1373 lines
31 KiB
C
1373 lines
31 KiB
C
|
|
/*
|
|
* Copyright (C) 2012 by Darren Reed.
|
|
*
|
|
* See the IPFILTER.LICENCE file for details on licencing.
|
|
*
|
|
*/
|
|
#if !defined(lint)
|
|
static const char sccsid[] = "%W% %G% (C)1995 Darren Reed";
|
|
static const char rcsid[] = "@(#)$Id$";
|
|
#endif
|
|
#include <sys/param.h>
|
|
#include <sys/types.h>
|
|
#if defined(__NetBSD__) && defined(__vax__)
|
|
/*
|
|
* XXX need to declare boolean_t for _KERNEL <sys/files.h>
|
|
* which ends up including <sys/device.h> for vax. See PR#32907
|
|
* for further details.
|
|
*/
|
|
typedef int boolean_t;
|
|
#endif
|
|
#include <sys/time.h>
|
|
# ifdef __NetBSD__
|
|
# include <machine/lock.h>
|
|
# include <machine/mutex.h>
|
|
# endif
|
|
# define _KERNEL
|
|
# define KERNEL
|
|
# if !defined(solaris)
|
|
# include <sys/file.h>
|
|
# else
|
|
# ifdef solaris
|
|
# include <sys/dditypes.h>
|
|
# endif
|
|
# endif
|
|
# undef _KERNEL
|
|
# undef KERNEL
|
|
#if !defined(solaris)
|
|
# include <nlist.h>
|
|
# include <sys/user.h>
|
|
# include <sys/proc.h>
|
|
#endif
|
|
# include <kvm.h>
|
|
# include <sys/socket.h>
|
|
#if defined(solaris)
|
|
# include <sys/stream.h>
|
|
#else
|
|
# include <sys/socketvar.h>
|
|
#endif
|
|
#ifdef sun
|
|
#include <sys/systm.h>
|
|
#include <sys/session.h>
|
|
#endif
|
|
# include <sys/sysctl.h>
|
|
# include <sys/filedesc.h>
|
|
# include <paths.h>
|
|
#include <netinet/in_systm.h>
|
|
#include <sys/socket.h>
|
|
#include <net/if.h>
|
|
# if defined(__FreeBSD__)
|
|
# include "radix_ipf.h"
|
|
# endif
|
|
# if !defined(solaris)
|
|
# include <net/route.h>
|
|
# endif
|
|
#include <netinet/in.h>
|
|
#include <arpa/inet.h>
|
|
#include <netinet/ip.h>
|
|
#if defined(__SVR4) || defined(__svr4__)
|
|
# include <sys/sysmacros.h>
|
|
#endif
|
|
#include <stdio.h>
|
|
#include <unistd.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
# include <netinet/ip_var.h>
|
|
# if !defined(solaris)
|
|
# include <netinet/in_pcb.h>
|
|
# endif
|
|
#include "ipsend.h"
|
|
# include <netinet/tcp_timer.h>
|
|
# include <netinet/tcp_var.h>
|
|
#if defined(__NetBSD_Version__) && (__NetBSD_Version__ >= 106000000)
|
|
# define USE_NANOSLEEP
|
|
#endif
|
|
|
|
|
|
#ifdef USE_NANOSLEEP
|
|
# define PAUSE() ts.tv_sec = 0; ts.tv_nsec = 10000000; \
|
|
(void) nanosleep(&ts, NULL)
|
|
#else
|
|
# define PAUSE() tv.tv_sec = 0; tv.tv_usec = 10000; \
|
|
(void) select(0, NULL, NULL, NULL, &tv)
|
|
#endif
|
|
|
|
|
|
void
|
|
ip_test1(char *dev, int mtu, ip_t *ip, struct in_addr gwip, int ptest)
|
|
{
|
|
#ifdef USE_NANOSLEEP
|
|
struct timespec ts;
|
|
#else
|
|
struct timeval tv;
|
|
#endif
|
|
udphdr_t *u;
|
|
int nfd, i = 0, len, id = getpid();
|
|
|
|
IP_HL_A(ip, sizeof(*ip) >> 2);
|
|
IP_V_A(ip, IPVERSION);
|
|
ip->ip_tos = 0;
|
|
ip->ip_off = 0;
|
|
ip->ip_ttl = 60;
|
|
ip->ip_p = IPPROTO_UDP;
|
|
ip->ip_sum = 0;
|
|
u = (udphdr_t *)(ip + 1);
|
|
u->uh_sport = htons(1);
|
|
u->uh_dport = htons(9);
|
|
u->uh_sum = 0;
|
|
u->uh_ulen = htons(sizeof(*u) + 4);
|
|
ip->ip_len = sizeof(*ip) + ntohs(u->uh_ulen);
|
|
len = ip->ip_len;
|
|
|
|
nfd = initdevice(dev, 1);
|
|
if (nfd == -1)
|
|
return;
|
|
|
|
if (!ptest || (ptest == 1)) {
|
|
/*
|
|
* Part1: hl < len
|
|
*/
|
|
ip->ip_id = 0;
|
|
printf("1.1. sending packets with ip_hl < ip_len\n");
|
|
for (i = 0; i < ((sizeof(*ip) + ntohs(u->uh_ulen)) >> 2); i++) {
|
|
IP_HL_A(ip, i >> 2);
|
|
(void) send_ip(nfd, 1500, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 2)) {
|
|
/*
|
|
* Part2: hl > len
|
|
*/
|
|
ip->ip_id = 0;
|
|
printf("1.2. sending packets with ip_hl > ip_len\n");
|
|
for (; i < ((sizeof(*ip) * 2 + ntohs(u->uh_ulen)) >> 2); i++) {
|
|
IP_HL_A(ip, i >> 2);
|
|
(void) send_ip(nfd, 1500, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 3)) {
|
|
/*
|
|
* Part3: v < 4
|
|
*/
|
|
ip->ip_id = 0;
|
|
printf("1.3. ip_v < 4\n");
|
|
IP_HL_A(ip, sizeof(*ip) >> 2);
|
|
for (i = 0; i < 4; i++) {
|
|
IP_V_A(ip, i);
|
|
(void) send_ip(nfd, 1500, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 4)) {
|
|
/*
|
|
* Part4: v > 4
|
|
*/
|
|
ip->ip_id = 0;
|
|
printf("1.4. ip_v > 4\n");
|
|
for (i = 5; i < 16; i++) {
|
|
IP_V_A(ip, i);
|
|
(void) send_ip(nfd, 1500, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 5)) {
|
|
/*
|
|
* Part5: len < packet
|
|
*/
|
|
ip->ip_id = 0;
|
|
IP_V_A(ip, IPVERSION);
|
|
i = ip->ip_len + 1;
|
|
printf("1.5.0 ip_len < packet size (size++, long packets)\n");
|
|
for (; i < (ip->ip_len * 2); i++) {
|
|
ip->ip_id = htons(id++);
|
|
ip->ip_sum = 0;
|
|
ip->ip_sum = chksum((u_short *)ip, IP_HL(ip) << 2);
|
|
(void) send_ether(nfd, (char *)ip, i, gwip);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
printf("1.5.1 ip_len < packet size (ip_len-, short packets)\n");
|
|
for (i = len; i > 0; i--) {
|
|
ip->ip_id = htons(id++);
|
|
ip->ip_len = i;
|
|
ip->ip_sum = 0;
|
|
ip->ip_sum = chksum((u_short *)ip, IP_HL(ip) << 2);
|
|
(void) send_ether(nfd, (char *)ip, len, gwip);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 6)) {
|
|
/*
|
|
* Part6: len > packet
|
|
*/
|
|
ip->ip_id = 0;
|
|
printf("1.6.0 ip_len > packet size (increase ip_len)\n");
|
|
for (i = len + 1; i < (len * 2); i++) {
|
|
ip->ip_id = htons(id++);
|
|
ip->ip_len = i;
|
|
ip->ip_sum = 0;
|
|
ip->ip_sum = chksum((u_short *)ip, IP_HL(ip) << 2);
|
|
(void) send_ether(nfd, (char *)ip, len, gwip);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
ip->ip_len = len;
|
|
printf("1.6.1 ip_len > packet size (size--, short packets)\n");
|
|
for (i = len; i > 0; i--) {
|
|
ip->ip_id = htons(id++);
|
|
ip->ip_sum = 0;
|
|
ip->ip_sum = chksum((u_short *)ip, IP_HL(ip) << 2);
|
|
(void) send_ether(nfd, (char *)ip, i, gwip);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 7)) {
|
|
/*
|
|
* Part7: 0 length fragment
|
|
*/
|
|
printf("1.7.0 Zero length fragments (ip_off = 0x2000)\n");
|
|
ip->ip_id = 0;
|
|
ip->ip_len = sizeof(*ip);
|
|
ip->ip_off = htons(IP_MF);
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("1.7.1 Zero length fragments (ip_off = 0x3000)\n");
|
|
ip->ip_id = 0;
|
|
ip->ip_len = sizeof(*ip);
|
|
ip->ip_off = htons(IP_MF);
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("1.7.2 Zero length fragments (ip_off = 0xa000)\n");
|
|
ip->ip_id = 0;
|
|
ip->ip_len = sizeof(*ip);
|
|
ip->ip_off = htons(0xa000);
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("1.7.3 Zero length fragments (ip_off = 0x0100)\n");
|
|
ip->ip_id = 0;
|
|
ip->ip_len = sizeof(*ip);
|
|
ip->ip_off = htons(0x0100);
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
if (!ptest || (ptest == 8)) {
|
|
struct timeval tv;
|
|
|
|
gettimeofday(&tv, NULL);
|
|
srand(tv.tv_sec ^ getpid() ^ tv.tv_usec);
|
|
/*
|
|
* Part8.1: 63k packet + 1k fragment at offset 0x1ffe
|
|
* Mark it as being ICMP (so it doesn't get junked), but
|
|
* don't bother about the ICMP header, we're not worrying
|
|
* about that here.
|
|
*/
|
|
ip->ip_p = IPPROTO_ICMP;
|
|
ip->ip_off = htons(IP_MF);
|
|
u->uh_dport = htons(9);
|
|
ip->ip_id = htons(id++);
|
|
printf("1.8.1 63k packet + 1k fragment at offset 0x1ffe\n");
|
|
ip->ip_len = 768 + 20 + 8;
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
|
|
ip->ip_len = MIN(768 + 20, mtu - 68);
|
|
i = 512;
|
|
for (; i < (63 * 1024 + 768); i += 768) {
|
|
ip->ip_off = htons(IP_MF | (i >> 3));
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
ip->ip_len = 896 + 20;
|
|
ip->ip_off = htons(i >> 3);
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
putchar('\n');
|
|
fflush(stdout);
|
|
|
|
/*
|
|
* Part8.2: 63k packet + 1k fragment at offset 0x1ffe
|
|
* Mark it as being ICMP (so it doesn't get junked), but
|
|
* don't bother about the ICMP header, we're not worrying
|
|
* about that here. (Lossage here)
|
|
*/
|
|
ip->ip_p = IPPROTO_ICMP;
|
|
ip->ip_off = htons(IP_MF);
|
|
u->uh_dport = htons(9);
|
|
ip->ip_id = htons(id++);
|
|
printf("1.8.2 63k packet + 1k fragment at offset 0x1ffe\n");
|
|
ip->ip_len = 768 + 20 + 8;
|
|
if ((rand() & 0x1f) != 0) {
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
} else
|
|
printf("skip 0\n");
|
|
|
|
ip->ip_len = MIN(768 + 20, mtu - 68);
|
|
i = 512;
|
|
for (; i < (63 * 1024 + 768); i += 768) {
|
|
ip->ip_off = htons(IP_MF | (i >> 3));
|
|
if ((rand() & 0x1f) != 0) {
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
} else
|
|
printf("skip %d\n", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
ip->ip_len = 896 + 20;
|
|
ip->ip_off = htons(i >> 3);
|
|
if ((rand() & 0x1f) != 0) {
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
} else
|
|
printf("skip\n");
|
|
putchar('\n');
|
|
fflush(stdout);
|
|
|
|
/*
|
|
* Part8.3: 33k packet - test for not dealing with -ve length
|
|
* Mark it as being ICMP (so it doesn't get junked), but
|
|
* don't bother about the ICMP header, we're not worrying
|
|
* about that here.
|
|
*/
|
|
ip->ip_p = IPPROTO_ICMP;
|
|
ip->ip_off = htons(IP_MF);
|
|
u->uh_dport = htons(9);
|
|
ip->ip_id = htons(id++);
|
|
printf("1.8.3 33k packet\n");
|
|
ip->ip_len = 768 + 20 + 8;
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
|
|
ip->ip_len = MIN(768 + 20, mtu - 68);
|
|
i = 512;
|
|
for (; i < (32 * 1024 + 768); i += 768) {
|
|
ip->ip_off = htons(IP_MF | (i >> 3));
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
ip->ip_len = 896 + 20;
|
|
ip->ip_off = htons(i >> 3);
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
printf("%d\r", i);
|
|
putchar('\n');
|
|
fflush(stdout);
|
|
}
|
|
|
|
ip->ip_len = len;
|
|
ip->ip_off = 0;
|
|
if (!ptest || (ptest == 9)) {
|
|
/*
|
|
* Part9: off & 0x8000 == 0x8000
|
|
*/
|
|
ip->ip_id = 0;
|
|
ip->ip_off = htons(0x8000);
|
|
printf("1.9. ip_off & 0x8000 == 0x8000\n");
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
ip->ip_off = 0;
|
|
|
|
if (!ptest || (ptest == 10)) {
|
|
/*
|
|
* Part10: ttl = 255
|
|
*/
|
|
ip->ip_id = 0;
|
|
ip->ip_ttl = 255;
|
|
printf("1.10.0 ip_ttl = 255\n");
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
ip->ip_ttl = 128;
|
|
printf("1.10.1 ip_ttl = 128\n");
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
ip->ip_ttl = 0;
|
|
printf("1.10.2 ip_ttl = 0\n");
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
(void) close(nfd);
|
|
}
|
|
|
|
|
|
void ip_test2(dev, mtu, ip, gwip, ptest)
|
|
char *dev;
|
|
int mtu;
|
|
ip_t *ip;
|
|
struct in_addr gwip;
|
|
int ptest;
|
|
{
|
|
#ifdef USE_NANOSLEEP
|
|
struct timespec ts;
|
|
#else
|
|
struct timeval tv;
|
|
#endif
|
|
int nfd;
|
|
u_char *s;
|
|
|
|
|
|
nfd = initdevice(dev, 1);
|
|
if (nfd == -1)
|
|
return;
|
|
|
|
IP_HL_A(ip, 6);
|
|
ip->ip_len = IP_HL(ip) << 2;
|
|
s = (u_char *)(ip + 1);
|
|
s[IPOPT_OPTVAL] = IPOPT_NOP;
|
|
s++;
|
|
if (!ptest || (ptest == 1)) {
|
|
/*
|
|
* Test 1: option length > packet length,
|
|
* header length == packet length
|
|
*/
|
|
s[IPOPT_OPTVAL] = IPOPT_TS;
|
|
s[IPOPT_OLEN] = 4;
|
|
s[IPOPT_OFFSET] = IPOPT_MINOFF;
|
|
ip->ip_p = IPPROTO_IP;
|
|
printf("2.1 option length > packet length\n");
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
IP_HL_A(ip, 7);
|
|
ip->ip_len = IP_HL(ip) << 2;
|
|
if (!ptest || (ptest == 1)) {
|
|
/*
|
|
* Test 2: options have length = 0
|
|
*/
|
|
printf("2.2.1 option length = 0, RR\n");
|
|
s[IPOPT_OPTVAL] = IPOPT_RR;
|
|
s[IPOPT_OLEN] = 0;
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("2.2.2 option length = 0, TS\n");
|
|
s[IPOPT_OPTVAL] = IPOPT_TS;
|
|
s[IPOPT_OLEN] = 0;
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("2.2.3 option length = 0, SECURITY\n");
|
|
s[IPOPT_OPTVAL] = IPOPT_SECURITY;
|
|
s[IPOPT_OLEN] = 0;
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("2.2.4 option length = 0, LSRR\n");
|
|
s[IPOPT_OPTVAL] = IPOPT_LSRR;
|
|
s[IPOPT_OLEN] = 0;
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("2.2.5 option length = 0, SATID\n");
|
|
s[IPOPT_OPTVAL] = IPOPT_SATID;
|
|
s[IPOPT_OLEN] = 0;
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("2.2.6 option length = 0, SSRR\n");
|
|
s[IPOPT_OPTVAL] = IPOPT_SSRR;
|
|
s[IPOPT_OLEN] = 0;
|
|
(void) send_ip(nfd, mtu, ip, gwip, 1);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
(void) close(nfd);
|
|
}
|
|
|
|
|
|
/*
|
|
* test 3 (ICMP)
|
|
*/
|
|
void
|
|
ip_test3(char *dev, int mtu, ip_t *ip, struct in_addr gwip, int ptest)
|
|
{
|
|
static int ict1[10] = { 8, 9, 10, 13, 14, 15, 16, 17, 18, 0 };
|
|
static int ict2[8] = { 3, 9, 10, 13, 14, 17, 18, 0 };
|
|
#ifdef USE_NANOSLEEP
|
|
struct timespec ts;
|
|
#else
|
|
struct timeval tv;
|
|
#endif
|
|
struct icmp *icp;
|
|
int nfd, i;
|
|
|
|
IP_HL_A(ip, sizeof(*ip) >> 2);
|
|
IP_V_A(ip, IPVERSION);
|
|
ip->ip_tos = 0;
|
|
ip->ip_off = 0;
|
|
ip->ip_ttl = 60;
|
|
ip->ip_p = IPPROTO_ICMP;
|
|
ip->ip_sum = 0;
|
|
ip->ip_len = sizeof(*ip) + sizeof(*icp);
|
|
icp = (struct icmp *)((char *)ip + (IP_HL(ip) << 2));
|
|
|
|
nfd = initdevice(dev, 1);
|
|
if (nfd == -1)
|
|
return;
|
|
|
|
if (!ptest || (ptest == 1)) {
|
|
/*
|
|
* Type 0 - 31, 255, code = 0
|
|
*/
|
|
bzero((char *)icp, sizeof(*icp));
|
|
for (i = 0; i < 32; i++) {
|
|
icp->icmp_type = i;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.1.%d ICMP type %d code 0 (all 0's)\r", i, i);
|
|
}
|
|
icp->icmp_type = 255;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.1.%d ICMP type %d code 0 (all 0's)\r", i, 255);
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 2)) {
|
|
/*
|
|
* Type 3, code = 0 - 31
|
|
*/
|
|
icp->icmp_type = 3;
|
|
for (i = 0; i < 32; i++) {
|
|
icp->icmp_code = i;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.2.%d ICMP type 3 code %d (all 0's)\r", i, i);
|
|
}
|
|
}
|
|
|
|
if (!ptest || (ptest == 3)) {
|
|
/*
|
|
* Type 4, code = 0,127,128,255
|
|
*/
|
|
icp->icmp_type = 4;
|
|
icp->icmp_code = 0;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.3.1 ICMP type 4 code 0 (all 0's)\r");
|
|
icp->icmp_code = 127;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.3.2 ICMP type 4 code 127 (all 0's)\r");
|
|
icp->icmp_code = 128;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.3.3 ICMP type 4 code 128 (all 0's)\r");
|
|
icp->icmp_code = 255;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.3.4 ICMP type 4 code 255 (all 0's)\r");
|
|
}
|
|
|
|
if (!ptest || (ptest == 4)) {
|
|
/*
|
|
* Type 5, code = 0,127,128,255
|
|
*/
|
|
icp->icmp_type = 5;
|
|
icp->icmp_code = 0;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.4.1 ICMP type 5 code 0 (all 0's)\r");
|
|
icp->icmp_code = 127;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.4.2 ICMP type 5 code 127 (all 0's)\r");
|
|
icp->icmp_code = 128;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.4.3 ICMP type 5 code 128 (all 0's)\r");
|
|
icp->icmp_code = 255;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.4.4 ICMP type 5 code 255 (all 0's)\r");
|
|
}
|
|
|
|
if (!ptest || (ptest == 5)) {
|
|
/*
|
|
* Type 8-10;13-18, code - 0,127,128,255
|
|
*/
|
|
for (i = 0; ict1[i]; i++) {
|
|
icp->icmp_type = ict1[i];
|
|
icp->icmp_code = 0;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.5.%d ICMP type 5 code 0 (all 0's)\r",
|
|
i * 4);
|
|
icp->icmp_code = 127;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.5.%d ICMP type 5 code 127 (all 0's)\r",
|
|
i * 4 + 1);
|
|
icp->icmp_code = 128;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.5.%d ICMP type 5 code 128 (all 0's)\r",
|
|
i * 4 + 2);
|
|
icp->icmp_code = 255;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.5.%d ICMP type 5 code 255 (all 0's)\r",
|
|
i * 4 + 3);
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 6)) {
|
|
/*
|
|
* Type 12, code - 0,127,128,129,255
|
|
*/
|
|
icp->icmp_type = 12;
|
|
icp->icmp_code = 0;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.6.1 ICMP type 12 code 0 (all 0's)\r");
|
|
icp->icmp_code = 127;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.6.2 ICMP type 12 code 127 (all 0's)\r");
|
|
icp->icmp_code = 128;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.6.3 ICMP type 12 code 128 (all 0's)\r");
|
|
icp->icmp_code = 129;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.6.4 ICMP type 12 code 129 (all 0's)\r");
|
|
icp->icmp_code = 255;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.6.5 ICMP type 12 code 255 (all 0's)\r");
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 7)) {
|
|
/*
|
|
* Type 3;9-10;13-14;17-18 - shorter packets
|
|
*/
|
|
ip->ip_len = sizeof(*ip) + sizeof(*icp) / 2;
|
|
for (i = 0; ict2[i]; i++) {
|
|
icp->icmp_type = ict1[i];
|
|
icp->icmp_code = 0;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.5.%d ICMP type %d code 0 (all 0's)\r",
|
|
i * 4, icp->icmp_type);
|
|
icp->icmp_code = 127;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.5.%d ICMP type %d code 127 (all 0's)\r",
|
|
i * 4 + 1, icp->icmp_type);
|
|
icp->icmp_code = 128;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.5.%d ICMP type %d code 128 (all 0's)\r",
|
|
i * 4 + 2, icp->icmp_type);
|
|
icp->icmp_code = 255;
|
|
(void) send_icmp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
printf("3.5.%d ICMP type %d code 127 (all 0's)\r",
|
|
i * 4 + 3, icp->icmp_type);
|
|
}
|
|
putchar('\n');
|
|
}
|
|
}
|
|
|
|
|
|
/* Perform test 4 (UDP) */
|
|
|
|
void
|
|
ip_test4(char *dev, int mtu, ip_t *ip, struct in_addr gwip, int ptest)
|
|
{
|
|
#ifdef USE_NANOSLEEP
|
|
struct timespec ts;
|
|
#else
|
|
struct timeval tv;
|
|
#endif
|
|
udphdr_t *u;
|
|
int nfd, i;
|
|
|
|
|
|
IP_HL_A(ip, sizeof(*ip) >> 2);
|
|
IP_V_A(ip, IPVERSION);
|
|
ip->ip_tos = 0;
|
|
ip->ip_off = 0;
|
|
ip->ip_ttl = 60;
|
|
ip->ip_p = IPPROTO_UDP;
|
|
ip->ip_sum = 0;
|
|
u = (udphdr_t *)((char *)ip + (IP_HL(ip) << 2));
|
|
u->uh_sport = htons(1);
|
|
u->uh_dport = htons(1);
|
|
u->uh_ulen = htons(sizeof(*u) + 4);
|
|
|
|
nfd = initdevice(dev, 1);
|
|
if (nfd == -1)
|
|
return;
|
|
|
|
if (!ptest || (ptest == 1)) {
|
|
/*
|
|
* Test 1. ulen > packet
|
|
*/
|
|
u->uh_ulen = htons(sizeof(*u) + 4);
|
|
ip->ip_len = (IP_HL(ip) << 2) + ntohs(u->uh_ulen);
|
|
printf("4.1 UDP uh_ulen > packet size - short packets\n");
|
|
for (i = ntohs(u->uh_ulen) * 2; i > sizeof(*u) + 4; i--) {
|
|
u->uh_ulen = htons(i);
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 2)) {
|
|
/*
|
|
* Test 2. ulen < packet
|
|
*/
|
|
u->uh_ulen = htons(sizeof(*u) + 4);
|
|
ip->ip_len = (IP_HL(ip) << 2) + ntohs(u->uh_ulen);
|
|
printf("4.2 UDP uh_ulen < packet size - short packets\n");
|
|
for (i = ntohs(u->uh_ulen) * 2; i > sizeof(*u) + 4; i--) {
|
|
ip->ip_len = i;
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 3)) {
|
|
/*
|
|
* Test 3: sport = 0, sport = 1, sport = 32767
|
|
* sport = 32768, sport = 65535
|
|
*/
|
|
u->uh_ulen = sizeof(*u) + 4;
|
|
ip->ip_len = (IP_HL(ip) << 2) + ntohs(u->uh_ulen);
|
|
printf("4.3.1 UDP sport = 0\n");
|
|
u->uh_sport = 0;
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("0\n");
|
|
fflush(stdout);
|
|
PAUSE();
|
|
printf("4.3.2 UDP sport = 1\n");
|
|
u->uh_sport = htons(1);
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("1\n");
|
|
fflush(stdout);
|
|
PAUSE();
|
|
printf("4.3.3 UDP sport = 32767\n");
|
|
u->uh_sport = htons(32767);
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("32767\n");
|
|
fflush(stdout);
|
|
PAUSE();
|
|
printf("4.3.4 UDP sport = 32768\n");
|
|
u->uh_sport = htons(32768);
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("32768\n");
|
|
putchar('\n');
|
|
fflush(stdout);
|
|
PAUSE();
|
|
printf("4.3.5 UDP sport = 65535\n");
|
|
u->uh_sport = htons(65535);
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("65535\n");
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
if (!ptest || (ptest == 4)) {
|
|
/*
|
|
* Test 4: dport = 0, dport = 1, dport = 32767
|
|
* dport = 32768, dport = 65535
|
|
*/
|
|
u->uh_ulen = ntohs(sizeof(*u) + 4);
|
|
u->uh_sport = htons(1);
|
|
ip->ip_len = (IP_HL(ip) << 2) + ntohs(u->uh_ulen);
|
|
printf("4.4.1 UDP dport = 0\n");
|
|
u->uh_dport = 0;
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("0\n");
|
|
fflush(stdout);
|
|
PAUSE();
|
|
printf("4.4.2 UDP dport = 1\n");
|
|
u->uh_dport = htons(1);
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("1\n");
|
|
fflush(stdout);
|
|
PAUSE();
|
|
printf("4.4.3 UDP dport = 32767\n");
|
|
u->uh_dport = htons(32767);
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("32767\n");
|
|
fflush(stdout);
|
|
PAUSE();
|
|
printf("4.4.4 UDP dport = 32768\n");
|
|
u->uh_dport = htons(32768);
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("32768\n");
|
|
fflush(stdout);
|
|
PAUSE();
|
|
printf("4.4.5 UDP dport = 65535\n");
|
|
u->uh_dport = htons(65535);
|
|
(void) send_udp(nfd, 1500, ip, gwip);
|
|
printf("65535\n");
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
if (!ptest || (ptest == 5)) {
|
|
/*
|
|
* Test 5: sizeof(ip_t) <= MTU <= sizeof(udphdr_t) +
|
|
* sizeof(ip_t)
|
|
*/
|
|
printf("4.5 UDP 20 <= MTU <= 32\n");
|
|
for (i = sizeof(*ip); i <= ntohs(u->uh_ulen); i++) {
|
|
(void) send_udp(nfd, i, ip, gwip);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
}
|
|
|
|
|
|
/* Perform test 5 (TCP) */
|
|
|
|
void
|
|
ip_test5(char *dev, int mtu, ip_t *ip, struct in_addr gwip, int ptest)
|
|
{
|
|
#ifdef USE_NANOSLEEP
|
|
struct timespec ts;
|
|
#else
|
|
struct timeval tv;
|
|
#endif
|
|
tcphdr_t *t;
|
|
int nfd, i;
|
|
|
|
t = (tcphdr_t *)((char *)ip + (IP_HL(ip) << 2));
|
|
t->th_x2 = 0;
|
|
TCP_OFF_A(t, 0);
|
|
t->th_sport = htons(1);
|
|
t->th_dport = htons(1);
|
|
t->th_win = htons(4096);
|
|
t->th_urp = 0;
|
|
t->th_sum = 0;
|
|
t->th_seq = htonl(1);
|
|
t->th_ack = 0;
|
|
ip->ip_len = sizeof(ip_t) + sizeof(tcphdr_t);
|
|
|
|
nfd = initdevice(dev, 1);
|
|
if (nfd == -1)
|
|
return;
|
|
|
|
if (!ptest || (ptest == 1)) {
|
|
/*
|
|
* Test 1: flags variations, 0 - 3f
|
|
*/
|
|
TCP_OFF_A(t, sizeof(*t) >> 2);
|
|
printf("5.1 Test TCP flag combinations\n");
|
|
for (i = 0; i <= (TH_URG|TH_ACK|TH_PUSH|TH_RST|TH_SYN|TH_FIN);
|
|
i++) {
|
|
t->th_flags = i;
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
if (!ptest || (ptest == 2)) {
|
|
t->th_flags = TH_SYN;
|
|
/*
|
|
* Test 2: seq = 0, seq = 1, seq = 0x7fffffff, seq=0x80000000,
|
|
* seq = 0xa000000, seq = 0xffffffff
|
|
*/
|
|
printf("5.2.1 TCP seq = 0\n");
|
|
t->th_seq = htonl(0);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.2.2 TCP seq = 1\n");
|
|
t->th_seq = htonl(1);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.2.3 TCP seq = 0x7fffffff\n");
|
|
t->th_seq = htonl(0x7fffffff);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.2.4 TCP seq = 0x80000000\n");
|
|
t->th_seq = htonl(0x80000000);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.2.5 TCP seq = 0xc0000000\n");
|
|
t->th_seq = htonl(0xc0000000);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.2.6 TCP seq = 0xffffffff\n");
|
|
t->th_seq = htonl(0xffffffff);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
if (!ptest || (ptest == 3)) {
|
|
t->th_flags = TH_ACK;
|
|
/*
|
|
* Test 3: ack = 0, ack = 1, ack = 0x7fffffff, ack = 0x8000000
|
|
* ack = 0xa000000, ack = 0xffffffff
|
|
*/
|
|
printf("5.3.1 TCP ack = 0\n");
|
|
t->th_ack = 0;
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.3.2 TCP ack = 1\n");
|
|
t->th_ack = htonl(1);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.3.3 TCP ack = 0x7fffffff\n");
|
|
t->th_ack = htonl(0x7fffffff);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.3.4 TCP ack = 0x80000000\n");
|
|
t->th_ack = htonl(0x80000000);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.3.5 TCP ack = 0xc0000000\n");
|
|
t->th_ack = htonl(0xc0000000);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.3.6 TCP ack = 0xffffffff\n");
|
|
t->th_ack = htonl(0xffffffff);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
if (!ptest || (ptest == 4)) {
|
|
t->th_flags = TH_SYN;
|
|
/*
|
|
* Test 4: win = 0, win = 32768, win = 65535
|
|
*/
|
|
printf("5.4.1 TCP win = 0\n");
|
|
t->th_seq = htonl(0);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.4.2 TCP win = 32768\n");
|
|
t->th_seq = htonl(0x7fff);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.4.3 TCP win = 65535\n");
|
|
t->th_win = htons(0xffff);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
#if !defined(linux) && !defined(__SVR4) && !defined(__svr4__) && \
|
|
!defined(__sgi) && !defined(__hpux) && !defined(__osf__)
|
|
{
|
|
struct tcpcb *tcbp, tcb;
|
|
struct tcpiphdr ti;
|
|
struct sockaddr_in sin;
|
|
int fd;
|
|
socklen_t slen;
|
|
|
|
bzero((char *)&sin, sizeof(sin));
|
|
|
|
for (i = 1; i < 63; i++) {
|
|
fd = socket(AF_INET, SOCK_STREAM, 0);
|
|
bzero((char *)&sin, sizeof(sin));
|
|
sin.sin_addr.s_addr = ip->ip_dst.s_addr;
|
|
sin.sin_port = htons(i);
|
|
sin.sin_family = AF_INET;
|
|
if (!connect(fd, (struct sockaddr *)&sin, sizeof(sin)))
|
|
break;
|
|
close(fd);
|
|
}
|
|
|
|
if (i == 63) {
|
|
printf("Couldn't open a TCP socket between ports 1 and 63\n");
|
|
printf("to host %s for test 5 and 6 - skipping.\n",
|
|
inet_ntoa(ip->ip_dst));
|
|
goto skip_five_and_six;
|
|
}
|
|
|
|
bcopy((char *)ip, (char *)&ti, sizeof(*ip));
|
|
t->th_dport = htons(i);
|
|
slen = sizeof(sin);
|
|
if (!getsockname(fd, (struct sockaddr *)&sin, &slen))
|
|
t->th_sport = sin.sin_port;
|
|
if (!(tcbp = find_tcp(fd, &ti))) {
|
|
printf("Can't find PCB\n");
|
|
goto skip_five_and_six;
|
|
}
|
|
KMCPY(&tcb, tcbp, sizeof(tcb));
|
|
ti.ti_win = tcb.rcv_adv;
|
|
ti.ti_seq = htonl(tcb.snd_nxt - 1);
|
|
ti.ti_ack = tcb.rcv_nxt;
|
|
|
|
if (!ptest || (ptest == 5)) {
|
|
/*
|
|
* Test 5: urp
|
|
*/
|
|
t->th_flags = TH_ACK|TH_URG;
|
|
printf("5.5.1 TCP Urgent pointer, sport %hu dport %hu\n",
|
|
ntohs(t->th_sport), ntohs(t->th_dport));
|
|
t->th_urp = htons(1);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
|
|
t->th_seq = htonl(tcb.snd_nxt);
|
|
ip->ip_len = sizeof(ip_t) + sizeof(tcphdr_t) + 1;
|
|
t->th_urp = htons(0x7fff);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
t->th_urp = htons(0x8000);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
t->th_urp = htons(0xffff);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
PAUSE();
|
|
t->th_urp = 0;
|
|
t->th_flags &= ~TH_URG;
|
|
ip->ip_len = sizeof(ip_t) + sizeof(tcphdr_t);
|
|
}
|
|
|
|
if (!ptest || (ptest == 6)) {
|
|
/*
|
|
* Test 6: data offset, off = 0, off is inside, off is outside
|
|
*/
|
|
t->th_flags = TH_ACK;
|
|
printf("5.6.1 TCP off = 1-15, len = 40\n");
|
|
for (i = 1; i < 16; i++) {
|
|
TCP_OFF_A(t, ntohs(i));
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
ip->ip_len = sizeof(ip_t) + sizeof(tcphdr_t);
|
|
}
|
|
|
|
(void) close(fd);
|
|
}
|
|
skip_five_and_six:
|
|
#endif
|
|
t->th_seq = htonl(1);
|
|
t->th_ack = htonl(1);
|
|
TCP_OFF_A(t, 0);
|
|
|
|
if (!ptest || (ptest == 7)) {
|
|
t->th_flags = TH_SYN;
|
|
/*
|
|
* Test 7: sport = 0, sport = 1, sport = 32767
|
|
* sport = 32768, sport = 65535
|
|
*/
|
|
printf("5.7.1 TCP sport = 0\n");
|
|
t->th_sport = 0;
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.7.2 TCP sport = 1\n");
|
|
t->th_sport = htons(1);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.7.3 TCP sport = 32767\n");
|
|
t->th_sport = htons(32767);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.7.4 TCP sport = 32768\n");
|
|
t->th_sport = htons(32768);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.7.5 TCP sport = 65535\n");
|
|
t->th_sport = htons(65535);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
if (!ptest || (ptest == 8)) {
|
|
t->th_sport = htons(1);
|
|
t->th_flags = TH_SYN;
|
|
/*
|
|
* Test 8: dport = 0, dport = 1, dport = 32767
|
|
* dport = 32768, dport = 65535
|
|
*/
|
|
printf("5.8.1 TCP dport = 0\n");
|
|
t->th_dport = 0;
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.8.2 TCP dport = 1\n");
|
|
t->th_dport = htons(1);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.8.3 TCP dport = 32767\n");
|
|
t->th_dport = htons(32767);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.8.4 TCP dport = 32768\n");
|
|
t->th_dport = htons(32768);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
printf("5.8.5 TCP dport = 65535\n");
|
|
t->th_dport = htons(65535);
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
/* LAND attack - self connect, so make src & dst ip/port the same */
|
|
if (!ptest || (ptest == 9)) {
|
|
printf("5.9 TCP LAND attack. sport = 25, dport = 25\n");
|
|
/* chose SMTP port 25 */
|
|
t->th_sport = htons(25);
|
|
t->th_dport = htons(25);
|
|
t->th_flags = TH_SYN;
|
|
ip->ip_src = ip->ip_dst;
|
|
(void) send_tcp(nfd, mtu, ip, gwip);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
|
|
/* TCP options header checking */
|
|
/* 0 length options, etc */
|
|
}
|
|
|
|
|
|
/* Perform test 6 (exhaust mbuf test) */
|
|
|
|
void
|
|
ip_test6(char *dev, int mtu, ip_t *ip, struct in_addr gwip, int ptest)
|
|
{
|
|
#ifdef USE_NANOSLEEP
|
|
struct timespec ts;
|
|
#else
|
|
struct timeval tv;
|
|
#endif
|
|
udphdr_t *u;
|
|
int nfd, i, j, k;
|
|
|
|
IP_V_A(ip, IPVERSION);
|
|
ip->ip_tos = 0;
|
|
ip->ip_off = 0;
|
|
ip->ip_ttl = 60;
|
|
ip->ip_p = IPPROTO_UDP;
|
|
ip->ip_sum = 0;
|
|
u = (udphdr_t *)(ip + 1);
|
|
u->uh_sport = htons(1);
|
|
u->uh_dport = htons(9);
|
|
u->uh_sum = 0;
|
|
|
|
nfd = initdevice(dev, 1);
|
|
if (nfd == -1)
|
|
return;
|
|
|
|
u->uh_ulen = htons(7168);
|
|
|
|
printf("6. Exhaustive mbuf test.\n");
|
|
printf(" Send 7k packet in 768 & 128 byte fragments, 128 times.\n");
|
|
printf(" Total of around 8,900 packets\n");
|
|
for (i = 0; i < 128; i++) {
|
|
/*
|
|
* First send the entire packet in 768 byte chunks.
|
|
*/
|
|
ip->ip_len = sizeof(*ip) + 768 + sizeof(*u);
|
|
IP_HL_A(ip, sizeof(*ip) >> 2);
|
|
ip->ip_off = htons(IP_MF);
|
|
(void) send_ip(nfd, 1500, ip, gwip, 1);
|
|
printf("%d %d\r", i, 0);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
/*
|
|
* And again using 128 byte chunks.
|
|
*/
|
|
ip->ip_len = sizeof(*ip) + 128 + sizeof(*u);
|
|
ip->ip_off = htons(IP_MF);
|
|
(void) send_ip(nfd, 1500, ip, gwip, 1);
|
|
printf("%d %d\r", i, 0);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
for (j = 768; j < 3584; j += 768) {
|
|
ip->ip_len = sizeof(*ip) + 768;
|
|
ip->ip_off = htons(IP_MF|(j>>3));
|
|
(void) send_ip(nfd, 1500, ip, gwip, 1);
|
|
printf("%d %d\r", i, j);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
|
|
ip->ip_len = sizeof(*ip) + 128;
|
|
for (k = j - 768; k < j; k += 128) {
|
|
ip->ip_off = htons(IP_MF|(k>>3));
|
|
(void) send_ip(nfd, 1500, ip, gwip, 1);
|
|
printf("%d %d\r", i, k);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
}
|
|
}
|
|
putchar('\n');
|
|
}
|
|
|
|
|
|
/* Perform test 7 (random packets) */
|
|
|
|
static u_long tbuf[64];
|
|
|
|
void
|
|
ip_test7(char *dev, int mtu, ip_t *ip, struct in_addr gwip, int ptest)
|
|
{
|
|
ip_t *pip;
|
|
#ifdef USE_NANOSLEEP
|
|
struct timespec ts;
|
|
#else
|
|
struct timeval tv;
|
|
#endif
|
|
int nfd, i, j;
|
|
u_char *s;
|
|
|
|
nfd = initdevice(dev, 1);
|
|
if (nfd == -1)
|
|
return;
|
|
|
|
pip = (ip_t *)tbuf;
|
|
|
|
srand(time(NULL) ^ (getpid() * getppid()));
|
|
|
|
printf("7. send 1024 random IP packets.\n");
|
|
|
|
for (i = 0; i < 512; i++) {
|
|
for (s = (u_char *)pip, j = 0; j < sizeof(tbuf); j++, s++)
|
|
*s = (rand() >> 13) & 0xff;
|
|
IP_V_A(pip, IPVERSION);
|
|
bcopy((char *)&ip->ip_dst, (char *)&pip->ip_dst,
|
|
sizeof(struct in_addr));
|
|
pip->ip_sum = 0;
|
|
pip->ip_len &= 0xff;
|
|
(void) send_ip(nfd, mtu, pip, gwip, 0);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
|
|
for (i = 0; i < 512; i++) {
|
|
for (s = (u_char *)pip, j = 0; j < sizeof(tbuf); j++, s++)
|
|
*s = (rand() >> 13) & 0xff;
|
|
IP_V_A(pip, IPVERSION);
|
|
pip->ip_off &= htons(0xc000);
|
|
bcopy((char *)&ip->ip_dst, (char *)&pip->ip_dst,
|
|
sizeof(struct in_addr));
|
|
pip->ip_sum = 0;
|
|
pip->ip_len &= 0xff;
|
|
(void) send_ip(nfd, mtu, pip, gwip, 0);
|
|
printf("%d\r", i);
|
|
fflush(stdout);
|
|
PAUSE();
|
|
}
|
|
putchar('\n');
|
|
}
|