2 * netsniff-ng - the packet sniffing beast
3 * Copyright 2012 Daniel Borkmann.
4 * Subject to the GPL, version 2.
5 * Parts derived from iw, subject to ISC license.
6 * Copyright 2007, 2008 Johannes Berg
7 * Copyright 2007 Andy Lutomirski
8 * Copyright 2007 Mike Kershaw
9 * Copyright 2008-2009 Luis R. Rodriguez
18 #include <linux/nl80211.h>
19 #include <libnl3/netlink/genl/genl.h>
20 #include <libnl3/netlink/genl/family.h>
21 #include <libnl3/netlink/genl/ctrl.h>
22 #include <libnl3/netlink/msg.h>
23 #include <libnl3/netlink/attr.h>
31 struct nl80211_state
{
32 struct nl_sock
*nl_sock
;
33 struct nl_cache
*nl_cache
;
34 struct genl_family
*nl80211
;
37 static void get_mac80211_phydev(const char *device
, char *phydev_path
,
44 ret
= asprintf(&pathstr
, "/sys/class/net/%s/phy80211", device
);
46 panic("Can't generate path name string for /sys/class/net device");
48 num
= readlink(pathstr
, phydev_path
, phydev_len
);
50 if (errno
== ENOENT
|| errno
== EINVAL
)
51 panic("It's probably not a mac80211 device!\n");
52 panic("Can't readlink %s: %s!\n", pathstr
, strerror(errno
));
56 phydev_path
[min(num
, phydev_len
- 1)] = 0;
59 static inline struct nl_msg
*nl80211_nlmsg_xalloc(void)
61 struct nl_msg
*ret
= nlmsg_alloc();
63 panic("Cannot allocate nlmsg memory!\n");
67 static inline struct nl_sock
*nl80211_nl_socket_xalloc(void)
69 struct nl_sock
*ret
= nl_socket_alloc();
71 panic("Cannot allocate nl socket memory!\n");
75 static void nl80211_init(struct nl80211_state
*state
, const char *device
)
79 state
->nl_sock
= nl80211_nl_socket_xalloc();
81 ret
= genl_connect(state
->nl_sock
);
83 panic("Cannot connect generic netlink!\n");
85 ret
= genl_ctrl_alloc_cache(state
->nl_sock
, &state
->nl_cache
);
87 panic("Failed to allocate generic netlink cache: %s!",
90 state
->nl80211
= genl_ctrl_search_by_name(state
->nl_cache
, "nl80211");
92 panic("nl80211 not found in netlink cache!\n");
95 static void nl80211_cleanup(struct nl80211_state
*state
)
97 genl_family_put(state
->nl80211
);
99 nl_cache_free(state
->nl_cache
);
100 nl_socket_free(state
->nl_sock
);
103 static int nl80211_wait_handler(struct nl_msg
*msg
, void *arg
)
112 static int nl80211_error_handler(struct sockaddr_nl
*nla
,
113 struct nlmsgerr
*err
,
116 panic("nl80211 returned with error %d\n", err
->error
);
119 static int nl80211_add_mon_if(struct nl80211_state
*state
, const char *device
,
120 const char *mondevice
)
124 struct nl_cb
*cb
= NULL
;
127 ifindex
= device_ifindex(device
);
129 msg
= nl80211_nlmsg_xalloc();
131 genlmsg_put(msg
, 0, 0, genl_family_get_id(state
->nl80211
), 0,
132 0, NL80211_CMD_NEW_INTERFACE
, 0);
134 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
135 NLA_PUT_STRING(msg
, NL80211_ATTR_IFNAME
, mondevice
);
136 NLA_PUT_U32(msg
, NL80211_ATTR_IFTYPE
, NL80211_IFTYPE_MONITOR
);
138 ret
= nl_send_auto_complete(state
->nl_sock
, msg
);
140 if (ret
== -ENFILE
) {
145 panic("Cannot send_auto_complete!\n");
148 cb
= nl_cb_alloc(NL_CB_CUSTOM
);
150 panic("Cannot alloc nl_cb!\n");
152 nl_cb_set(cb
, NL_CB_ACK
, NL_CB_CUSTOM
, nl80211_wait_handler
, &finished
);
153 nl_cb_err(cb
, NL_CB_CUSTOM
, nl80211_error_handler
, NULL
);
155 nl_recvmsgs(state
->nl_sock
, cb
);
158 ret
= nl_wait_for_ack(state
->nl_sock
);
160 if (ret
== -ENFILE
) {
165 panic("Waiting for netlink ack failed!\n");
174 panic("nla put failure!\n");
175 return -EIO
; /* dummy */
178 static int nl80211_del_mon_if(struct nl80211_state
*state
, const char *device
,
179 const char *mondevice
)
184 ifindex
= device_ifindex(mondevice
);
186 msg
= nl80211_nlmsg_xalloc();
188 genlmsg_put(msg
, 0, 0, genl_family_get_id(state
->nl80211
), 0,
189 0, NL80211_CMD_DEL_INTERFACE
, 0);
191 NLA_PUT_U32(msg
, NL80211_ATTR_IFINDEX
, ifindex
);
193 ret
= nl_send_auto_complete(state
->nl_sock
, msg
);
195 panic("Cannot send_auto_complete!\n");
197 ret
= nl_wait_for_ack(state
->nl_sock
);
199 panic("Waiting for netlink ack failed!\n");
205 panic("nla put failure!\n");
206 return -EIO
; /* dummy */
209 void enter_rfmon_mac80211(const char *device
, char **mondev
)
214 char phydev_path
[256];
215 struct nl80211_state nlstate
;
217 /* XXX: is this already a monN device? */
218 get_mac80211_phydev(device
, phydev_path
, sizeof(phydev_path
));
219 nl80211_init(&nlstate
, device
);
221 for (n
= 0; n
< UINT_MAX
; n
++) {
224 slprintf(mondevice
, sizeof(mondevice
), "mon%u", n
);
225 ret
= nl80211_add_mon_if(&nlstate
, device
, mondevice
);
227 *mondev
= xstrdup(mondevice
);
229 flags
= device_get_flags(*mondev
);
230 flags
|= IFF_UP
| IFF_RUNNING
;
231 device_set_flags(*mondev
, flags
);
233 nl80211_cleanup(&nlstate
);
238 panic("No free monN interfaces!\n");
241 void leave_rfmon_mac80211(const char *device
, const char *mondev
)
244 struct nl80211_state nlstate
;
246 flags
= device_get_flags(mondev
);
247 flags
&= ~(IFF_UP
| IFF_RUNNING
);
248 device_set_flags(mondev
, flags
);
250 nl80211_init(&nlstate
, device
);
251 nl80211_del_mon_if(&nlstate
, device
, mondev
);
252 nl80211_cleanup(&nlstate
);