start parsing 802.11 control frames

3 files changed, 30 insertions, 14 deletions

diff --git a/libopie2/opienet/802_11_user.h b/libopie2/opienet/802_11_user.h
index ad84514..7ae27c5 100644
--- a/libopie2/opienet/802_11_user.h
+++ b/libopie2/opienet/802_11_user.h
@@ -232,45 +232,45 @@ struct ieee_802_11_frame_subtype_class {
 #define FC_MORE_DATA(fc)	((fc) & 0x2000)
 #define FC_WEP(fc)		((fc) & 0x4000)
 #define FC_ORDER(fc)		((fc) & 0x8000)
 
 
 struct ieee_802_11_mgmt_header {
   u_int16_t fc;
   u_int16_t duration;
   u_int8_t  da[6];
   u_int8_t  sa[6];
   u_int8_t  bssid[6];
   u_int16_t seq_ctrl;
 };
 
 
 struct ieee_802_11_data_header {
-	u_int16_t	frame_control;
+	u_int16_t	fc;
 	u_int16_t	duration;
 	u_int8_t	mac1[6];
 	u_int8_t	mac2[6];
 	u_int8_t	mac3[6];
 	u_int16_t	SeqCtl;
 	u_int8_t	mac4[6];
 //	u_int16_t	gapLen;
 //	u_int8_t	gap[8];
 };
 
 struct ieee_802_11_control_header {
-	u_int16_t	frame_control;
+	u_int16_t	fc;
 	u_int16_t	duration;
 	u_int8_t	mac1[6];
 	u_int8_t	mac2[6];
 	u_int8_t	mac3[6];
 	u_int16_t	SeqCtl;
 	u_int8_t	mac4[6];
 //	u_int16_t	gapLen;
 //	u_int8_t	gap[8];
 };
 
 #define CAPABILITY_ESS(cap)     ((cap) & 0x0001)
 #define CAPABILITY_IBSS(cap)    ((cap) & 0x0002)
 #define CAPABILITY_CFP(cap)     ((cap) & 0x0004)
 #define CAPABILITY_CFP_REQ(cap) ((cap) & 0x0008)
 #define CAPABILITY_PRIVACY(cap) ((cap) & 0x0010)
 
diff --git a/libopie2/opienet/opcap.cpp b/libopie2/opienet/opcap.cpp
index e9b3b2c..012c0a3 100644
--- a/libopie2/opienet/opcap.cpp
+++ b/libopie2/opienet/opcap.cpp
@@ -225,34 +225,34 @@ OMacAddress OEthernetPacket::destinationAddress() const
 int OEthernetPacket::type() const

 {

     return ntohs( _ether->ether_type );

 }

 

 

 /*======================================================================================

  * OIPPacket

  *======================================================================================*/

 

 

 OIPPacket::OIPPacket( const unsigned char* end, const struct iphdr* data, QObject* parent )

           :QObject( parent, "IP" ), _iphdr( data )

 {

     odebug << "OIPPacket::OIPPacket(): decoding IP header..." << oendl;

 

-    odebug << "FromAddress = " << fromIPAddress().toString();

-    odebug << "  toAddress = " << toIPAddress().toString();

+    odebug << "FromAddress = " << fromIPAddress().toString() << oendl;
+    odebug << "  toAddress = " << toIPAddress().toString() << oendl;
 

     switch ( protocol() )

     {

         case IPPROTO_UDP: new OUDPPacket( end, (const struct udphdr*) (data+1), this ); break;

         case IPPROTO_TCP: new OTCPPacket( end, (const struct tcphdr*) (data+1), this ); break;

         default: odebug << "OIPPacket::OIPPacket(): unknown IP protocol, type = " << protocol() << oendl;

     }

 

 }

 

 OIPPacket::~OIPPacket()

 {

 }

 

 

 QHostAddress OIPPacket::fromIPAddress() const

@@ -326,33 +326,33 @@ OARPPacket::OARPPacket( const unsigned char* end, const struct myarphdr* data, Q
 OARPPacket::~OARPPacket()

 {

 }

 

 

 QString OARPPacket::type() const

 {

     switch ( EXTRACT_16BITS( &_arphdr->ar_op ) )

     {

         case 1: return "REQUEST";

         case 2: return "REPLY";

         case 3: return "RREQUEST";

         case 4: return "RREPLY";

         case 8: return "InREQUEST";

         case 9: return "InREPLY";

         case 10: return "NAK";

-        default: qWarning( "OARPPacket::type(): invalid ARP type!" ); return "<unknown>";

+        default: owarn << "OARPPacket::type(): invalid ARP type!" << oendl; return "<unknown>";
     }

 }

 

 

 QHostAddress OARPPacket::senderIPV4Address() const

 {

     return EXTRACT_32BITS( &_arphdr->ar_sip );

 }

 

 

 QHostAddress OARPPacket::targetIPV4Address() const

 {

     return EXTRACT_32BITS( &_arphdr->ar_tip );

 }

 

 

@@ -480,33 +480,33 @@ bool ODHCPPacket::isReply() const
     return ( _dhcphdr->op == 02 );

 }

 

 

 QString ODHCPPacket::type() const

 {

     switch ( _type )

     {

         case 1: return "DISCOVER";

         case 2: return "OFFER";

         case 3: return "REQUEST";

         case 4: return "DECLINE";

         case 5: return "ACK";

         case 6: return "NAK";

         case 7: return "RELEASE";

         case 8: return "INFORM";

-        default: qWarning( "ODHCPPacket::type(): invalid DHCP type (%d) !", _dhcphdr->op ); return "<unknown>";

+        default: owarn << "ODHCPPacket::type(): invalid DHCP type " << _dhcphdr->op << oendl; return "<unknown>";
     }

 }

 

 

 QHostAddress ODHCPPacket::clientAddress() const

 {

     return EXTRACT_32BITS( &_dhcphdr->ciaddr );

 }

 

 

 QHostAddress ODHCPPacket::yourAddress() const

 {

     return EXTRACT_32BITS( &_dhcphdr->yiaddr );

 }

 

 

@@ -752,35 +752,33 @@ OWaveLanManagementPacket::~OWaveLanManagementPacket()
 

 QString OWaveLanManagementPacket::managementType() const

 {

     switch ( FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) )

     {

         case ST_ASSOC_REQUEST: return "AssociationRequest"; break;

         case ST_ASSOC_RESPONSE: return "AssociationResponse"; break;

         case ST_REASSOC_REQUEST: return "ReassociationRequest"; break;

         case ST_REASSOC_RESPONSE: return "ReassociationResponse"; break;

         case ST_PROBE_REQUEST: return "ProbeRequest"; break;

         case ST_PROBE_RESPONSE: return "ProbeResponse"; break;

         case ST_BEACON: return "Beacon"; break;

         case ST_ATIM: return "Atim"; break;

         case ST_DISASSOC: return "Disassociation"; break;

         case ST_AUTH: return "Authentication"; break;

         case ST_DEAUTH: return "Deathentication"; break;

-        default:

-            qWarning( "OWaveLanManagementPacket::managementType(): unhandled subtype %d", FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) );

-            return "Unknown";

+        default: owarn << "OWaveLanManagementPacket::managementType(): unhandled subtype " << FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) << oendl; return "Unknown";
     }

 }

 

 

 int OWaveLanManagementPacket::beaconInterval() const

 {

     return EXTRACT_LE_16BITS( &_body->beacon_interval );

 }

 

 

 int OWaveLanManagementPacket::capabilities() const

 {

     return EXTRACT_LE_16BITS( &_body->capability_info );

 }

 

 

@@ -998,48 +996,64 @@ OLLCPacket::OLLCPacket( const unsigned char* end, const struct ieee_802_11_802_2
 }

 

 

 OLLCPacket::~OLLCPacket()

 {

 }

 

 

 /*======================================================================================

  * OWaveLanControlPacket

  *======================================================================================*/

 

 OWaveLanControlPacket::OWaveLanControlPacket( const unsigned char* end, const struct ieee_802_11_control_header* data, OWaveLanPacket* parent )

                 :QObject( parent, "802.11 Control" ), _header( data )

 {

     odebug << "OWaveLanControlPacket::OWaveLanDataControl(): decoding frame..." << oendl;

-    //TODO: Implement this

+    odebug << "Detected subtype is " << controlType() << oendl;
 }

 

 

 OWaveLanControlPacket::~OWaveLanControlPacket()

 {

 }

 

 

+QString OWaveLanControlPacket::controlType() const
+{
+    switch ( FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) )
+    {
+        case CTRL_PS_POLL: return "PowerSavePoll"; break;
+        case CTRL_RTS: return "RequestToSend"; break;
+        case CTRL_CTS: return "ClearToSend"; break;
+        case CTRL_ACK: return "Acknowledge"; break;
+        case CTRL_CF_END: return "ContentionFreeEnd"; break;
+        case CTRL_END_ACK: return "AcknowledgeEnd"; break;
+        default:
+            owarn << "OWaveLanControlPacket::managementType(): unhandled subtype " << FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) << oendl;
+            return "Unknown";
+    }
+}
+
+
 /*======================================================================================

  * OPacketCapturer

  *======================================================================================*/

 

 OPacketCapturer::OPacketCapturer( QObject* parent, const char* name )

-                 :QObject( parent, name ), _name( QString::null ), _open( false ),

-                 _pch( 0 ), _pcd( 0 ), _sn( 0 )

+                :QObject( parent, name ), _name( QString::null ), _open( false ), _pch( 0 ), _pcd( 0 ), _sn( 0 )
 {

 }

 

 

 OPacketCapturer::~OPacketCapturer()

 {

     if ( _open )

     {

         odebug << "OPacketCapturer::~OPacketCapturer(): pcap still open, autoclosing." << oendl;

         close();

     }

 }

 

 

 void OPacketCapturer::setBlocking( bool b )

 {

@@ -1096,33 +1110,33 @@ void OPacketCapturer::close()
         odebug << it.key() << " = " << it.data() << oendl;

     odebug << "--------------------------------------------------" << oendl;

 

 }

 

 

 int OPacketCapturer::dataLink() const

 {

     return pcap_datalink( _pch );

 }

 

 

 void OPacketCapturer::dump( OPacket* p )

 {

     if ( !_pcd )

     {

-        qWarning( "OPacketCapturer::dump() - cannot dump without open capture file!" );

+        owarn << "OPacketCapturer::dump() - cannot dump without open capture file!" << oendl;
         return;

     }

     pcap_dump( (u_char*) _pcd, &p->_hdr, p->_data );

 }

 

 

 int OPacketCapturer::fileno() const

 {

     if ( _open )

     {

         return pcap_fileno( _pch );

     }

     else

     {

         return -1;

     }

@@ -1155,33 +1169,33 @@ OPacket* OPacketCapturer::next()
     if ( pdata && header.len )

     {

         OPacket* p = new OPacket( dataLink(), header, pdata, 0 );

         // packets shouldn't be inserted in the QObject child-parent hierarchy,

         // because due to memory constraints they will be deleted as soon

         // as possible - that is right after they have been processed

         // by emit() [ see below ]

         //TODO: make gathering statistics optional, because it takes time

         p->updateStats( _stats, const_cast<QObjectList*>( p->children() ) );

         #ifndef NODEBUG

         p->dumpStructure( const_cast<QObjectList*>( p->children() ) );

         #endif

         return p;

     }

     else

     {

-        qWarning( "OPacketCapturer::next() - no packet received!" );

+        owarn << "OPacketCapturer::next() - no packet received!" << oendl;
         return 0;

     }

 }

 

 

 bool OPacketCapturer::open( const QString& name )

 {

     if ( _open )

     {

         if ( name == _name )    // ignore opening an already openend device

         {

             return true;

         }

         else                    // close the last opened device

         {

             close();

diff --git a/libopie2/opienet/opcap.h b/libopie2/opienet/opcap.h
index 497fd6b..b373c56 100644
--- a/libopie2/opienet/opcap.h
+++ b/libopie2/opienet/opcap.h
@@ -384,32 +384,34 @@ class OWaveLanDataPacket : public QObject
   private:
     const struct ieee_802_11_data_header* _header;
 };
 
 /*======================================================================================
  * OWaveLanControlPacket - type: control (T_CTRL)
  *======================================================================================*/
 
 class OWaveLanControlPacket : public QObject
 {
   Q_OBJECT
 
   public:
     OWaveLanControlPacket( const unsigned char*, const struct ieee_802_11_control_header*, OWaveLanPacket* parent = 0 );
     virtual ~OWaveLanControlPacket();
 
+    QString controlType() const;
+
   private:
     const struct ieee_802_11_control_header* _header;
 };
 
 /*======================================================================================
  * OLLCPacket - IEEE 802.2 Link Level Control
  *======================================================================================*/
 
 class OLLCPacket : public QObject
 {
   Q_OBJECT
 
   public:
     OLLCPacket( const unsigned char*, const struct ieee_802_11_802_2_header* data, QObject* parent = 0 );
     virtual ~OLLCPacket();