release/src/router/cyassl/sslSniffer/sslSnifferTest/snifftest.c

   1 /* snifftest.c */
   2
   3 #ifdef _WIN32
   4     #define CYASSL_SNIFFER
   5 #endif
   6
   7 #ifndef CYASSL_SNIFFER
   8
   9 /* blank build */
  10 #include <stdio.h>
  11 int main()
  12 {
  13     printf("do ./configure --enable-sniffer to enable build support\n");
  14     return 0;
  15 }
  16
  17 #else
  18 /* do a full build */
  19
  20 #ifdef _MSC_VER
  21         /* builds on *nix too, for scanf device and port */
  22         #define _CRT_SECURE_NO_WARNINGS
  23 #endif
  24
  25 #include <pcap/pcap.h>     /* pcap stuff */
  26 #include <stdio.h>         /* printf */
  27 #include <stdlib.h>        /* EXIT_SUCCESS */
  28 #include <signal.h>        /* signal */
  29
  30 #include "sniffer.h"
  31
  32
  33 #ifndef _WIN32
  34     #include <arpa/inet.h>
  35 #endif
  36
  37 typedef unsigned char byte;
  38
  39 enum {
  40     ETHER_IF_FRAME_LEN = 14,   /* ethernet interface frame length */
  41     LOCAL_IF_FRAME_LEN =  4,   /* localhost interface frame length  */
  42 };
  43
  44
  45 pcap_t* pcap = 0;
  46 pcap_if_t *alldevs;
  47
  48 static void sig_handler(const int sig)
  49 {
  50     printf("SIGINT handled.\n");
  51     if (pcap)
  52         pcap_close(pcap);
  53         pcap_freealldevs(alldevs);
  54 #ifndef _WIN32
  55     ssl_FreeSniffer();
  56 #endif
  57     exit(EXIT_SUCCESS);
  58 }
  59
  60
  61 void err_sys(const char* msg)
  62 {
  63         fprintf(stderr, "%s\n", msg);
  64         exit(EXIT_FAILURE);
  65 }
  66
  67
  68 #ifdef _WIN32
  69         #define SNPRINTF _snprintf
  70 #else
  71         #define SNPRINTF snprintf
  72 #endif
  73
  74
  75 char* iptos(unsigned int addr)
  76 {
  77         static char    output[32];
  78         byte *p = (byte*)&addr;
  79
  80         SNPRINTF(output, sizeof(output), "%d.%d.%d.%d", p[0], p[1], p[2], p[3]);
  81
  82         return output;
  83 }
  84
  85
  86 int main(int argc, char** argv)
  87 {
  88     int          ret;
  89         int                  inum;
  90         int                  port;
  91         int                  i = 0;
  92     char         err[PCAP_ERRBUF_SIZE];
  93         char         filter[32];
  94         char         loopback = 0;
  95         char        *server = NULL;
  96         struct       bpf_program fp;
  97         pcap_if_t   *d;
  98         pcap_addr_t *a;
  99
 100     signal(SIGINT, sig_handler);
 101
 102 #ifndef _WIN32
 103     ssl_InitSniffer();
 104 #endif
 105     ssl_Trace("./tracefile.txt", err);
 106
 107         if (pcap_findalldevs(&alldevs, err) == -1)
 108                 err_sys("Error in pcap_findalldevs");
 109
 110         for (d = alldevs; d; d=d->next) {
 111                 printf("%d. %s", ++i, d->name);
 112                 if (d->description)
 113                         printf(" (%s)\n", d->description);
 114                 else
 115                         printf(" (No description available)\n");
 116         }
 117
 118         if (i == 0)
 119                 err_sys("No interfaces found! Make sure pcap or WinPcap is installed "
 120                 "correctly and you have sufficient permissions");
 121
 122         printf("Enter the interface number (1-%d): ", i);
 123         scanf("%d", &inum);
 124
 125         if (inum < 1 || inum > i)
 126                 err_sys("Interface number out of range");
 127
 128         /* Jump to the selected adapter */
 129         for (d = alldevs, i = 0; i < inum - 1; d = d->next, i++);
 130
 131         pcap = pcap_create(d->name, err);
 132
 133     if (pcap == NULL) printf("pcap_create failed %s\n", err);
 134
 135         if (d->flags & PCAP_IF_LOOPBACK)
 136                 loopback = 1;
 137
 138         /* get an IPv4 address */
 139         for (a = d->addresses; a; a = a->next) {
 140                 switch(a->addr->sa_family)
 141                 {
 142                         case AF_INET:
 143                                 server =iptos(((struct sockaddr_in *)a->addr)->sin_addr.s_addr);
 144                                 printf("server = %s\n", server);
 145                                 break;
 146                 }
 147         }
 148         if (server == NULL)
 149                 err_sys("Unable to get device IPv4 address");
 150
 151     ret = pcap_set_snaplen(pcap, 65536);
 152     if (ret != 0) printf("pcap_set_snaplen failed %s\n", pcap_geterr(pcap));
 153
 154     ret = pcap_set_timeout(pcap, 1000);
 155     if (ret != 0) printf("pcap_set_timeout failed %s\n", pcap_geterr(pcap));
 156
 157     ret = pcap_set_buffer_size(pcap, 1000000);
 158     if (ret != 0)
 159                 printf("pcap_set_buffer_size failed %s\n", pcap_geterr(pcap));
 160
 161     ret = pcap_set_promisc(pcap, 1);
 162     if (ret != 0) printf("pcap_set_promisc failed %s\n", pcap_geterr(pcap));
 163
 164
 165     ret = pcap_activate(pcap);
 166     if (ret != 0) printf("pcap_activate failed %s\n", pcap_geterr(pcap));
 167
 168         printf("Enter the port to scan: ");
 169         scanf("%d", &port);
 170
 171         SNPRINTF(filter, sizeof(filter), "tcp and port %d", port);
 172
 173         ret = pcap_compile(pcap, &fp, filter, 0, 0);
 174     if (ret != 0) printf("pcap_compile failed %s\n", pcap_geterr(pcap));
 175
 176     ret = pcap_setfilter(pcap, &fp);
 177     if (ret != 0) printf("pcap_setfilter failed %s\n", pcap_geterr(pcap));
 178
 179     ret = ssl_SetPrivateKey(server, port, "../../certs/server-key.pem",
 180                             FILETYPE_PEM, NULL, err);
 181     if (ret != 0)
 182         err_sys(err);
 183
 184     while (1) {
 185         struct pcap_pkthdr header;
 186         const unsigned char* packet = pcap_next(pcap, &header);
 187         if (packet) {
 188
 189             byte data[65535];
 190
 191             if (header.caplen > 40)  { /* min ip(20) + min tcp(20) */
 192                                 int frame = ETHER_IF_FRAME_LEN;
 193                                 if (loopback)
 194                                         frame = LOCAL_IF_FRAME_LEN;
 195                                 packet        += frame;
 196                                 header.caplen -= frame;
 197             }
 198             else
 199                 continue;
 200
 201             ret = ssl_DecodePacket(packet, header.caplen, data, err);
 202             if (ret < 0)
 203                 printf("ssl_Decode ret = %d, %s\n", ret, err);
 204             if (ret > 0) {
 205                 data[ret] = 0;
 206                                 printf("SSL App Data:%s\n", data);
 207             }
 208         }
 209     }
 210
 211     return 0;
 212 }
 213
 214 #endif /* full build */