124 lines
4.7 KiB
C++
124 lines
4.7 KiB
C++
#include <stdio.h>
|
||
#include <arpa/inet.h>
|
||
#include <stdlib.h>
|
||
#include <string.h>
|
||
#include <time.h>
|
||
|
||
#include "tsg_entry.h"
|
||
#include <MESA/MESA_handle_logger.h>
|
||
#include "tsg_protocol_common.h"
|
||
|
||
#define MTU_LEN 65535
|
||
#define MAC_LEN 6
|
||
#define MAC_LEN_2 ((MAC_LEN)+(MAC_LEN))
|
||
#define ETH_IP_TYPE_LEN 2
|
||
#define ETH_LEN ((MAC_LEN_2)+(ETH_IP_TYPE_LEN))
|
||
|
||
#define IPV4_TYPE 1 //ADDR_TYPE_IPV4 ==1 , 取的enum 0x0800
|
||
#define IPV6_TYPE 2 //ADDR_TYPE_IPV6 ==2 0x86dd
|
||
#define TCP_TYPE 0x06
|
||
#define UDP_TYPE 0x11
|
||
|
||
#define IPV4_LEN 20 //ip_len(20)
|
||
#define IPV4_PROTOCOL_INDEX 9 //ipv4_protocol_index_len
|
||
#define IPV4_TCP_HEAD_LEN_INDEX 32 //ip_len(20) + tcp_head_len_index()
|
||
#define ETH_IPV4_IP_UPD_LEN 28 //ip_len(20) + udp_len(8)
|
||
#define IPV4_IP_LEN_INDEX 2 //ip_len_index(2)
|
||
|
||
#define IPV6_PROTOCOL_INDEX 6 //ipv6_protocol_index(6)
|
||
#define IPV6_LEN 40
|
||
#define ETH_IPV6_LEN 40 //ipv6_len(40)
|
||
#define IPV6_TCP_OPTION_LEN_INDEX 52 //ipv6_len(40) + tcp_head_len_index(12)
|
||
#define IPV6_UDP_PALYLOAD_START_INDEX 48 //ipv6_len(40) + udp_len(8)
|
||
#define IPV6_IP_PAYLOAD_INDEX 4 //ipv6_payload_index(4)
|
||
|
||
int swap_payload2byte(char *str, int endlen)
|
||
{
|
||
int i = 0;
|
||
int j = 0;
|
||
char temp;
|
||
|
||
if(endlen<4){ //最少满足2个16bit的长度，即最小4字节。
|
||
return 0;
|
||
}
|
||
|
||
//这样交换是别面校验和不对的问题
|
||
for(i=1; i<endlen; i=i+2){
|
||
for (j=i+2; j<endlen; j=j+2){
|
||
if(str[i] != str[j]){
|
||
temp = str[i];
|
||
str[i] = str[j];
|
||
str[j] = temp;
|
||
return i;
|
||
}
|
||
}
|
||
}
|
||
return 0;
|
||
}
|
||
|
||
int send_tamper_xxx(const struct streaminfo *a_stream, long *tamper_count, const void *raw_pkt)
|
||
{
|
||
const char *p_trans_payload = NULL;
|
||
int trans_layload_len = 0;
|
||
char tamper_buf[MTU_LEN] = {0};
|
||
int tamper_index = 0;
|
||
|
||
if(a_stream==NULL || raw_pkt==NULL){
|
||
return -1;
|
||
}
|
||
|
||
*tamper_count = *tamper_count + 1;
|
||
p_trans_payload = (char *)a_stream->ptcpdetail->pdata;
|
||
trans_layload_len = a_stream->ptcpdetail->datalen;
|
||
|
||
|
||
if((p_trans_payload==NULL)||(trans_layload_len<=4)){
|
||
FS_operate(g_tsg_para.fs2_handle, g_tsg_para.fs2_field_id[TSG_FS2_TAMPER_FAILED_PLOAD_LESS_4], 0, FS_OP_ADD, 1);
|
||
MESA_handle_runtime_log(g_tsg_para.logger,
|
||
RLOG_LV_DEBUG,
|
||
__FUNCTION__,
|
||
"Addr: %s, try send num %ld ptcpdetail->pdata %p, ptcpdetail->datalen %d rawpkt %p , but packet is not tamper because the payload is too short or there is no payload",
|
||
PRINTADDR(a_stream, g_tsg_para.level),
|
||
*tamper_count,
|
||
p_trans_payload,
|
||
trans_layload_len,
|
||
raw_pkt);
|
||
|
||
return -1;
|
||
}
|
||
|
||
memcpy(tamper_buf, p_trans_payload, trans_layload_len);
|
||
tamper_index = swap_payload2byte(tamper_buf, trans_layload_len);
|
||
if(tamper_index > 0 ){
|
||
if(0 == tsg_send_inject_packet(a_stream, SIO_DEFAULT, tamper_buf, trans_layload_len, a_stream->routedir)){
|
||
FS_operate(g_tsg_para.fs2_handle, g_tsg_para.fs2_field_id[TSG_FS2_SUCESS_TAMPER], 0, FS_OP_ADD, 1);
|
||
MESA_handle_runtime_log(g_tsg_para.logger,
|
||
RLOG_LV_DEBUG,
|
||
__FUNCTION__,
|
||
"Addr: %s, try send num %ld ptcpdetail->pdata %p, ptcpdetail->datalen %d rawpkt %p, modify the index(%d) position of the payload:(old: %02x %02x %02x %02x, new: %02x %02x %02x %02x)",
|
||
PRINTADDR(a_stream, g_tsg_para.level),
|
||
*tamper_count,
|
||
p_trans_payload,
|
||
trans_layload_len,
|
||
raw_pkt,
|
||
tamper_index,
|
||
(uint8_t)p_trans_payload[tamper_index-1], (uint8_t)p_trans_payload[tamper_index], (uint8_t)p_trans_payload[tamper_index+1], (uint8_t)p_trans_payload[tamper_index+2],
|
||
(uint8_t)tamper_buf[tamper_index-1], (uint8_t)tamper_buf[tamper_index], (uint8_t)tamper_buf[tamper_index+1], (uint8_t)tamper_buf[tamper_index+2]);
|
||
return 0;
|
||
}
|
||
}
|
||
|
||
FS_operate(g_tsg_para.fs2_handle, g_tsg_para.fs2_field_id[TSG_FS2_TAMPER_FAILED_NOSWAP], 0, FS_OP_ADD, 1);
|
||
MESA_handle_runtime_log(g_tsg_para.logger,
|
||
RLOG_LV_DEBUG,
|
||
__FUNCTION__,
|
||
"Addr: %s, try send num %ld ptcpdetail->pdata %p, ptcpdetail->datalen %d rawpkt %p, payload tamper failed because payload data same",
|
||
PRINTADDR(a_stream, g_tsg_para.level),
|
||
*tamper_count,
|
||
p_trans_payload,
|
||
trans_layload_len,
|
||
raw_pkt);
|
||
|
||
return -1;
|
||
}
|