x%x'.\n", optopt);
 570                         return 1;
 571                  default:
 572                         fprintf (stderr," mz/getopts: Could not handle arguments properly!\n");
 573                         return 1;
 574                 }
 575
 576         // ********************************************
 577         //       Handle additional arguments
 578         // ********************************************
 579         //
 580         // Greeting text
 581         if (verbose) {
 582                 fprintf(stderr,"\n"
 583                         MAUSEZAHN_VERSION
 584                         "\n"
 585                         "Use at your own risk and responsibility!\n"
 586                         "-- Verbose mode --\n"
 587                         "\n");
 588         }
 589
 590         if (argc<2) {
 591                 help();
 592         }
 593
 594         if ((rargs=argc-optind)>2) {  // number of remaining arguments
 595                 fprintf(stderr," mz/getopts: Too many arguments!\n");
 596                 return -1;
 597         }
 598
 599
 600         // There can be 0-2 additional arguments
 601         switch (rargs) {
 602          case 0:
 603                 if (lookupdev()) { // no device found
 604                         if (verbose) fprintf(stderr, " mz: no active interfaces found!\n");
 605                         strcpy(tx.device, "lo");
 606                 }
 607                 break;
 608          case 1: // arg_string OR device given => find out!
 609                 if (__device_ifindex(argv[optind]) > 0) {
 610                         strncpy(tx.device, argv[optind], 16);
 611                 }
 612                 else { /// arg_string given => no device has been specified -- let's find one!
 613                         strncpy (tx.arg_string, argv[optind], MAX_PAYLOAD_SIZE);
 614                         do_help = !!getarg(tx.arg_string,"help", NULL);
 615                         if (!do_help) {
 616                                 if (lookupdev()) {
 617                                         /* no device found */
 618                                         if (verbose)
 619                                                 fprintf(stderr, " mz: no active interfaces found!\n");
 620                                         strcpy(tx.device, "lo");
 621                                 }
 622                                 if (verbose)
 623                                         fprintf(stderr," mz: device not given, will use %s\n",tx.device);
 624                         }
 625                 }
 626                 break;
 627          case 2: // both device and arg_string given
 628                 strncpy (tx.device, argv[optind], 16);
 629                 strncpy (tx.arg_string, argv[optind+1], MAX_PAYLOAD_SIZE);
 630                 break;
 631          default:
 632                 fprintf(stderr," mz/getopts: Unknown argument problem!\n");
 633                 return 1;
 634         }
 635
 636         if (hexpld_specified) {
 637                 strcat(tx.arg_string, ",p=");
 638                 strcat(tx.arg_string, hexpld);
 639         }
 640
 641
 642         //////////////////////////////////////////////////////////////////////////
 643         //
 644         // Initialize MAC and IP Addresses.
 645         //
 646         // - tx.eth_src = own interface MAC
 647         // - tx.ip_src  = own interface IP or user specified
 648         // - tx.ip_dst  = 255.255.255.255 or user specified (can be a range)
 649         // - tx.ip_src_rand ... is set if needed.
 650         //
 651
 652         // Get own device MAC address:
 653         // Don't open context if only a help text is requested
 654         if  (!do_help && getarg(tx.arg_string,"help", NULL) !=1) {
 655                 l = libnet_init (LIBNET_LINK_ADV, tx.device, err_buf );
 656                 if (l == NULL) {
 657                         fprintf(stderr, " mz/getopts: libnet_init() failed (%s)", err_buf);
 658                         return -1;
 659                 }
 660                 mymac = libnet_get_hwaddr(l);
 661                 for (i=0; i<6; i++) {
 662                         tx.eth_src[i] = mymac->ether_addr_octet[i];
 663                         tx.eth_mac_own[i] = mymac->ether_addr_octet[i];
 664                 }
 665
 666                 // Set source IP address:
 667                 if (strlen(tx.ip_src_txt)) { // option -A has been specified
 668                         if (mz_strcmp(tx.ip_src_txt, "bcast", 2)==0) {
 669                                 if (ipv6_mode) {
 670                                         fprintf(stderr, "Option -A does not support 'bcast' when in IPv6 mode.\n");
 671                                         return 1;
 672                                 }
 673                                 tx.ip_src = libnet_name2addr4 (l, "255.255.255.255", LIBNET_DONT_RESOLVE);
 674                         } else if (strcmp(tx.ip_src_txt, "rand") == 0) {
 675                                 if (ipv6_mode) {
 676                                         fprintf(stderr, "Option -A does not support 'rand' when in IPv6 mode.\n");
 677                                         return 1;
 678                                 }
 679                                 tx.ip_src_rand = 1;
 680                                 tx.ip_src_h  = (u_int32_t) ( ((float) rand()/RAND_MAX)*0xE0000000); //this is 224.0.0.0
 681                         }
 682                         else if (
 683                                 (ipv6_mode && get_ip6_range_src(tx.ip_src_txt, l)) || // returns 1 when no range has been specified
 684                                 (!ipv6_mode && get_ip_range_src(tx.ip_src_txt))
 685                                 )
 686                         {
 687                                 // name2addr4 accepts a DOTTED DECIMAL ADDRESS or a FQDN:
 688                                 if (ipv6_mode)
 689                                         tx.ip6_src = libnet_name2addr6 (l, tx.ip_src_txt, LIBNET_RESOLVE);
 690                                 else
 691                                         tx.ip_src = libnet_name2addr4 (l, tx.ip_src_txt, LIBNET_RESOLVE);
 692                         }
 693                 }
 694                 else { // no source IP specified: by default use own IP address
 695                         if (ipv6_mode) {
 696                                 tx.ip6_src = libnet_get_ipaddr6(l);
 697                                 if (strncmp((char*)&tx.ip6_src,(char*)&in6addr_error,sizeof(in6addr_error))==0)
 698                                         printf("Failed to set source IPv6 address: %s", l->err_buf);
 699                         }
 700                         else
 701                                 tx.ip_src = libnet_get_ipaddr4(l);
 702                 }
 703
 704                 // Set destination IP address:
 705                 if (strlen(tx.ip_dst_txt)) {  // option -B has been specified
 706                         if (mz_strcmp(tx.ip_dst_txt, "rand", 2)==0) {
 707                                 fprintf(stderr, "Option -B does not support random destination IP addresses currently.\n");
 708                                 return 1;
 709                         }
 710
 711                         if (mz_strcmp(tx.ip_dst_txt, "bcast", 2)==0) {
 712                                 if (ipv6_mode) {
 713                                         fprintf(stderr, "Option -B does not support 'bcast' when in IPv6 mode.\n");
 714                                         return 1;
 715                                 }
 716                                 tx.ip_dst = libnet_name2addr4 (l, "255.255.255.255", LIBNET_DONT_RESOLVE);
 717                         } else if (
 718                                 (ipv6_mode && get_ip6_range_dst(tx.ip_dst_txt, l)) || // returns 1 when no range has been specified
 719                                 (!ipv6_mode && get_ip_range_dst(tx.ip_dst_txt)))
 720                         {
 721                                 // name2addr4 accepts a DOTTED DECIMAL ADDRESS or a FQDN:
 722                                 if (ipv6_mode)
 723                                         tx.ip6_dst = libnet_name2addr6 (l, tx.ip_dst_txt, LIBNET_RESOLVE);
 724                                 else
 725                                         tx.ip_dst = libnet_name2addr4 (l, tx.ip_dst_txt, LIBNET_RESOLVE);
 726                         }
 727                 }
 728                 else { // no destination IP specified: by default use broadcast
 729                         if (ipv6_mode) {
 730                                 tx.ip6_dst = libnet_name2addr6 (l, "ff02::1", LIBNET_DONT_RESOLVE);
 731                         } else {
 732                                 tx.ip_dst = libnet_name2addr4 (l, "255.255.255.255", LIBNET_DONT_RESOLVE);
 733                         }
 734                 }
 735
 736                 // Initialize tx.ip_src_h and tx.ip_dst_h which are used by 'print_frame_details()'
 737                 // in verbose mode. See 'modifications.c'.
 738
 739                 if (tx.ip_src_rand) { // ip_src_h already given, convert to ip_src
 740                         dum1 = (unsigned char*) &tx.ip_src_h;
 741                         dum2 = (unsigned char*) &tx.ip_src;
 742                 }
 743                 else { // ip_src already given, convert to ip_src_h
 744                         if (ipv6_mode) {
 745                                 if (tx.ip_src_isrange) {
 746                                         tx.ip6_src = tx.ip6_src_start;
 747                                 }
 748                         } else {
 749                                 dum1 = (unsigned char*) &tx.ip_src;
 750                                 dum2 = (unsigned char*) &tx.ip_src_h;
 751                         }
 752                 }
 753
 754                 if (ipv6_mode) {
 755                         if (tx.ip_dst_isrange) {
 756                                 tx.ip6_dst = tx.ip6_dst_start;
 757                         }
 758                 } else {
 759                         *dum2 = *(dum1+3);
 760                         dum2++;
 761                         *dum2 = *(dum1+2);
 762                         dum2++;
 763                         *dum2 = *(dum1+1);
 764                         dum2++;
 765                         *dum2 = *dum1;
 766
 767                         dum1 = (unsigned char*) &tx.ip_dst;
 768                         dum2 = (unsigned char*) &tx.ip_dst_h;
 769
 770                         *dum2 = *(dum1+3);
 771                         dum2++;
 772                         *dum2 = *(dum1+2);
 773                         dum2++;
 774                         *dum2 = *(dum1+1);
 775                         dum2++;
 776                         *dum2 = *dum1;
 777                 }
 778
 779                 libnet_destroy(l);
 780         }
 781
 782         //
 783         // END OF ADDRESS INITIALIZATION
 784         //
 785         //////////////////////////////////////////////////////////////////////////
 786
 787
 788         ////// retrieve interface parameters ///////
 789
 790         for (i=0; i<device_list_entries; i++) {
 791                 get_dev_params(device_list[i].dev);
 792         }
 793
 794
 795         //////////////////////////////////////////////////////////////////////////
 796         //
 797         //  Mausezahn CLI desired?
 798         if (mz_port) {
 799                 // has port number been specified?
 800                 if (strlen(tx.arg_string)) {
 801                         mz_port = (int) str2int (tx.arg_string);
 802                 }
 803
 804                 mz_cli_init();
 805                 cli();
 806         }
 807
 808         //////////////////////////////////////////////////////////////////////////
 809         //
 810         //                 Mode decision
 811         //
 812         // Consider -t and -m option (used exclusively)
 813         //   -t => special packet types, stateless
 814         //
 815         // If -t not present then evaluate arg_string which must
 816         // contain a byte-string in hexadecimal notation.
 817         //
 818         //
 819
 820         // ***** NEW: MOPS TRANSITION STRATEGY *****
 821         if (mops_type != NULL) {
 822
 823                 if (mz_strcmp(mops_type,"lldp",4)==0) {
 824                         mops_direct(tx.device, MOPS_LLDP, tx.arg_string);
 825                 }
 826         }
 827
 828
 829         if (packet_type == NULL) { // raw hex string given
 830                 mode = BYTE_STREAM;
 831         }
 832         else if (strcmp(packet_type,"arp")==0) {
 833                 mode = ARP;
 834         }
 835         else if (strcmp(packet_type,"bpdu")==0) {
 836                 mode = BPDU;
 837         }
 838         else if (strcmp(packet_type,"ip")==0) {
 839                 mode = IP;
 840         }
 841         else if (strcmp(packet_type,"udp")==0) {
 842                 mode = UDP;
 843         }
 844         else if (strcmp(packet_type,"icmp")==0) {
 845                 mode = ICMP;
 846         }
 847         else if (strcmp(packet_type,"icmp6")==0) {
 848                 mode = ICMP6;
 849         }
 850         else if (strcmp(packet_type,"tcp")==0) {
 851                 mode = TCP;
 852         }
 853         else if (strcmp(packet_type,"dns")==0) {
 854                 mode = DNS;
 855         }
 856         else if (strcmp(packet_type,"cdp")==0) {
 857                 mode = CDP;
 858         }
 859         else if (strcmp(packet_type,"syslog")==0) {
 860                 mode = SYSLOG;
 861         }
 862         else if (strcmp(packet_type, "igmp") == 0) {
 863                 mode = IGMP;
 864         }
 865         else if (strcmp(packet_type,"lldp")==0) {
 866                 mode = LLDP;
 867                 tx.packet_mode=0; // create whole frame by ourself
 868         }
 869         else if (strcmp(packet_type,"rtp")==0) {
 870                 if (RX) {
 871                         mode = RX_RTP;
 872                 }
 873                 else {
 874                         mode = RTP;
 875                         if (!count_set) tx.count = 0;
 876                         if (!delay_set) tx.delay = 20000; // 20 msec inter-packet delay for RTP
 877                 }
 878         }
 879         else {
 880                 fprintf(stderr, " mz: you must specify a valid packet type!\n");
 881         }
 882
 883
 884         //////////////////////////////////////////////////////////////////////////
 885
 886         // TODO: Implement macro support
 887         //       Check macro types here
 888
 889         return 0;
 890 }
 891
 892 int main(int argc, char **argv)
 893 {
 894    // These handles are only used when creating L3 and above packets.
 895    libnet_t             *l;               // the context
 896    libnet_ptag_t         t2=0, t3=0, t4=0;      // handles to layers
 897    double cpu_time_used;
 898
 899    reset();
 900
 901    if ( getopts(argc, argv) )
 902      {
 903         (void) fprintf(stderr, " Invalid command line parameters!\n");
 904         help();
 905      }
 906
 907    // Check whether hires timers are supported or not:
 908    (void) check_timer();
 909
 910         signal(SIGINT, signal_handler);  // to close all file pointers etc upon SIGINT
 911
 912    switch (mode)
 913      {
 914       case BYTE_STREAM:
 915         send_eth();
 916         break;
 917
 918       case ARP:
 919         (void) send_arp();
 920         break;
 921
 922       case BPDU:
 923         (void) send_bpdu();
 924         break;
 925
 926       case CDP:
 927         (void) send_cdp();
 928         break;
 929
 930       case IP:                        // From now on a new much more modular method is used:
 931         l = get_link_context();
 932         t3 = create_ip_packet(l);     // t3 can be used for later header changes
 933         if (!quiet) complexity();
 934         if (tx.packet_mode==0)        // Ethernet manipulation features does NOT use ARP to determine eth_dst
 935           t2 = create_eth_frame(l, t3, t4);   // t2 can be used for later header changes
 936         else
 937           send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
 938         break;
 939
 940       case ICMP:
 941         tx.ip_proto = 1;
 942         l = get_link_context();
 943         t4 = create_icmp_packet(l);    // t4 can be used for later header changes
 944         t3 = create_ip_packet(l);      // t3 can be used for later header changes
 945         if (!quiet) complexity();
 946         if (tx.packet_mode==0)         // Ethernet manipulation features does NOT use ARP to determine eth_dst
 947           t2 = create_eth_frame(l, t3, t4);    // t2 can be used for later header changes
 948         else
 949           send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
 950         break;
 951
 952       case ICMP6:
 953         tx.ip_proto = 58;
 954         l = get_link_context();
 955         t4 = create_icmp6_packet(l);    // t4 can be used for later header changes
 956         t3 = create_ip_packet(l);       // t3 can be used for later header changes
 957         if (!quiet) complexity();
 958         if (tx.packet_mode==0)          // Ethernet manipulation features does NOT use ARP to determine eth_dst
 959           t2 = create_eth_frame(l, t3, t4);     // t2 can be used for later header changes
 960         else
 961           send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
 962         break;
 963
 964       case UDP:
 965         tx.ip_proto = 17;
 966         l = get_link_context();
 967         t4 = create_udp_packet(l);     // t4 can be used for later header changes
 968         t3 = create_ip_packet(l);      // t3 can be used for later header changes
 969         if (!quiet) complexity();
 970         if (tx.packet_mode==0)         // Ethernet manipulation features does NOT use ARP to determine eth_dst
 971           t2 = create_eth_frame(l, t3, t4);    // t2 can be used for later header changes
 972         else
 973           send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
 974         break;
 975
 976       case TCP:
 977         tx.ip_proto = 6;
 978         l = get_link_context();
 979         t4 = create_tcp_packet(l);     // t4 can be used for later header changes
 980         t3 = create_ip_packet(l);      // t3 can be used for later header changes
 981         if (!quiet) complexity();
 982         if (tx.packet_mode==0)         // Ethernet manipulation features does NOT use ARP to determine eth_dst
 983           t2 = create_eth_frame(l, t3, t4);    // t2 can be used for later header changes
 984         else
 985           send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
 986         break;
 987
 988       case IGMP:
 989         tx.ip_proto = 2;
 990         l = get_link_context();
 991         t4 = create_igmp_packet(l);
 992         /* t3 can be used for later header changes */
 993         t3 = create_ip_packet(l);
 994         if (!quiet)
 995                 complexity();
 996
 997         /* Ethernet manipulation features does NOT use ARP to determine eth_dst
 998          * */
 999         if (tx.packet_mode == 0)
1000                 t2 = create_eth_frame(l, t3, t4); // t2 can be used for later header changes
1001         else
1002                 send_frame(l, t3, t4); // NOTE: send_frame also destroys context finaly
1003         break;
1004
1005       case DNS:
1006         tx.ip_proto = 17;
1007         l = get_link_context();
1008         (void) create_dns_packet();
1009         t4 = create_udp_packet(l);     // t4 can be used for later header changes
1010         t3 = create_ip_packet(l);      // t3 can be used for later header changes
1011         if (!quiet) complexity();
1012         if (tx.packet_mode==0)         // Ethernet manipulation features does NOT use ARP to determine eth_dst
1013           t2 = create_eth_frame(l, t3, t4);    // t2 can be used for later header changes
1014         else
1015           send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
1016         break;
1017
1018       case RTP:
1019         tx.ip_proto = 17;
1020         l = get_link_context();
1021         if (!quiet) fprintf(stderr, " mz: RTP mode! (count=%u, delay=%u usec)\n\n", tx.count, tx.delay);
1022         (void) create_rtp_packet();
1023         t4 = create_udp_packet(l);     // t4 can be used for later header changes
1024         t3 = create_ip_packet(l);      // t3 can be used for later header changes
1025         if (!quiet) complexity();
1026         if (tx.packet_mode==0)         // Ethernet manipulation features does NOT use ARP to determine eth_dst
1027           t2 = create_eth_frame(l, t3, t4);    // t2 can be used for later header changes
1028         else
1029           send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
1030         break;
1031
1032       case RX_RTP:  // Receive RTP packets
1033         rcv_rtp_init();
1034         rcv_rtp();
1035         break;
1036
1037       case SYSLOG:
1038         tx.ip_proto = 17;
1039         l = get_link_context();
1040         (void) create_syslog_packet();
1041         t4 = create_udp_packet(l);     // t4 can be used for later header changes
1042         t3 = create_ip_packet(l);      // t3 can be used for later header changes
1043         if (!quiet) complexity();
1044
1045         if (tx.packet_mode==0)         // Ethernet manipulation features does NOT use ARP to determine eth_dst
1046           t2 = create_eth_frame(l, t3, t4);    // t2 can be used for later header changes
1047         else
1048           send_frame (l, t3, t4); // NOTE: send_frame also destroys context finaly
1049         break;
1050
1051       case LLDP: // start with a new concept here
1052         //l = get_link_context();
1053         //(void) create_lldp_packet();
1054         // // // printf("SIZE=%lu\n",sizeof(struct tx_struct));
1055         fprintf(stderr, "LLDP is currently only supported via the interactive mode\n");
1056              exit(1);
1057         break;
1058
1059
1060       default:
1061         (void) fprintf(stderr," mz/main: unknown mode! Stop.\n");
1062         return (1);
1063      }
1064
1065    if (!quiet)
1066      {
1067         mz_stop = clock();
1068         cpu_time_used = ((double) (mz_stop - mz_start)) / CLOCKS_PER_SEC;
1069         if (cpu_time_used > 0)
1070           {
1071              total_d /= cpu_time_used;
1072              fprintf(stderr, "%.2f seconds (%.Lf packets per second)\n",cpu_time_used,total_d);
1073           }
1074         else
1075           {
1076              fprintf(stderr, "\n");
1077           }
1078      }
1079
1080    return(0);
1081 }