1f74e6e49SBjoern A. Zeeb#!/usr/bin/env python 2f74e6e49SBjoern A. Zeeb#- 3f74e6e49SBjoern A. Zeeb# SPDX-License-Identifier: BSD-2-Clause 4f74e6e49SBjoern A. Zeeb# 5f74e6e49SBjoern A. Zeeb# Copyright (c) 2019 Netflix, Inc. 6f74e6e49SBjoern A. Zeeb# 7f74e6e49SBjoern A. Zeeb# Redistribution and use in source and binary forms, with or without 8f74e6e49SBjoern A. Zeeb# modification, are permitted provided that the following conditions 9f74e6e49SBjoern A. Zeeb# are met: 10f74e6e49SBjoern A. Zeeb# 1. Redistributions of source code must retain the above copyright 11f74e6e49SBjoern A. Zeeb# notice, this list of conditions and the following disclaimer. 12f74e6e49SBjoern A. Zeeb# 2. Redistributions in binary form must reproduce the above copyright 13f74e6e49SBjoern A. Zeeb# notice, this list of conditions and the following disclaimer in the 14f74e6e49SBjoern A. Zeeb# documentation and/or other materials provided with the distribution. 15f74e6e49SBjoern A. Zeeb# 16f74e6e49SBjoern A. Zeeb# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 17f74e6e49SBjoern A. Zeeb# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 18f74e6e49SBjoern A. Zeeb# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 19f74e6e49SBjoern A. Zeeb# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 20f74e6e49SBjoern A. Zeeb# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21f74e6e49SBjoern A. Zeeb# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22f74e6e49SBjoern A. Zeeb# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23f74e6e49SBjoern A. Zeeb# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 24f74e6e49SBjoern A. Zeeb# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25f74e6e49SBjoern A. Zeeb# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26f74e6e49SBjoern A. Zeeb# SUCH DAMAGE. 27f74e6e49SBjoern A. Zeeb# 28f74e6e49SBjoern A. Zeeb# 29f74e6e49SBjoern A. Zeeb 30f74e6e49SBjoern A. Zeebimport argparse 31*a26e895fSKristof Provostimport logging 32*a26e895fSKristof Provostlogging.getLogger("scapy").setLevel(logging.CRITICAL) 33f74e6e49SBjoern A. Zeebimport scapy.all as sp 34f74e6e49SBjoern A. Zeebimport socket 35f74e6e49SBjoern A. Zeebimport sys 36f74e6e49SBjoern A. Zeebfrom sniffer import Sniffer 37f74e6e49SBjoern A. Zeebfrom time import sleep 38f74e6e49SBjoern A. Zeeb 39f74e6e49SBjoern A. Zeebdef check_icmp6_error(args, packet): 40f74e6e49SBjoern A. Zeeb ip6 = packet.getlayer(sp.IPv6) 41f74e6e49SBjoern A. Zeeb if not ip6: 42f74e6e49SBjoern A. Zeeb return False 43f74e6e49SBjoern A. Zeeb oip6 = sp.IPv6(src=args.src[0], dst=args.to[0]) 44f74e6e49SBjoern A. Zeeb if ip6.dst != oip6.src: 45f74e6e49SBjoern A. Zeeb return False 46f74e6e49SBjoern A. Zeeb icmp6 = packet.getlayer(sp.ICMPv6ParamProblem) 47f74e6e49SBjoern A. Zeeb if not icmp6: 48f74e6e49SBjoern A. Zeeb return False 49f74e6e49SBjoern A. Zeeb # ICMP6_PARAMPROB_HEADER 0 50f74e6e49SBjoern A. Zeeb if icmp6.code != 0: 51f74e6e49SBjoern A. Zeeb return False 52f74e6e49SBjoern A. Zeeb # Should we check the payload as well? 53f74e6e49SBjoern A. Zeeb # We are running in a very isolated environment and nothing else 54f74e6e49SBjoern A. Zeeb # should trigger an ICMPv6 Param Prob so leave it. 55f74e6e49SBjoern A. Zeeb #icmp6.display() 56f74e6e49SBjoern A. Zeeb return True 57f74e6e49SBjoern A. Zeeb 58f74e6e49SBjoern A. Zeebdef main(): 59f74e6e49SBjoern A. Zeeb parser = argparse.ArgumentParser("frag6.py", 60f74e6e49SBjoern A. Zeeb description="IPv6 fragementation test tool") 61f74e6e49SBjoern A. Zeeb parser.add_argument('--sendif', nargs=1, 62f74e6e49SBjoern A. Zeeb required=True, 63f74e6e49SBjoern A. Zeeb help='The interface through which the packet will be sent') 64f74e6e49SBjoern A. Zeeb parser.add_argument('--recvif', nargs=1, 65f74e6e49SBjoern A. Zeeb required=True, 66f74e6e49SBjoern A. Zeeb help='The interface on which to check for the packet') 67f74e6e49SBjoern A. Zeeb parser.add_argument('--src', nargs=1, 68f74e6e49SBjoern A. Zeeb required=True, 69f74e6e49SBjoern A. Zeeb help='The source IP address') 70f74e6e49SBjoern A. Zeeb parser.add_argument('--to', nargs=1, 71f74e6e49SBjoern A. Zeeb required=True, 72f74e6e49SBjoern A. Zeeb help='The destination IP address') 73f74e6e49SBjoern A. Zeeb parser.add_argument('--debug', 74f74e6e49SBjoern A. Zeeb required=False, action='store_true', 75f74e6e49SBjoern A. Zeeb help='Enable test debugging') 76f74e6e49SBjoern A. Zeeb 77f74e6e49SBjoern A. Zeeb args = parser.parse_args() 78f74e6e49SBjoern A. Zeeb 79f74e6e49SBjoern A. Zeeb 80f74e6e49SBjoern A. Zeeb # Start sniffing on recvif 81f74e6e49SBjoern A. Zeeb sniffer = Sniffer(args, check_icmp6_error) 82f74e6e49SBjoern A. Zeeb 83f74e6e49SBjoern A. Zeeb 84f74e6e49SBjoern A. Zeeb ######################################################################## 85f74e6e49SBjoern A. Zeeb # 86f74e6e49SBjoern A. Zeeb # 0-byte first fragment. 87f74e6e49SBjoern A. Zeeb # 88f74e6e49SBjoern A. Zeeb # A: 0-byte fragment payload not allowed. Discarded. 89f74e6e49SBjoern A. Zeeb # R: ICMPv6 param prob, paramprob header. 90f74e6e49SBjoern A. Zeeb # 91f74e6e49SBjoern A. Zeeb ip6f01 = sp.Ether() / \ 92f74e6e49SBjoern A. Zeeb sp.IPv6(src=args.src[0], dst=args.to[0]) / \ 93f74e6e49SBjoern A. Zeeb sp.IPv6ExtHdrFragment(offset=0, m=1, id=4) 94f74e6e49SBjoern A. Zeeb if args.debug : 95f74e6e49SBjoern A. Zeeb ip6f01.display() 96f74e6e49SBjoern A. Zeeb sp.sendp(ip6f01, iface=args.sendif[0], verbose=False) 97f74e6e49SBjoern A. Zeeb 98f74e6e49SBjoern A. Zeeb sleep(0.10) 99cc07e75fSBjoern A. Zeeb sniffer.setEnd() 100f74e6e49SBjoern A. Zeeb sniffer.join() 101f74e6e49SBjoern A. Zeeb if not sniffer.foundCorrectPacket: 102f74e6e49SBjoern A. Zeeb sys.exit(1) 103f74e6e49SBjoern A. Zeeb 104f74e6e49SBjoern A. Zeeb sys.exit(0) 105f74e6e49SBjoern A. Zeeb 106f74e6e49SBjoern A. Zeebif __name__ == '__main__': 107f74e6e49SBjoern A. Zeeb main() 108