tcp_ping.cc

xprobe package sources code

/* $Id: tcp_ping.cc,v 1.3 2003/08/05 03:35:11 mederchik Exp $ */
/*
** Copyright (C) 2001 Fyodor Yarochkin <[e-mail]>,
**                    Ofir Arkin       <[e-mail]>
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*/



#include "xprobe.h"
#include "usi++/usi++.h"
#define _XPROBE_MODULE
#include "xplib.h"
#include "xprobe_module.h"
#include "xprobe_module_hdlr.h"
#include "interface.h"
#include "cmd_opts.h"
#include "target.h"
#include "tcp_ping.h"

extern Interface *ui;
extern Cmd_Opts *copts;



int TCP_Ping_Mod::init(void) {

    xprobe_debug(XPROBE_DEBUG_MODULES, "%s module initialized\n", get_name());
    return OK;
}


int TCP_Ping_Mod::exec(Target *tg, OS_Matrix *os) {

    char buf[1024];
    Xprobe::Timeval tv, t1, t2, tt;
	struct in_addr local=tg->get_interface_addr(), remote=tg->get_addr();
	TCP *tcpp = new TCP(inet_ntoa(remote));
	TCP sn(inet_ntoa(local));
    int port, ret, done;



    xprobe_debug(XPROBE_DEBUG_MODULES, "--%s module has been executed against: %s\n", get_name(),
            inet_ntoa(remote));
    
    tv = copts->get_timeout();

    if (tg->get_port(IPPROTO_TCP, XPROBE_TARGETP_OPEN) == -1 &&
        tg->get_port(IPPROTO_TCP, XPROBE_TARGETP_CLOSED) == -1) {
        ui->msg("[-] %s module: no closed/open TCP ports known on %s. Module test failed\n", get_name(),
                inet_ntoa(remote));
        return FAIL;
    }
    if ((port = tg->get_port(IPPROTO_TCP, XPROBE_TARGETP_OPEN)) == -1 ) 
        port = tg->get_port(IPPROTO_TCP, XPROBE_TARGETP_CLOSED);

	sn.init_device(tg->get_interface(), 0, 1500);
	sn.timeout(tv);

	srand(time(NULL));
	tcpp->set_src(inet_ntoa(local));
	tcpp->set_srcport(rand() + 1024);
	tcpp->set_dstport(port);
	tcpp->set_ttl(64);
	tcpp->set_win(5840);
	tcpp->set_flags(TH_SYN); //|TH_ACK|TH_PUSH);
	tcpp->set_tos(0x10);
	tcpp->set_fragoff(IP_DF);
	tcpp->set_seq(rand());


    t1 = Xprobe::Timeval::gettimeofday();

   	tcpp->sendpack("");

    done = 0;
	while(!done) {
		ret = sn.sniffpack(buf, sizeof(buf));
		if (!sn.timeout()) {
			if (sn.get_src() == remote.s_addr &&
				tcpp->get_dstport() == sn.get_srcport() ) {
				done = 1;
				xprobe_debug(XPROBE_DEBUG_MODULES, "[%s] Got reply.\n", get_name());
			}
		} else {
			ret = -1;
			done = 1; // timeout
		}
	}

    t2 = Xprobe::Timeval::gettimeofday();

    if (ret > -1) {
        tt = t2 - t1;
        xprobe_debug(XPROBE_DEBUG_MODULES, "TCP PING response: %.7f\n", (double)tt);
        if (tg->get_rtt() < tt) 
            tg->set_rtt(tt);
        os->add_result(get_id(), 1, XPROBE_MATCH_YES);
    } else {
        os->add_result(get_id(), 1, XPROBE_MATCH_NO);
    }

    return OK;
}

int TCP_Ping_Mod::fini(void) {
    xprobe_debug(XPROBE_DEBUG_MODULES, "%s module has been deinitilized\n", get_name());
    return OK;
}

int TCP_Ping_Mod::parse_keyword(int os_id, const char *kwd, const char *val)  {
    
    xprobe_debug(XPROBE_DEBUG_MODULES, "Parsing for %i : %s  = %s\n",
                                                        os_id,  kwd, val);
    return OK;
};

/* initialization function */

int tcp_ping_mod_init(Xprobe_Module_Hdlr *pt, char *nm) {

    TCP_Ping_Mod *module = new TCP_Ping_Mod;

    module->set_name(nm);
    xprobe_mdebug(XPROBE_DEBUG_MODULES, "Initializing the TCP PING module\n");
    pt->register_module(module);

return OK;
}