【问题标题】:ip4 packet assembled as ip6 - libnetip4 数据包组装为 ip6 - libnet
【发布时间】:2018-12-03 11:05:19
【问题描述】:

我编写了一个从链路层向上创建 TCP/IPv4 数据包的 C 程序。该程序的目标是接收带有打开套接字的单个数据包,无论是原始套接字还是流套接字。该数据包由以太网头、tcp 头和 ipv4 组成:

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <libnet.h>
#include <time.h>

uint8_t *randmac();    //creates my random source-mac, shady I know but I got 
                       //tired of typing in the same input over and over
void gateway();        //gets my standart gateway i.e. the router (as far as 
                       //I understand the ethernet layer is for the router 
                       //and tcp and ip for the rest of the net.)



int main() {
uint32_t src, dst, seq, ack;
char payload[1024], destip[16];
uint16_t sp = 2001, dp = 2000;
libnet_ptag_t tcp;
libnet_ptag_t ip4;
libnet_ptag_t eth;
char errbuf[LIBNET_ERRBUF_SIZE];
int i, bytes;
uint8_t *dstmc;     //destination mac address (router)
uint8_t *smc;       //source mac address
int  len;
libnet_t * l;

l = libnet_init(LIBNET_LINK, NULL, errbuf);
if(l == NULL)

//getting the destination ip-address, works all right...

//payload is fine too

smc = malloc(6);
gatemac = malloc(6);

libnet_seed_prand(l);
src = libnet_get_prand(LIBNET_PRu32);
seq = 0;
ack = libnet_get_prand(LIBNET_PRu32);
dst = libnet_name2addr4(l, destip, LIBNET_DONT_RESOLVE);
smc = randmac();
gateway();

//getting the rest of the required addresses etc, works as well...




tcp = libnet_build_tcp(sp, dp, seq, ack, TH_SYN, 0, 0, 0, LIBNET_TCP_H + 
sizeof(payload),(uint8_t *) payload, sizeof(payload), l, 0);
if(tcp == -1)
printf("(1)unable because: %s\n", libnet_geterror(l));
perror("libnet_build_tcp()");

ip4 = libnet_build_ipv4(LIBNET_TCP_H + LIBNET_IPV4_H + sizeof(payload), 
IPPROTO_TCP, 1, 1024, 60, 0, 0, src, dst, NULL, 0, l, 0);   //or (uint8_t) 
if(ip4 == -1)
printf("(2)unable because: %s\n", libnet_geterror(l));
perror("libnet_build_ipv4()");

eth = libnet_build_ethernet(gatemac, smc, ETHERTYPE_IP, NULL, 0, l, 0);
if(eth == -1)
printf("(3) unable because: %s\n", libnet_geterror(l));
perror("libnet_build_ethernet()");


bytes = libnet_write(l);

//error handling

}

程序本身工作正常,没有错误,数据包被写入等等。但有趣的是:我无法使用任何原始或 ipv4 套接字接收它们。所以我打开了 tcpdump,看看数据包是否已经发送,结果如下:

 13:43:24.003324 IP 74.253.145.81 > 192.168.88.130: hopopt
 13:43:27.007860 IP 74.253.145.81 > 192.168.88.130: hopopt

 //Random source address, I also sent multiple packets to eliminate the 
 //chances of missing them.
 //There is also no doubt that these are truly my programmed packets due to 
 //their number and random addresses.

我做了一些研究并发现,“hopopt”代表 ipv6 使用的逐跳扩展头。为什么我清楚地使用了 libnet_build_ipv4() 函数时会发生这种情况。还有没有办法正确接收这些单个数据包或只是让它们成为正常的 ipv4?

【问题讨论】:

    标签: c ipv6 ipv4 packets libnet


    【解决方案1】:

    看起来,您在libnet_build_ipv4 中没有使用正确的参数顺序:

    ip4 = libnet_build_ipv4(LIBNET_TCP_H + LIBNET_IPV4_H + sizeof(payload), 
    

    IPPROTO_TCP, 1, 1024, 60, 0, 0, src, dst, NULL, 0, l, 0);

    正确的顺序是:

    libnet_ptag_t libnet_build_ipv4 (u_int16_t len,
    u_int8_t tos, u_int16_t id, u_int16_t frag,
    u_int8_t ttl, u_int8_t prot, u_int16_t sum,
    u_int32_t src, u_int32_t dst, u_int8_t * payload,
    u_int32_t payload_s, libnet_t * l, libnet_ptag_t ptag);
    

    所以,您的第六个参数 (prot) 是 0,它与您使用 tcpdump 观察到的逐跳选项 (hopopt) 完全对应。

    你可能想要这样的东西:

    ip4 = libnet_build_ipv4(LIBNET_TCP_H + LIBNET_IPV4_H + sizeof(payload), //len
                            0,           // tos
                            1234,        // some id
                            0,           // No fragment
                            0x40,        // Standard TTL (64)
                            IPPROTO_TCP, // Next protocol goes here
                            0,           // Checksum, auto-filled?
                            src,         // IP source address
                            dst,         // IP destination address
                            NULL,        // payload
                            0,           // payload length
                            l,           // libnet handle
                            0            // ptag
    );
    

    如果您修复了参数的顺序,它应该可以按预期工作!另请参阅 libnet Tutorial here

    【讨论】:

    • 只有一件事:现在数据包被组装成 cisco-sccp 协议。不知道为什么。
    猜你喜欢
    • 1970-01-01
    • 2013-11-16
    • 1970-01-01
    • 2012-03-09
    • 1970-01-01
    • 1970-01-01
    • 2015-06-05
    • 1970-01-01
    • 1970-01-01
    相关资源
    最近更新 更多