start parsing 802.11 control frames

3 files changed, 30 insertions, 14 deletions

diff --git a/libopie2/opienet/802_11_user.h b/libopie2/opienet/802_11_user.h
index ad84514..7ae27c5 100644
--- a/libopie2/opienet/802_11_user.h
+++ b/libopie2/opienet/802_11_user.h
@@ -224,61 +224,61 @@ struct ieee_802_11_frame_subtype_class {
 #define FC_VERSION(fc)		((fc) & 0x3)
 #define FC_TYPE(fc)		(((fc) >> 2) & 0x3)
 #define FC_SUBTYPE(fc)		(((fc) >> 4) & 0xF)
 #define FC_TO_DS(fc)		((fc) & 0x0100)
 #define FC_FROM_DS(fc)		((fc) & 0x0200)
 #define FC_MORE_FLAG(fc)	((fc) & 0x0400)
 #define FC_RETRY(fc)		((fc) & 0x0800)
 #define FC_POWER_MGMT(fc)	((fc) & 0x1000)
 #define FC_MORE_DATA(fc)	((fc) & 0x2000)
 #define FC_WEP(fc)		((fc) & 0x4000)
 #define FC_ORDER(fc)		((fc) & 0x8000)
 
 
 struct ieee_802_11_mgmt_header {
   u_int16_t fc;
   u_int16_t duration;
   u_int8_t  da[6];
   u_int8_t  sa[6];
   u_int8_t  bssid[6];
   u_int16_t seq_ctrl;
 };
 
 
 struct ieee_802_11_data_header {
-	u_int16_t	frame_control;
+	u_int16_t	fc;
 	u_int16_t	duration;
 	u_int8_t	mac1[6];
 	u_int8_t	mac2[6];
 	u_int8_t	mac3[6];
 	u_int16_t	SeqCtl;
 	u_int8_t	mac4[6];
 //	u_int16_t	gapLen;
 //	u_int8_t	gap[8];
 };
 
 struct ieee_802_11_control_header {
-	u_int16_t	frame_control;
+	u_int16_t	fc;
 	u_int16_t	duration;
 	u_int8_t	mac1[6];
 	u_int8_t	mac2[6];
 	u_int8_t	mac3[6];
 	u_int16_t	SeqCtl;
 	u_int8_t	mac4[6];
 //	u_int16_t	gapLen;
 //	u_int8_t	gap[8];
 };
 
 #define CAPABILITY_ESS(cap)     ((cap) & 0x0001)
 #define CAPABILITY_IBSS(cap)    ((cap) & 0x0002)
 #define CAPABILITY_CFP(cap)     ((cap) & 0x0004)
 #define CAPABILITY_CFP_REQ(cap) ((cap) & 0x0008)
 #define CAPABILITY_PRIVACY(cap) ((cap) & 0x0010)
 
 struct ssid_t {
   u_int8_t	element_id;
   u_int8_t	length;
   u_char		ssid[33];  /* 32 + 1 for null */
 };
 
 
 struct rates_t {
diff --git a/libopie2/opienet/opcap.cpp b/libopie2/opienet/opcap.cpp
index e9b3b2c..012c0a3 100644
--- a/libopie2/opienet/opcap.cpp
+++ b/libopie2/opienet/opcap.cpp
@@ -217,50 +217,50 @@ OMacAddress OEthernetPacket::sourceAddress() const
 }

 

 

 OMacAddress OEthernetPacket::destinationAddress() const

 {

     return OMacAddress( _ether->ether_dhost );

 }

 

 int OEthernetPacket::type() const

 {

     return ntohs( _ether->ether_type );

 }

 

 

 /*======================================================================================

  * OIPPacket

  *======================================================================================*/

 

 

 OIPPacket::OIPPacket( const unsigned char* end, const struct iphdr* data, QObject* parent )

           :QObject( parent, "IP" ), _iphdr( data )

 {

     odebug << "OIPPacket::OIPPacket(): decoding IP header..." << oendl;

 

-    odebug << "FromAddress = " << fromIPAddress().toString();

-    odebug << "  toAddress = " << toIPAddress().toString();

+    odebug << "FromAddress = " << fromIPAddress().toString() << oendl;
+    odebug << "  toAddress = " << toIPAddress().toString() << oendl;
 

     switch ( protocol() )

     {

         case IPPROTO_UDP: new OUDPPacket( end, (const struct udphdr*) (data+1), this ); break;

         case IPPROTO_TCP: new OTCPPacket( end, (const struct tcphdr*) (data+1), this ); break;

         default: odebug << "OIPPacket::OIPPacket(): unknown IP protocol, type = " << protocol() << oendl;

     }

 

 }

 

 OIPPacket::~OIPPacket()

 {

 }

 

 

 QHostAddress OIPPacket::fromIPAddress() const

 {

     return EXTRACT_32BITS( &_iphdr->saddr );

 }

 

 

 QHostAddress OIPPacket::toIPAddress() const

 {

     return EXTRACT_32BITS( &_iphdr->saddr );

@@ -318,49 +318,49 @@ OARPPacket::OARPPacket( const unsigned char* end, const struct myarphdr* data, Q
 {

     odebug << "OARPPacket::OARPPacket(): decoding ARP header..." << oendl;

     odebug << "ARP type seems to be " << EXTRACT_16BITS( &_arphdr->ar_op ) << " = " << type() << oendl;

     odebug << "Sender: MAC " << senderMacAddress().toString() << " = IP " << senderIPV4Address().toString() << oendl;

     odebug << "Target: MAC " << targetMacAddress().toString() << " = IP " << targetIPV4Address().toString() << oendl;

 }

 

 

 OARPPacket::~OARPPacket()

 {

 }

 

 

 QString OARPPacket::type() const

 {

     switch ( EXTRACT_16BITS( &_arphdr->ar_op ) )

     {

         case 1: return "REQUEST";

         case 2: return "REPLY";

         case 3: return "RREQUEST";

         case 4: return "RREPLY";

         case 8: return "InREQUEST";

         case 9: return "InREPLY";

         case 10: return "NAK";

-        default: qWarning( "OARPPacket::type(): invalid ARP type!" ); return "<unknown>";

+        default: owarn << "OARPPacket::type(): invalid ARP type!" << oendl; return "<unknown>";
     }

 }

 

 

 QHostAddress OARPPacket::senderIPV4Address() const

 {

     return EXTRACT_32BITS( &_arphdr->ar_sip );

 }

 

 

 QHostAddress OARPPacket::targetIPV4Address() const

 {

     return EXTRACT_32BITS( &_arphdr->ar_tip );

 }

 

 

 OMacAddress OARPPacket::senderMacAddress() const

 {

     return OMacAddress( _arphdr->ar_sha );

 }

 

 

 OMacAddress OARPPacket::targetMacAddress() const

 {

@@ -472,49 +472,49 @@ ODHCPPacket::~ODHCPPacket()
 bool ODHCPPacket::isRequest() const

 {

     return ( _dhcphdr->op == 01 );

 }

 

 

 bool ODHCPPacket::isReply() const

 {

     return ( _dhcphdr->op == 02 );

 }

 

 

 QString ODHCPPacket::type() const

 {

     switch ( _type )

     {

         case 1: return "DISCOVER";

         case 2: return "OFFER";

         case 3: return "REQUEST";

         case 4: return "DECLINE";

         case 5: return "ACK";

         case 6: return "NAK";

         case 7: return "RELEASE";

         case 8: return "INFORM";

-        default: qWarning( "ODHCPPacket::type(): invalid DHCP type (%d) !", _dhcphdr->op ); return "<unknown>";

+        default: owarn << "ODHCPPacket::type(): invalid DHCP type " << _dhcphdr->op << oendl; return "<unknown>";
     }

 }

 

 

 QHostAddress ODHCPPacket::clientAddress() const

 {

     return EXTRACT_32BITS( &_dhcphdr->ciaddr );

 }

 

 

 QHostAddress ODHCPPacket::yourAddress() const

 {

     return EXTRACT_32BITS( &_dhcphdr->yiaddr );

 }

 

 

 QHostAddress ODHCPPacket::serverAddress() const

 {

     return EXTRACT_32BITS( &_dhcphdr->siaddr );

 }

 

 

 QHostAddress ODHCPPacket::relayAddress() const

 {

@@ -744,51 +744,49 @@ OWaveLanManagementPacket::OWaveLanManagementPacket( const unsigned char* end, co
     }

 }

 

 

 OWaveLanManagementPacket::~OWaveLanManagementPacket()

 {

 }

 

 

 QString OWaveLanManagementPacket::managementType() const

 {

     switch ( FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) )

     {

         case ST_ASSOC_REQUEST: return "AssociationRequest"; break;

         case ST_ASSOC_RESPONSE: return "AssociationResponse"; break;

         case ST_REASSOC_REQUEST: return "ReassociationRequest"; break;

         case ST_REASSOC_RESPONSE: return "ReassociationResponse"; break;

         case ST_PROBE_REQUEST: return "ProbeRequest"; break;

         case ST_PROBE_RESPONSE: return "ProbeResponse"; break;

         case ST_BEACON: return "Beacon"; break;

         case ST_ATIM: return "Atim"; break;

         case ST_DISASSOC: return "Disassociation"; break;

         case ST_AUTH: return "Authentication"; break;

         case ST_DEAUTH: return "Deathentication"; break;

-        default:

-            qWarning( "OWaveLanManagementPacket::managementType(): unhandled subtype %d", FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) );

-            return "Unknown";

+        default: owarn << "OWaveLanManagementPacket::managementType(): unhandled subtype " << FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) << oendl; return "Unknown";
     }

 }

 

 

 int OWaveLanManagementPacket::beaconInterval() const

 {

     return EXTRACT_LE_16BITS( &_body->beacon_interval );

 }

 

 

 int OWaveLanManagementPacket::capabilities() const

 {

     return EXTRACT_LE_16BITS( &_body->capability_info );

 }

 

 

 bool OWaveLanManagementPacket::canESS() const

 {

     return CAPABILITY_ESS( EXTRACT_LE_16BITS( &_body->capability_info ) );

 }

 

 

 bool OWaveLanManagementPacket::canIBSS() const

 {

@@ -990,64 +988,80 @@ OLLCPacket::OLLCPacket( const unsigned char* end, const struct ieee_802_11_802_2
 

         switch ( EXTRACT_16BITS( &_header->type ) ) // defined in linux/if_ether.h

         {

             case ETH_P_IP: new OIPPacket( end, (const struct iphdr*) (data+1), this ); break;

             case ETH_P_ARP: new OARPPacket( end, (const struct myarphdr*) (data+1), this ); break;

             default: owarn << "OLLCPacket::OLLCPacket(): Unknown Encapsulation type = " << EXTRACT_16BITS( &_header->type ) << oendl;

         }

     }

 }

 

 

 OLLCPacket::~OLLCPacket()

 {

 }

 

 

 /*======================================================================================

  * OWaveLanControlPacket

  *======================================================================================*/

 

 OWaveLanControlPacket::OWaveLanControlPacket( const unsigned char* end, const struct ieee_802_11_control_header* data, OWaveLanPacket* parent )

                 :QObject( parent, "802.11 Control" ), _header( data )

 {

     odebug << "OWaveLanControlPacket::OWaveLanDataControl(): decoding frame..." << oendl;

-    //TODO: Implement this

+    odebug << "Detected subtype is " << controlType() << oendl;
 }

 

 

 OWaveLanControlPacket::~OWaveLanControlPacket()

 {

 }

 

 

+QString OWaveLanControlPacket::controlType() const
+{
+    switch ( FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) )
+    {
+        case CTRL_PS_POLL: return "PowerSavePoll"; break;
+        case CTRL_RTS: return "RequestToSend"; break;
+        case CTRL_CTS: return "ClearToSend"; break;
+        case CTRL_ACK: return "Acknowledge"; break;
+        case CTRL_CF_END: return "ContentionFreeEnd"; break;
+        case CTRL_END_ACK: return "AcknowledgeEnd"; break;
+        default:
+            owarn << "OWaveLanControlPacket::managementType(): unhandled subtype " << FC_SUBTYPE( EXTRACT_LE_16BITS( &_header->fc ) ) << oendl;
+            return "Unknown";
+    }
+}
+
+
 /*======================================================================================

  * OPacketCapturer

  *======================================================================================*/

 

 OPacketCapturer::OPacketCapturer( QObject* parent, const char* name )

-                 :QObject( parent, name ), _name( QString::null ), _open( false ),

-                 _pch( 0 ), _pcd( 0 ), _sn( 0 )

+                :QObject( parent, name ), _name( QString::null ), _open( false ), _pch( 0 ), _pcd( 0 ), _sn( 0 )
 {

 }

 

 

 OPacketCapturer::~OPacketCapturer()

 {

     if ( _open )

     {

         odebug << "OPacketCapturer::~OPacketCapturer(): pcap still open, autoclosing." << oendl;

         close();

     }

 }

 

 

 void OPacketCapturer::setBlocking( bool b )

 {

     if ( pcap_setnonblock( _pch, 1-b, _errbuf ) != -1 )

     {

         odebug << "OPacketCapturer::setBlocking(): blocking mode changed successfully." << oendl;

     }

     else

     {

         odebug << "OPacketCapturer::setBlocking(): can't change blocking mode: " << _errbuf << oendl;

     }

@@ -1088,49 +1102,49 @@ void OPacketCapturer::close()
         }

         closeDumpFile();

     _open = false;

     }

 

     odebug << "OPacketCapturer::close() --- dumping capturing statistics..." << oendl;

     odebug << "--------------------------------------------------" << oendl;

     for( QMap<QString,int>::Iterator it = _stats.begin(); it != _stats.end(); ++it )

         odebug << it.key() << " = " << it.data() << oendl;

     odebug << "--------------------------------------------------" << oendl;

 

 }

 

 

 int OPacketCapturer::dataLink() const

 {

     return pcap_datalink( _pch );

 }

 

 

 void OPacketCapturer::dump( OPacket* p )

 {

     if ( !_pcd )

     {

-        qWarning( "OPacketCapturer::dump() - cannot dump without open capture file!" );

+        owarn << "OPacketCapturer::dump() - cannot dump without open capture file!" << oendl;
         return;

     }

     pcap_dump( (u_char*) _pcd, &p->_hdr, p->_data );

 }

 

 

 int OPacketCapturer::fileno() const

 {

     if ( _open )

     {

         return pcap_fileno( _pch );

     }

     else

     {

         return -1;

     }

 }

 

 

 OPacket* OPacketCapturer::next( int time )

 {

     fd_set fds;

     struct timeval tv;

     FD_ZERO( &fds );

@@ -1147,49 +1161,49 @@ OPacket* OPacketCapturer::next( int time )
 

 OPacket* OPacketCapturer::next()

 {

     packetheaderstruct header;

     odebug << "==> OPacketCapturer::next()" << oendl;

     const unsigned char* pdata = pcap_next( _pch, &header );

     odebug << "<== OPacketCapturer::next()" << oendl;

 

     if ( pdata && header.len )

     {

         OPacket* p = new OPacket( dataLink(), header, pdata, 0 );

         // packets shouldn't be inserted in the QObject child-parent hierarchy,

         // because due to memory constraints they will be deleted as soon

         // as possible - that is right after they have been processed

         // by emit() [ see below ]

         //TODO: make gathering statistics optional, because it takes time

         p->updateStats( _stats, const_cast<QObjectList*>( p->children() ) );

         #ifndef NODEBUG

         p->dumpStructure( const_cast<QObjectList*>( p->children() ) );

         #endif

         return p;

     }

     else

     {

-        qWarning( "OPacketCapturer::next() - no packet received!" );

+        owarn << "OPacketCapturer::next() - no packet received!" << oendl;
         return 0;

     }

 }

 

 

 bool OPacketCapturer::open( const QString& name )

 {

     if ( _open )

     {

         if ( name == _name )    // ignore opening an already openend device

         {

             return true;

         }

         else                    // close the last opened device

         {

             close();

         }

     }

 

     _name = name;

 

     // open libpcap

     pcap_t* handle = pcap_open_live( const_cast<char*>( (const char*) name ), 1024, 0, 0, &_errbuf[0] );

 

diff --git a/libopie2/opienet/opcap.h b/libopie2/opienet/opcap.h
index 497fd6b..b373c56 100644
--- a/libopie2/opienet/opcap.h
+++ b/libopie2/opienet/opcap.h
@@ -376,48 +376,50 @@ class OWaveLanManagementChallenge : public QObject
 class OWaveLanDataPacket : public QObject
 {
   Q_OBJECT
 
   public:
     OWaveLanDataPacket( const unsigned char*, const struct ieee_802_11_data_header*, OWaveLanPacket* parent = 0 );
     virtual ~OWaveLanDataPacket();
 
   private:
     const struct ieee_802_11_data_header* _header;
 };
 
 /*======================================================================================
  * OWaveLanControlPacket - type: control (T_CTRL)
  *======================================================================================*/
 
 class OWaveLanControlPacket : public QObject
 {
   Q_OBJECT
 
   public:
     OWaveLanControlPacket( const unsigned char*, const struct ieee_802_11_control_header*, OWaveLanPacket* parent = 0 );
     virtual ~OWaveLanControlPacket();
 
+    QString controlType() const;
+
   private:
     const struct ieee_802_11_control_header* _header;
 };
 
 /*======================================================================================
  * OLLCPacket - IEEE 802.2 Link Level Control
  *======================================================================================*/
 
 class OLLCPacket : public QObject
 {
   Q_OBJECT
 
   public:
     OLLCPacket( const unsigned char*, const struct ieee_802_11_802_2_header* data, QObject* parent = 0 );
     virtual ~OLLCPacket();
 
   private:
     const struct ieee_802_11_802_2_header* _header;
 };
 
 /*======================================================================================
  * OIPPacket
  *======================================================================================*/