pcap: update to version 1.0.0, add extension for changing the desired protocol for the internal raw socket (useful for reducing the cpu overhead of capture)
SVN-Revision: 15398v19.07.3_mercusys_ac12_duma
Felix Fietkau
15 years ago
parent
8ce7b559d0
commit
25e9d90256
@ -1,11 +0,0 @@
|
||||
--- a/Makefile.in
|
||||
+++ b/Makefile.in
|
||||
@@ -119,7 +119,7 @@
|
||||
|
||||
libpcap.a: $(OBJ)
|
||||
@rm -f $@
|
||||
- ar rc $@ $(OBJ) $(LIBS)
|
||||
+ $(AR) rc $@ $(OBJ) $(LIBS)
|
||||
$(RANLIB) $@
|
||||
|
||||
$(SHAREDLIB): $(OBJ_PIC)
|
||||
@ -0,0 +1,149 @@
|
||||
--- a/pcap-linux.c
|
||||
+++ b/pcap-linux.c
|
||||
@@ -297,6 +297,12 @@ pcap_create(const char *device, char *eb
|
||||
{
|
||||
pcap_t *handle;
|
||||
|
||||
+ /*
|
||||
+ * A null device name is equivalent to the "any" device.
|
||||
+ */
|
||||
+ if (device == NULL)
|
||||
+ device = "any";
|
||||
+
|
||||
#ifdef HAVE_DAG_API
|
||||
if (strstr(device, "dag")) {
|
||||
return dag_create(device, ebuf);
|
||||
@@ -338,10 +344,9 @@ pcap_can_set_rfmon_linux(pcap_t *p)
|
||||
struct iwreq ireq;
|
||||
#endif
|
||||
|
||||
- if (p->opt.source == NULL) {
|
||||
+ if (strcmp(p->opt.source, "any") == 0) {
|
||||
/*
|
||||
- * This is equivalent to the "any" device, and we don't
|
||||
- * support monitor mode on it.
|
||||
+ * Monitor mode makes no sense on the "any" device.
|
||||
*/
|
||||
return 0;
|
||||
}
|
||||
@@ -518,12 +523,11 @@ pcap_activate_linux(pcap_t *handle)
|
||||
handle->stats_op = pcap_stats_linux;
|
||||
|
||||
/*
|
||||
- * NULL and "any" are special devices which give us the hint to
|
||||
- * monitor all devices.
|
||||
+ * The "any" device is a special device which causes us not
|
||||
+ * to bind to a particular device and thus to look at all
|
||||
+ * devices.
|
||||
*/
|
||||
- if (!device || strcmp(device, "any") == 0) {
|
||||
- device = NULL;
|
||||
- handle->md.device = strdup("any");
|
||||
+ if (strcmp(device, "any") == 0) {
|
||||
if (handle->opt.promisc) {
|
||||
handle->opt.promisc = 0;
|
||||
/* Just a warning. */
|
||||
@@ -531,10 +535,9 @@ pcap_activate_linux(pcap_t *handle)
|
||||
"Promiscuous mode not supported on the \"any\" device");
|
||||
status = PCAP_WARNING_PROMISC_NOTSUP;
|
||||
}
|
||||
+ }
|
||||
|
||||
- } else
|
||||
- handle->md.device = strdup(device);
|
||||
-
|
||||
+ handle->md.device = strdup(device);
|
||||
if (handle->md.device == NULL) {
|
||||
snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "strdup: %s",
|
||||
pcap_strerror(errno) );
|
||||
@@ -1657,19 +1660,21 @@ static int
|
||||
activate_new(pcap_t *handle)
|
||||
{
|
||||
#ifdef HAVE_PF_PACKET_SOCKETS
|
||||
+ const char *device = handle->opt.source;
|
||||
+ int is_any_device = (strcmp(device, "any") == 0);
|
||||
int sock_fd = -1, arptype, val;
|
||||
int err = 0;
|
||||
struct packet_mreq mr;
|
||||
- const char* device = handle->opt.source;
|
||||
|
||||
/*
|
||||
- * Open a socket with protocol family packet. If a device is
|
||||
- * given we try to open it in raw mode otherwise we use
|
||||
- * the cooked interface.
|
||||
- */
|
||||
- sock_fd = device ?
|
||||
- socket(PF_PACKET, SOCK_RAW, htons(ETH_P_ALL))
|
||||
- : socket(PF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL));
|
||||
+ * Open a socket with protocol family packet. If the
|
||||
+ * "any" device was specified, we open a SOCK_DGRAM
|
||||
+ * socket for the cooked interface, otherwise we first
|
||||
+ * try a SOCK_RAW socket for the raw interface.
|
||||
+ */
|
||||
+ sock_fd = is_any_device ?
|
||||
+ socket(PF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) :
|
||||
+ socket(PF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
|
||||
|
||||
if (sock_fd == -1) {
|
||||
snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "socket: %s",
|
||||
@@ -1704,7 +1709,7 @@ activate_new(pcap_t *handle)
|
||||
* to cooked mode if we have an unknown interface type
|
||||
* or a type we know doesn't work well in raw mode.
|
||||
*/
|
||||
- if (device) {
|
||||
+ if (!is_any_device) {
|
||||
/* Assume for now we don't need cooked mode. */
|
||||
handle->md.cooked = 0;
|
||||
|
||||
@@ -1819,15 +1824,23 @@ activate_new(pcap_t *handle)
|
||||
}
|
||||
} else {
|
||||
/*
|
||||
- * This is cooked mode.
|
||||
+ * The "any" device.
|
||||
+ */
|
||||
+ if (handle->opt.rfmon) {
|
||||
+ /*
|
||||
+ * It doesn't support monitor mode.
|
||||
+ */
|
||||
+ return PCAP_ERROR_RFMON_NOTSUP;
|
||||
+ }
|
||||
+
|
||||
+ /*
|
||||
+ * It uses cooked mode.
|
||||
*/
|
||||
handle->md.cooked = 1;
|
||||
handle->linktype = DLT_LINUX_SLL;
|
||||
|
||||
/*
|
||||
* We're not bound to a device.
|
||||
- * XXX - true? Or true only if we're using
|
||||
- * the "any" device?
|
||||
* For now, we're using this as an indication
|
||||
* that we can't transmit; stop doing that only
|
||||
* if we figure out how to transmit in cooked
|
||||
@@ -1852,10 +1865,13 @@ activate_new(pcap_t *handle)
|
||||
|
||||
/*
|
||||
* Hmm, how can we set promiscuous mode on all interfaces?
|
||||
- * I am not sure if that is possible at all.
|
||||
+ * I am not sure if that is possible at all. For now, we
|
||||
+ * silently ignore attempts to turn promiscuous mode on
|
||||
+ * for the "any" device (so you don't have to explicitly
|
||||
+ * disable it in programs such as tcpdump).
|
||||
*/
|
||||
|
||||
- if (device && handle->opt.promisc) {
|
||||
+ if (!is_any_device && handle->opt.promisc) {
|
||||
memset(&mr, 0, sizeof(mr));
|
||||
mr.mr_ifindex = handle->md.ifindex;
|
||||
mr.mr_type = PACKET_MR_PROMISC;
|
||||
@@ -3118,7 +3134,7 @@ activate_old(pcap_t *handle)
|
||||
|
||||
/* Bind to the given device */
|
||||
|
||||
- if (!device) {
|
||||
+ if (strcmp(device, "any") == 0) {
|
||||
strncpy(handle->errbuf, "pcap_activate: The \"any\" device isn't supported on 2.0[.x]-kernel systems",
|
||||
PCAP_ERRBUF_SIZE);
|
||||
return PCAP_ERROR;
|
||||
@ -1,38 +0,0 @@
|
||||
--- a/nametoaddr.c
|
||||
+++ b/nametoaddr.c
|
||||
@@ -410,7 +410,7 @@
|
||||
e = ep = (u_char *)malloc(6);
|
||||
|
||||
while (*s) {
|
||||
- if (*s == ':')
|
||||
+ if (*s == ':' || *s == '.')
|
||||
s += 1;
|
||||
d = xdtoi(*s++);
|
||||
if (isxdigit((unsigned char)*s)) {
|
||||
--- a/scanner.l
|
||||
+++ b/scanner.l
|
||||
@@ -80,6 +80,7 @@
|
||||
N ([0-9]+|(0X|0x)[0-9A-Fa-f]+)
|
||||
B ([0-9A-Fa-f][0-9A-Fa-f]?)
|
||||
W ([0-9A-Fa-f][0-9A-Fa-f]?[0-9A-Fa-f]?[0-9A-Fa-f]?)
|
||||
+X [0-9A-Fa-f]
|
||||
|
||||
%a 18400
|
||||
%o 21500
|
||||
@@ -310,7 +311,7 @@
|
||||
{N} { yylval.i = stoi((char *)yytext); return NUM; }
|
||||
({N}\.{N})|({N}\.{N}\.{N})|({N}\.{N}\.{N}\.{N}) {
|
||||
yylval.s = sdup((char *)yytext); return HID; }
|
||||
-{B}:{B}:{B}:{B}:{B}:{B} { yylval.e = pcap_ether_aton((char *)yytext);
|
||||
+({B}:{B}:{B}:{B}:{B}:{B})|({B}\.{B}\.{B}\.{B}\.{B}\.{B}) { yylval.e = pcap_ether_aton((char *)yytext);
|
||||
return EID; }
|
||||
{V6} {
|
||||
#ifdef INET6
|
||||
@@ -328,6 +329,7 @@
|
||||
#endif /*INET6*/
|
||||
}
|
||||
{B}:+({B}:+)+ { bpf_error("bogus ethernet address %s", yytext); }
|
||||
+{X}{12} { yylval.e = pcap_ether_aton((char *)yytext); return EID;}
|
||||
icmptype { yylval.i = 0; return NUM; }
|
||||
icmpcode { yylval.i = 1; return NUM; }
|
||||
icmp-echoreply { yylval.i = 0; return NUM; }
|
||||
@ -0,0 +1,11 @@
|
||||
--- a/Makefile.in
|
||||
+++ b/Makefile.in
|
||||
@@ -484,6 +484,8 @@ install: libpcap.a pcap-config
|
||||
$(DESTDIR)$(includedir)/pcap-bpf.h
|
||||
$(INSTALL_DATA) $(srcdir)/pcap-namedb.h \
|
||||
$(DESTDIR)$(includedir)/pcap-namedb.h
|
||||
+ [ -d $(DESTDIR)$(bindir) ] || \
|
||||
+ (mkdir -p $(DESTDIR)$(bindir); chmod 755 $(DESTDIR)$(bindir))
|
||||
$(INSTALL_PROGRAM) pcap-config $(DESTDIR)$(bindir)/pcap-config
|
||||
for i in $(MAN1); do \
|
||||
$(INSTALL_DATA) $(srcdir)/$$i \
|
||||
@ -1,469 +0,0 @@
|
||||
diff -urN libpcap-0.9.8/gencode.c.rej libpcap-0.9.8.new/gencode.c.rej
|
||||
--- libpcap-0.9.8/gencode.c.rej 2007-07-10 21:38:15.000000000 +0200
|
||||
+++ libpcap-0.9.8.new/gencode.c.rej 1970-01-01 01:00:00.000000000 +0100
|
||||
@@ -1,465 +0,0 @@
|
||||
-***************
|
||||
-*** 24,29 ****
|
||||
- "@(#) $Header: /tcpdump/master/libpcap/gencode.c,v 1.221.2.51 2007/06/14 20:54:12 gianluca Exp $ (LBL)";
|
||||
- #endif
|
||||
-
|
||||
- #ifdef HAVE_CONFIG_H
|
||||
- #include "config.h"
|
||||
- #endif
|
||||
---- 24,31 ----
|
||||
- "@(#) $Header: /tcpdump/master/libpcap/gencode.c,v 1.221.2.51 2007/06/14 20:54:12 gianluca Exp $ (LBL)";
|
||||
- #endif
|
||||
-
|
||||
-+ #define ENABLE_WLAN_FILTERING_PATCH
|
||||
-+
|
||||
- #ifdef HAVE_CONFIG_H
|
||||
- #include "config.h"
|
||||
- #endif
|
||||
-***************
|
||||
-*** 144,150 ****
|
||||
- OR_NET, /* relative to the network-layer header */
|
||||
- OR_NET_NOSNAP, /* relative to the network-layer header, with no SNAP header at the link layer */
|
||||
- OR_TRAN_IPV4, /* relative to the transport-layer header, with IPv4 network layer */
|
||||
-- OR_TRAN_IPV6 /* relative to the transport-layer header, with IPv6 network layer */
|
||||
- };
|
||||
-
|
||||
- /*
|
||||
---- 146,153 ----
|
||||
- OR_NET, /* relative to the network-layer header */
|
||||
- OR_NET_NOSNAP, /* relative to the network-layer header, with no SNAP header at the link layer */
|
||||
- OR_TRAN_IPV4, /* relative to the transport-layer header, with IPv4 network layer */
|
||||
-+ OR_TRAN_IPV6, /* relative to the transport-layer header, with IPv6 network layer */
|
||||
-+ OR_LINK_AFTER_WIRELESS_HDR /* After the 802.11 variable length header */
|
||||
- };
|
||||
-
|
||||
- /*
|
||||
-***************
|
||||
-*** 199,204 ****
|
||||
- static struct block *gen_linktype(int);
|
||||
- static struct block *gen_snap(bpf_u_int32, bpf_u_int32, u_int);
|
||||
- static struct block *gen_llc_linktype(int);
|
||||
- static struct block *gen_hostop(bpf_u_int32, bpf_u_int32, int, int, u_int, u_int);
|
||||
- #ifdef INET6
|
||||
- static struct block *gen_hostop6(struct in6_addr *, struct in6_addr *, int, int, u_int, u_int);
|
||||
---- 202,208 ----
|
||||
- static struct block *gen_linktype(int);
|
||||
- static struct block *gen_snap(bpf_u_int32, bpf_u_int32, u_int);
|
||||
- static struct block *gen_llc_linktype(int);
|
||||
-+ static struct block *gen_802_11_llc_linktype(int);
|
||||
- static struct block *gen_hostop(bpf_u_int32, bpf_u_int32, int, int, u_int, u_int);
|
||||
- #ifdef INET6
|
||||
- static struct block *gen_hostop6(struct in6_addr *, struct in6_addr *, int, int, u_int, u_int);
|
||||
-***************
|
||||
-*** 242,247 ****
|
||||
- static struct slist *xfer_to_a(struct arth *);
|
||||
- static struct block *gen_mac_multicast(int);
|
||||
- static struct block *gen_len(int, int);
|
||||
-
|
||||
- static struct block *gen_ppi_dlt_check();
|
||||
- static struct block *gen_msg_abbrev(int type);
|
||||
---- 246,252 ----
|
||||
- static struct slist *xfer_to_a(struct arth *);
|
||||
- static struct block *gen_mac_multicast(int);
|
||||
- static struct block *gen_len(int, int);
|
||||
-+ static struct block *gen_check_802_11_data_frame();
|
||||
-
|
||||
- static struct block *gen_ppi_dlt_check();
|
||||
- static struct block *gen_msg_abbrev(int type);
|
||||
-***************
|
||||
-*** 1345,1350 ****
|
||||
- return s;
|
||||
- }
|
||||
-
|
||||
-
|
||||
- /*
|
||||
- * Load a value relative to the beginning of the specified header.
|
||||
---- 1350,1487 ----
|
||||
- return s;
|
||||
- }
|
||||
-
|
||||
-+ /*
|
||||
-+ * Load a value relative to the beginning of the link-layer header after the 802.11
|
||||
-+ * header, i.e. LLC_SNAP.
|
||||
-+ * The link-layer header doesn't necessarily begin at the beginning
|
||||
-+ * of the packet data; there might be a variable-length prefix containing
|
||||
-+ * radio information.
|
||||
-+ */
|
||||
-+ static struct slist *
|
||||
-+ gen_load_ll_after_802_11_rel(offset, size)
|
||||
-+ u_int offset, size;
|
||||
-+ {
|
||||
-+ struct slist *s, *s_load_fc;
|
||||
-+ struct slist *sjset_qos;
|
||||
-+ struct slist *s_load;
|
||||
-+ struct slist *s_ld_a_2;
|
||||
-+ struct slist *s_add_a_x;
|
||||
-+ struct slist *s_a_to_x;
|
||||
-+ struct slist *sjset_data_frame_1;
|
||||
-+ struct slist *sjset_data_frame_2;
|
||||
-+ struct slist *s_load_x_0;
|
||||
-+
|
||||
-+ /*
|
||||
-+ * This code is not compatible with the optimizer, as
|
||||
-+ * we are generating jmp instructions within a normal
|
||||
-+ * slist of instructions
|
||||
-+ *
|
||||
-+ */
|
||||
-+ no_optimize = 1;
|
||||
-+
|
||||
-+ s = gen_llprefixlen();
|
||||
-+
|
||||
-+ /*
|
||||
-+ * If "s" is non-null, it has code to arrange that the X register
|
||||
-+ * contains the length of the prefix preceding the link-layer
|
||||
-+ * header.
|
||||
-+ *
|
||||
-+ * Otherwise, the length of the prefix preceding the link-layer
|
||||
-+ * header is "off_ll".
|
||||
-+ */
|
||||
-+ if (s != NULL) {
|
||||
-+ /*
|
||||
-+ * There's a variable-length prefix preceding the
|
||||
-+ * link-layer header. "s" points to a list of statements
|
||||
-+ * that put the length of that prefix into the X register.
|
||||
-+ * do an indirect load, to use the X register as an offset.
|
||||
-+ */
|
||||
-+
|
||||
-+ /*
|
||||
-+ * Load the Frame Control field
|
||||
-+ */
|
||||
-+ s_load_fc = new_stmt(BPF_LD|BPF_IND|BPF_B);
|
||||
-+ s_load_fc->s.k = 0;
|
||||
-+ } else {
|
||||
-+ /*
|
||||
-+ * There is no variable-length header preceding the
|
||||
-+ * link-layer header; add in off_ll, which, if there's
|
||||
-+ * a fixed-length header preceding the link-layer header,
|
||||
-+ * is the length of that header.
|
||||
-+ */
|
||||
-+
|
||||
-+ /*
|
||||
-+ * We need to load the Frame control directly, and
|
||||
-+ * then load X with a fake 0, i.e. the length of the
|
||||
-+ * non-existing prepended header
|
||||
-+ */
|
||||
-+
|
||||
-+ /*
|
||||
-+ * TODO GV: I'm not sure if 0 is the right constant in this
|
||||
-+ * case. If the link layer has a fixed length prepended header,
|
||||
-+ * that should be the value that we put here
|
||||
-+ */
|
||||
-+
|
||||
-+ /* Load 0 into X */
|
||||
-+ s_load_x_0 = new_stmt(BPF_LDX|BPF_IMM);
|
||||
-+ s_load_x_0->s.k = 0;
|
||||
-+
|
||||
-+ /*
|
||||
-+ * TODO GV: I'm not sure if 0 is the right constant in this
|
||||
-+ * case. If the link layer has a fixed length prepended header,
|
||||
-+ * that should be the value that we put here
|
||||
-+ */
|
||||
-+
|
||||
-+ /*
|
||||
-+ * load the Frame Control with absolute access
|
||||
-+ */
|
||||
-+ s_load_fc = new_stmt(BPF_LD|BPF_ABS|BPF_B);
|
||||
-+ s_load_fc->s.k = 0;
|
||||
-+ s = s_load_x_0;
|
||||
-+ }
|
||||
-+
|
||||
-+ /*
|
||||
-+ * Generate the common instructions to check if it's a data frame
|
||||
-+ * and if so compute the 802.11 header length
|
||||
-+ */
|
||||
-+ sjset_data_frame_1 = new_stmt(JMP(BPF_JSET)); // b3 should be 1
|
||||
-+ sjset_data_frame_1->s.k = 0x8;
|
||||
-+
|
||||
-+ sjset_data_frame_2 = new_stmt(JMP(BPF_JSET)); // b2 should be 0
|
||||
-+ sjset_data_frame_2->s.k = 0x04;
|
||||
-+
|
||||
-+ sjset_qos = new_stmt(JMP(BPF_JSET));
|
||||
-+ sjset_qos->s.k = 0x80; //QOS bit
|
||||
-+
|
||||
-+ s_ld_a_2 = new_stmt(BPF_LD|BPF_IMM);
|
||||
-+ s_ld_a_2->s.k = 2;
|
||||
-+
|
||||
-+ s_add_a_x = new_stmt(BPF_ALU|BPF_ADD|BPF_X);
|
||||
-+ s_a_to_x = new_stmt(BPF_MISC|BPF_TAX);
|
||||
-+
|
||||
-+ s_load = new_stmt(BPF_LD|BPF_IND|size);
|
||||
-+ s_load->s.k = offset;
|
||||
-+
|
||||
-+ sjset_data_frame_1->s.jt = sjset_data_frame_2;
|
||||
-+ sjset_data_frame_1->s.jf = s_load;
|
||||
-+
|
||||
-+ sjset_data_frame_2->s.jt = s_load;
|
||||
-+ sjset_data_frame_2->s.jf = sjset_qos;
|
||||
-+
|
||||
-+ sjset_qos->s.jt = s_ld_a_2;
|
||||
-+ sjset_qos->s.jf = s_load;
|
||||
-+
|
||||
-+ sappend(s, s_load_fc);
|
||||
-+ sappend(s_load_fc, sjset_data_frame_1);
|
||||
-+ sappend(sjset_data_frame_1, sjset_data_frame_2);
|
||||
-+ sappend(sjset_data_frame_2, sjset_qos);
|
||||
-+ sappend(sjset_qos, s_ld_a_2);
|
||||
-+ sappend(s_ld_a_2, s_add_a_x);
|
||||
-+ sappend(s_add_a_x,s_a_to_x);
|
||||
-+ sappend(s_a_to_x, s_load);
|
||||
-+
|
||||
-+ return s;
|
||||
-+ }
|
||||
-
|
||||
- /*
|
||||
- * Load a value relative to the beginning of the specified header.
|
||||
-***************
|
||||
-*** 1367,1372 ****
|
||||
- s = gen_load_llrel(offset, size);
|
||||
- break;
|
||||
-
|
||||
- case OR_NET:
|
||||
- s = gen_load_llrel(off_nl + offset, size);
|
||||
- break;
|
||||
---- 1504,1525 ----
|
||||
- s = gen_load_llrel(offset, size);
|
||||
- break;
|
||||
-
|
||||
-+ #ifdef ENABLE_WLAN_FILTERING_PATCH
|
||||
-+
|
||||
-+ case OR_LINK_AFTER_WIRELESS_HDR:
|
||||
-+ if (linktype != DLT_IEEE802_11_RADIO
|
||||
-+ && linktype != DLT_PPI
|
||||
-+ && linktype != DLT_IEEE802_11
|
||||
-+ && linktype != DLT_PRISM_HEADER
|
||||
-+ && linktype != DLT_IEEE802_11_RADIO_AVS)
|
||||
-+ {
|
||||
-+ abort();
|
||||
-+ return NULL;
|
||||
-+ }
|
||||
-+ s = gen_load_ll_after_802_11_rel(offset + 24, size);
|
||||
-+ break;
|
||||
-+ #endif /* ENABLE_WLAN_FILTERING_PATCH */
|
||||
-+
|
||||
- case OR_NET:
|
||||
- s = gen_load_llrel(off_nl + offset, size);
|
||||
- break;
|
||||
-***************
|
||||
-*** 2163,2173 ****
|
||||
- break;
|
||||
-
|
||||
- case DLT_PPI:
|
||||
- case DLT_FDDI:
|
||||
- case DLT_IEEE802:
|
||||
-- case DLT_IEEE802_11:
|
||||
- case DLT_IEEE802_11_RADIO_AVS:
|
||||
-- case DLT_IEEE802_11_RADIO:
|
||||
- case DLT_PRISM_HEADER:
|
||||
- case DLT_ATM_RFC1483:
|
||||
- case DLT_ATM_CLIP:
|
||||
---- 2316,2332 ----
|
||||
- break;
|
||||
-
|
||||
- case DLT_PPI:
|
||||
-+ case DLT_IEEE802_11_RADIO:
|
||||
-+ case DLT_IEEE802_11:
|
||||
-+ #ifdef ENABLE_WLAN_FILTERING_PATCH
|
||||
-+ return gen_802_11_llc_linktype(proto);
|
||||
-+ /*NOTREACHED*/
|
||||
-+ break;
|
||||
-+ #endif /* ENABLE_WLAN_FILTERING_PATCH */
|
||||
-+
|
||||
- case DLT_FDDI:
|
||||
- case DLT_IEEE802:
|
||||
- case DLT_IEEE802_11_RADIO_AVS:
|
||||
- case DLT_PRISM_HEADER:
|
||||
- case DLT_ATM_RFC1483:
|
||||
- case DLT_ATM_CLIP:
|
||||
-***************
|
||||
-*** 2711,2716 ****
|
||||
- }
|
||||
- }
|
||||
-
|
||||
- static struct block *
|
||||
- gen_hostop(addr, mask, dir, proto, src_off, dst_off)
|
||||
- bpf_u_int32 addr;
|
||||
---- 2870,2982 ----
|
||||
- }
|
||||
- }
|
||||
-
|
||||
-+ /*
|
||||
-+ * Generate code to match a particular packet type, for link-layer types
|
||||
-+ * using 802.2 LLC headers.
|
||||
-+ *
|
||||
-+ * This is *NOT* used for Ethernet; "gen_ether_linktype()" is used
|
||||
-+ * for that - it handles the D/I/X Ethernet vs. 802.3+802.2 issues.
|
||||
-+ *
|
||||
-+ * "proto" is an Ethernet type value, if > ETHERMTU, or an LLC SAP
|
||||
-+ * value, if <= ETHERMTU. We use that to determine whether to
|
||||
-+ * match the DSAP or both DSAP and LSAP or to check the OUI and
|
||||
-+ * protocol ID in a SNAP header.
|
||||
-+ */
|
||||
-+ static struct block *
|
||||
-+ gen_802_11_llc_linktype(proto)
|
||||
-+ int proto;
|
||||
-+ {
|
||||
-+ struct block *b_check_data_frame;
|
||||
-+ struct block *b_check_linktype;
|
||||
-+
|
||||
-+ b_check_data_frame = gen_check_802_11_data_frame();
|
||||
-+
|
||||
-+ /*
|
||||
-+ * XXX - generate the code that discards non data frames
|
||||
-+ */
|
||||
-+ switch (proto) {
|
||||
-+
|
||||
-+ case LLCSAP_IP:
|
||||
-+ case LLCSAP_ISONS:
|
||||
-+ case LLCSAP_NETBEUI:
|
||||
-+ /*
|
||||
-+ * XXX - should we check both the DSAP and the
|
||||
-+ * SSAP, like this, or should we check just the
|
||||
-+ * DSAP, as we do for other types <= ETHERMTU
|
||||
-+ * (i.e., other SAP values)?
|
||||
-+ */
|
||||
-+ b_check_linktype = gen_cmp(OR_LINK_AFTER_WIRELESS_HDR, 0, BPF_H, (bpf_u_int32)
|
||||
-+ ((proto << 8) | proto));
|
||||
-+ break;
|
||||
-+
|
||||
-+ case LLCSAP_IPX:
|
||||
-+ /*
|
||||
-+ * XXX - are there ever SNAP frames for IPX on
|
||||
-+ * non-Ethernet 802.x networks?
|
||||
-+ */
|
||||
-+ b_check_linktype = gen_cmp(OR_LINK_AFTER_WIRELESS_HDR, 0, BPF_B,
|
||||
-+ (bpf_int32)LLCSAP_IPX);
|
||||
-+
|
||||
-+ break;
|
||||
-+
|
||||
-+ #if 0
|
||||
-+ case ETHERTYPE_ATALK:
|
||||
-+ /*
|
||||
-+ * 802.2-encapsulated ETHERTYPE_ATALK packets are
|
||||
-+ * SNAP packets with an organization code of
|
||||
-+ * 0x080007 (Apple, for Appletalk) and a protocol
|
||||
-+ * type of ETHERTYPE_ATALK (Appletalk).
|
||||
-+ *
|
||||
-+ * XXX - check for an organization code of
|
||||
-+ * encapsulated Ethernet as well?
|
||||
-+ */
|
||||
-+ return gen_snap(0x080007, ETHERTYPE_ATALK, off_linktype);
|
||||
-+ #endif
|
||||
-+ default:
|
||||
-+ /*
|
||||
-+ * XXX - we don't have to check for IPX 802.3
|
||||
-+ * here, but should we check for the IPX Ethertype?
|
||||
-+ */
|
||||
-+ if (proto <= ETHERMTU) {
|
||||
-+ /*
|
||||
-+ * This is an LLC SAP value, so check
|
||||
-+ * the DSAP.
|
||||
-+ */
|
||||
-+ b_check_linktype = gen_cmp(OR_LINK_AFTER_WIRELESS_HDR, 0, BPF_B,
|
||||
-+ (bpf_int32)proto);
|
||||
-+ } else {
|
||||
-+ /*
|
||||
-+ * This is an Ethernet type; we assume that it's
|
||||
-+ * unlikely that it'll appear in the right place
|
||||
-+ * at random, and therefore check only the
|
||||
-+ * location that would hold the Ethernet type
|
||||
-+ * in a SNAP frame with an organization code of
|
||||
-+ * 0x000000 (encapsulated Ethernet).
|
||||
-+ *
|
||||
-+ * XXX - if we were to check for the SNAP DSAP and
|
||||
-+ * LSAP, as per XXX, and were also to check for an
|
||||
-+ * organization code of 0x000000 (encapsulated
|
||||
-+ * Ethernet), we'd do
|
||||
-+ *
|
||||
-+ * return gen_snap(0x000000, proto,
|
||||
-+ * off_linktype);
|
||||
-+ *
|
||||
-+ * here; for now, we don't, as per the above.
|
||||
-+ * I don't know whether it's worth the extra CPU
|
||||
-+ * time to do the right check or not.
|
||||
-+ */
|
||||
-+ b_check_linktype = gen_cmp(OR_LINK_AFTER_WIRELESS_HDR, 0+6, BPF_H,
|
||||
-+ (bpf_int32)proto);
|
||||
-+ }
|
||||
-+ }
|
||||
-+
|
||||
-+ gen_and(b_check_data_frame, b_check_linktype);
|
||||
-+ return b_check_linktype;
|
||||
-+
|
||||
-+ }
|
||||
-+
|
||||
-+
|
||||
-+
|
||||
- static struct block *
|
||||
- gen_hostop(addr, mask, dir, proto, src_off, dst_off)
|
||||
- bpf_u_int32 addr;
|
||||
-***************
|
||||
-*** 2925,2930 ****
|
||||
- register struct block *b0, *b1, *b2;
|
||||
- register struct slist *s;
|
||||
-
|
||||
- switch (dir) {
|
||||
- case Q_SRC:
|
||||
- /*
|
||||
---- 3191,3207 ----
|
||||
- register struct block *b0, *b1, *b2;
|
||||
- register struct slist *s;
|
||||
-
|
||||
-+ #ifdef ENABLE_WLAN_FILTERING_PATCH
|
||||
-+ /*
|
||||
-+ * TODO GV 20070613
|
||||
-+ * We need to disable the optimizer because the optimizer is buggy
|
||||
-+ * and wipes out some LD instructions generated by the below
|
||||
-+ * code to validate the Frame Control bits
|
||||
-+ *
|
||||
-+ */
|
||||
-+ no_optimize = 1;
|
||||
-+ #endif /* ENABLE_WLAN_FILTERING_PATCH */
|
||||
-+
|
||||
- switch (dir) {
|
||||
- case Q_SRC:
|
||||
- /*
|
||||
-***************
|
||||
-*** 4713,4718 ****
|
||||
- #endif
|
||||
- }
|
||||
-
|
||||
-
|
||||
- /*
|
||||
- * Generate code that checks whether the packet is a packet for protocol
|
||||
---- 4990,5021 ----
|
||||
- #endif
|
||||
- }
|
||||
-
|
||||
-+ static struct block *
|
||||
-+ gen_check_802_11_data_frame()
|
||||
-+ {
|
||||
-+ struct slist *s;
|
||||
-+ struct block *b0, *b1;
|
||||
-+ /*
|
||||
-+ * Now check for a data frame.
|
||||
-+ * I.e, check "link[0] & 0x08".
|
||||
-+ */
|
||||
-+ s = gen_load_a(OR_LINK, 0, BPF_B);
|
||||
-+ b0 = new_block(JMP(BPF_JSET));
|
||||
-+ b0->s.k = 0x08;
|
||||
-+ b0->stmts = s;
|
||||
-+
|
||||
-+ s = gen_load_a(OR_LINK, 0, BPF_B);
|
||||
-+ b1 = new_block(JMP(BPF_JSET));
|
||||
-+ b1->s.k = 0x04;
|
||||
-+ b1->stmts = s;
|
||||
-+ gen_not(b1);
|
||||
-+
|
||||
-+
|
||||
-+ gen_and(b1, b0);
|
||||
-+
|
||||
-+ return b0;
|
||||
-+ }
|
||||
-+
|
||||
-
|
||||
- /*
|
||||
- * Generate code that checks whether the packet is a packet for protocol
|
||||
@ -0,0 +1,141 @@
|
||||
--- a/pcap-int.h
|
||||
+++ b/pcap-int.h
|
||||
@@ -187,6 +187,7 @@ struct pcap_opt {
|
||||
char *source;
|
||||
int promisc;
|
||||
int rfmon;
|
||||
+ int proto; /* protocol for packet socket (linux) */
|
||||
};
|
||||
|
||||
/*
|
||||
--- a/pcap-linux.c
|
||||
+++ b/pcap-linux.c
|
||||
@@ -273,7 +273,7 @@ static int iface_get_id(int fd, const ch
|
||||
static int iface_get_mtu(int fd, const char *device, char *ebuf);
|
||||
static int iface_get_arptype(int fd, const char *device, char *ebuf);
|
||||
#ifdef HAVE_PF_PACKET_SOCKETS
|
||||
-static int iface_bind(int fd, int ifindex, char *ebuf);
|
||||
+static int iface_bind(int fd, int ifindex, char *ebuf, unsigned short proto);
|
||||
static int has_wext(int sock_fd, const char *device, char *ebuf);
|
||||
static int enter_rfmon_mode_wext(pcap_t *handle, int sock_fd,
|
||||
const char *device);
|
||||
@@ -362,7 +362,7 @@ pcap_can_set_rfmon_linux(pcap_t *p)
|
||||
* (We assume that if we have Wireless Extensions support
|
||||
* we also have PF_PACKET support.)
|
||||
*/
|
||||
- sock_fd = socket(PF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
|
||||
+ sock_fd = socket(PF_PACKET, SOCK_RAW, handle->opt.proto);
|
||||
if (sock_fd == -1) {
|
||||
(void)snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
|
||||
"socket: %s", pcap_strerror(errno));
|
||||
@@ -522,6 +522,9 @@ pcap_activate_linux(pcap_t *handle)
|
||||
handle->read_op = pcap_read_linux;
|
||||
handle->stats_op = pcap_stats_linux;
|
||||
|
||||
+ if (handle->opt.proto < 0)
|
||||
+ handle->opt.proto = (int) htons(ETH_P_ALL);
|
||||
+
|
||||
/*
|
||||
* The "any" device is a special device which causes us not
|
||||
* to bind to a particular device and thus to look at all
|
||||
@@ -1673,8 +1676,8 @@ activate_new(pcap_t *handle)
|
||||
* try a SOCK_RAW socket for the raw interface.
|
||||
*/
|
||||
sock_fd = is_any_device ?
|
||||
- socket(PF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) :
|
||||
- socket(PF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
|
||||
+ socket(PF_PACKET, SOCK_DGRAM, handle->opt.proto) :
|
||||
+ socket(PF_PACKET, SOCK_RAW, handle->opt.proto);
|
||||
|
||||
if (sock_fd == -1) {
|
||||
snprintf(handle->errbuf, PCAP_ERRBUF_SIZE, "socket: %s",
|
||||
@@ -1763,7 +1766,7 @@ activate_new(pcap_t *handle)
|
||||
return PCAP_ERROR;
|
||||
}
|
||||
sock_fd = socket(PF_PACKET, SOCK_DGRAM,
|
||||
- htons(ETH_P_ALL));
|
||||
+ handle->opt.proto);
|
||||
if (sock_fd == -1) {
|
||||
snprintf(handle->errbuf, PCAP_ERRBUF_SIZE,
|
||||
"socket: %s", pcap_strerror(errno));
|
||||
@@ -1815,7 +1818,7 @@ activate_new(pcap_t *handle)
|
||||
}
|
||||
|
||||
if ((err = iface_bind(sock_fd, handle->md.ifindex,
|
||||
- handle->errbuf)) != 1) {
|
||||
+ handle->errbuf, handle->opt.proto)) != 1) {
|
||||
close(sock_fd);
|
||||
if (err < 0)
|
||||
return err;
|
||||
@@ -2440,7 +2443,7 @@ iface_get_id(int fd, const char *device,
|
||||
* or a PCAP_ERROR_ value on a hard error.
|
||||
*/
|
||||
static int
|
||||
-iface_bind(int fd, int ifindex, char *ebuf)
|
||||
+iface_bind(int fd, int ifindex, char *ebuf, unsigned short proto)
|
||||
{
|
||||
struct sockaddr_ll sll;
|
||||
int err;
|
||||
@@ -2449,7 +2452,7 @@ iface_bind(int fd, int ifindex, char *eb
|
||||
memset(&sll, 0, sizeof(sll));
|
||||
sll.sll_family = AF_PACKET;
|
||||
sll.sll_ifindex = ifindex;
|
||||
- sll.sll_protocol = htons(ETH_P_ALL);
|
||||
+ sll.sll_protocol = proto;
|
||||
|
||||
if (bind(fd, (struct sockaddr *) &sll, sizeof(sll)) == -1) {
|
||||
if (errno == ENETDOWN) {
|
||||
@@ -3119,7 +3122,7 @@ activate_old(pcap_t *handle)
|
||||
|
||||
/* Open the socket */
|
||||
|
||||
- handle->fd = socket(PF_INET, SOCK_PACKET, htons(ETH_P_ALL));
|
||||
+ handle->fd = socket(PF_INET, SOCK_PACKET, handle->opt.proto);
|
||||
if (handle->fd == -1) {
|
||||
snprintf(handle->errbuf, PCAP_ERRBUF_SIZE,
|
||||
"socket: %s", pcap_strerror(errno));
|
||||
--- a/pcap.c
|
||||
+++ b/pcap.c
|
||||
@@ -152,6 +152,8 @@ pcap_create_common(const char *source, c
|
||||
pcap_set_snaplen(p, 65535); /* max packet size */
|
||||
p->opt.promisc = 0;
|
||||
p->opt.buffer_size = 0;
|
||||
+ p->opt.proto = -1;
|
||||
+
|
||||
return (p);
|
||||
}
|
||||
|
||||
@@ -212,6 +214,15 @@ pcap_set_buffer_size(pcap_t *p, int buff
|
||||
}
|
||||
|
||||
int
|
||||
+pcap_set_protocol(pcap_t *p, unsigned short proto)
|
||||
+{
|
||||
+ if (pcap_check_activated(p))
|
||||
+ return PCAP_ERROR_ACTIVATED;
|
||||
+ p->opt.proto = proto;
|
||||
+ return 0;
|
||||
+}
|
||||
+
|
||||
+int
|
||||
pcap_activate(pcap_t *p)
|
||||
{
|
||||
int status;
|
||||
--- a/pcap/pcap.h
|
||||
+++ b/pcap/pcap.h
|
||||
@@ -61,6 +61,7 @@ extern "C" {
|
||||
#define PCAP_VERSION_MINOR 4
|
||||
|
||||
#define PCAP_ERRBUF_SIZE 256
|
||||
+#define HAS_PROTO_EXTENSION
|
||||
|
||||
/*
|
||||
* Compatibility for systems that have a bpf.h that
|
||||
@@ -263,6 +264,7 @@ int pcap_can_set_rfmon(pcap_t *);
|
||||
int pcap_set_rfmon(pcap_t *, int);
|
||||
int pcap_set_timeout(pcap_t *, int);
|
||||
int pcap_set_buffer_size(pcap_t *, int);
|
||||
+int pcap_set_protocol(pcap_t *, unsigned short);
|
||||
int pcap_activate(pcap_t *);
|
||||
|
||||
pcap_t *pcap_open_live(const char *, int, int, int, char *);
|
||||
Loading…
Reference in New Issue