1f74e6e49SBjoern A. Zeeb#!/usr/bin/env python 2f74e6e49SBjoern A. Zeeb#- 3f74e6e49SBjoern A. Zeeb# SPDX-License-Identifier: BSD-2-Clause 4f74e6e49SBjoern A. Zeeb# 5f74e6e49SBjoern A. Zeeb# Copyright (c) 2019 Netflix, Inc. 6f74e6e49SBjoern A. Zeeb# 7f74e6e49SBjoern A. Zeeb# Redistribution and use in source and binary forms, with or without 8f74e6e49SBjoern A. Zeeb# modification, are permitted provided that the following conditions 9f74e6e49SBjoern A. Zeeb# are met: 10f74e6e49SBjoern A. Zeeb# 1. Redistributions of source code must retain the above copyright 11f74e6e49SBjoern A. Zeeb# notice, this list of conditions and the following disclaimer. 12f74e6e49SBjoern A. Zeeb# 2. Redistributions in binary form must reproduce the above copyright 13f74e6e49SBjoern A. Zeeb# notice, this list of conditions and the following disclaimer in the 14f74e6e49SBjoern A. Zeeb# documentation and/or other materials provided with the distribution. 15f74e6e49SBjoern A. Zeeb# 16f74e6e49SBjoern A. Zeeb# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 17f74e6e49SBjoern A. Zeeb# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 18f74e6e49SBjoern A. Zeeb# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 19f74e6e49SBjoern A. Zeeb# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 20f74e6e49SBjoern A. Zeeb# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21f74e6e49SBjoern A. Zeeb# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22f74e6e49SBjoern A. Zeeb# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23f74e6e49SBjoern A. Zeeb# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 24f74e6e49SBjoern A. Zeeb# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25f74e6e49SBjoern A. Zeeb# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26f74e6e49SBjoern A. Zeeb# SUCH DAMAGE. 27f74e6e49SBjoern A. Zeeb# 28f74e6e49SBjoern A. Zeeb# $FreeBSD$ 29f74e6e49SBjoern A. Zeeb# 30f74e6e49SBjoern A. Zeeb 31f74e6e49SBjoern A. Zeebimport argparse 32f74e6e49SBjoern A. Zeebimport scapy.all as sp 33f74e6e49SBjoern A. Zeebimport socket 34f74e6e49SBjoern A. Zeebimport sys 35f74e6e49SBjoern A. Zeebfrom time import sleep 36f74e6e49SBjoern A. Zeeb 37f74e6e49SBjoern A. Zeebdef main(): 38f74e6e49SBjoern A. Zeeb parser = argparse.ArgumentParser("frag6.py", 39f74e6e49SBjoern A. Zeeb description="IPv6 fragementation test tool") 40f74e6e49SBjoern A. Zeeb parser.add_argument('--sendif', nargs=1, 41f74e6e49SBjoern A. Zeeb required=True, 42f74e6e49SBjoern A. Zeeb help='The interface through which the packet will be sent') 43f74e6e49SBjoern A. Zeeb parser.add_argument('--recvif', nargs=1, 44f74e6e49SBjoern A. Zeeb required=True, 45f74e6e49SBjoern A. Zeeb help='The interface on which to check for the packet') 46f74e6e49SBjoern A. Zeeb parser.add_argument('--src', nargs=1, 47f74e6e49SBjoern A. Zeeb required=True, 48f74e6e49SBjoern A. Zeeb help='The source IP address') 49f74e6e49SBjoern A. Zeeb parser.add_argument('--to', nargs=1, 50f74e6e49SBjoern A. Zeeb required=True, 51f74e6e49SBjoern A. Zeeb help='The destination IP address') 52f74e6e49SBjoern A. Zeeb parser.add_argument('--debug', 53f74e6e49SBjoern A. Zeeb required=False, action='store_true', 54f74e6e49SBjoern A. Zeeb help='Enable test debugging') 55f74e6e49SBjoern A. Zeeb 56f74e6e49SBjoern A. Zeeb args = parser.parse_args() 57f74e6e49SBjoern A. Zeeb 58f74e6e49SBjoern A. Zeeb 59f74e6e49SBjoern A. Zeeb ######################################################################## 60f74e6e49SBjoern A. Zeeb # 61f74e6e49SBjoern A. Zeeb # Send multiple fragments, with an exact overlap in a middle one, 62f74e6e49SBjoern A. Zeeb # not finishing the full packet (and ignoring the content anyway). 63f74e6e49SBjoern A. Zeeb # 64f74e6e49SBjoern A. Zeeb # A: Reassembly failure. 65f74e6e49SBjoern A. Zeeb # R: dup dropped silently / Timeout (not waiting for). 66f74e6e49SBjoern A. Zeeb # 67f74e6e49SBjoern A. Zeeb data = "6" * 8 68f74e6e49SBjoern A. Zeeb ip6f01 = \ 69f74e6e49SBjoern A. Zeeb sp.Ether() / \ 70f74e6e49SBjoern A. Zeeb sp.IPv6(src=args.src[0], dst=args.to[0]) / \ 71f74e6e49SBjoern A. Zeeb sp.IPv6ExtHdrFragment(offset=0, m=1, id=14) / \ 72f74e6e49SBjoern A. Zeeb sp.UDP(dport=3456, sport=6543) / \ 73f74e6e49SBjoern A. Zeeb data 74f74e6e49SBjoern A. Zeeb ip6f02 = \ 75f74e6e49SBjoern A. Zeeb sp.Ether() / \ 76f74e6e49SBjoern A. Zeeb sp.IPv6(src=args.src[0], dst=args.to[0]) / \ 77f74e6e49SBjoern A. Zeeb sp.IPv6ExtHdrFragment(offset=0x1000, m=0, id=14) / \ 78f74e6e49SBjoern A. Zeeb sp.UDP(dport=3456, sport=6543) / \ 79f74e6e49SBjoern A. Zeeb data 80f74e6e49SBjoern A. Zeeb ip6f03 = \ 81f74e6e49SBjoern A. Zeeb sp.Ether() / \ 82f74e6e49SBjoern A. Zeeb sp.IPv6(src=args.src[0], dst=args.to[0]) / \ 83f74e6e49SBjoern A. Zeeb sp.IPv6ExtHdrFragment(offset=16, m=1, id=14) / \ 84f74e6e49SBjoern A. Zeeb sp.UDP(dport=3456, sport=6543) / \ 85f74e6e49SBjoern A. Zeeb data 86f74e6e49SBjoern A. Zeeb ip6f04 = \ 87f74e6e49SBjoern A. Zeeb sp.Ether() / \ 88f74e6e49SBjoern A. Zeeb sp.IPv6(src=args.src[0], dst=args.to[0]) / \ 89f74e6e49SBjoern A. Zeeb sp.IPv6ExtHdrFragment(offset=16, m=1, id=14) / \ 90f74e6e49SBjoern A. Zeeb sp.UDP(dport=3456, sport=6543) / \ 91f74e6e49SBjoern A. Zeeb data 92f74e6e49SBjoern A. Zeeb if args.debug : 93f74e6e49SBjoern A. Zeeb ip6f01.display() 94f74e6e49SBjoern A. Zeeb ip6f02.display() 95f74e6e49SBjoern A. Zeeb ip6f03.display() 96f74e6e49SBjoern A. Zeeb ip6f04.display() 97f74e6e49SBjoern A. Zeeb sp.sendp(ip6f01, iface=args.sendif[0], verbose=False) 98f74e6e49SBjoern A. Zeeb sp.sendp(ip6f02, iface=args.sendif[0], verbose=False) 99f74e6e49SBjoern A. Zeeb sp.sendp(ip6f03, iface=args.sendif[0], verbose=False) 100f74e6e49SBjoern A. Zeeb sp.sendp(ip6f04, iface=args.sendif[0], verbose=False) 101f74e6e49SBjoern A. Zeeb 102f74e6e49SBjoern A. Zeeb 103f74e6e49SBjoern A. Zeeb # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # ## 104f74e6e49SBjoern A. Zeeb # 105f74e6e49SBjoern A. Zeeb # Send multiple fragments, with a partial overlap on the first one 106f74e6e49SBjoern A. Zeeb # not finishing the full packet (and ignoring the content anyway). 107f74e6e49SBjoern A. Zeeb # The second packet needs to be the first one in the fragment chain 108f74e6e49SBjoern A. Zeeb # in order to trigger the 2nd case to test. 109f74e6e49SBjoern A. Zeeb # 110f74e6e49SBjoern A. Zeeb # A: Reassembly failure. 111f74e6e49SBjoern A. Zeeb # R: dup dropped silently / Timeout (not waiting for). 112f74e6e49SBjoern A. Zeeb # 113f74e6e49SBjoern A. Zeeb data = "6" * 8 114f74e6e49SBjoern A. Zeeb ip6f01 = \ 115f74e6e49SBjoern A. Zeeb sp.Ether() / \ 116f74e6e49SBjoern A. Zeeb sp.IPv6(src=args.src[0], dst=args.to[0]) / \ 117f74e6e49SBjoern A. Zeeb sp.IPv6ExtHdrFragment(offset=10, m=1, id=0x1401) / \ 118f74e6e49SBjoern A. Zeeb sp.UDP(dport=3456, sport=6543) / \ 119f74e6e49SBjoern A. Zeeb data 120f74e6e49SBjoern A. Zeeb ip6f02 = \ 121f74e6e49SBjoern A. Zeeb sp.Ether() / \ 122f74e6e49SBjoern A. Zeeb sp.IPv6(src=args.src[0], dst=args.to[0]) / \ 123f74e6e49SBjoern A. Zeeb sp.IPv6ExtHdrFragment(offset=9, m=0, id=0x1401) / \ 124f74e6e49SBjoern A. Zeeb sp.UDP(dport=3456, sport=6543) / \ 125f74e6e49SBjoern A. Zeeb data 126f74e6e49SBjoern A. Zeeb if args.debug : 127f74e6e49SBjoern A. Zeeb ip6f01.display() 128f74e6e49SBjoern A. Zeeb ip6f02.display() 129f74e6e49SBjoern A. Zeeb sp.sendp(ip6f01, iface=args.sendif[0], verbose=False) 130f74e6e49SBjoern A. Zeeb sp.sendp(ip6f02, iface=args.sendif[0], verbose=False) 131f74e6e49SBjoern A. Zeeb 132*4527b28bSBjoern A. Zeeb # Wait for expiry. 133*4527b28bSBjoern A. Zeeb sleep(75) 134f74e6e49SBjoern A. Zeeb sys.exit(0) 135f74e6e49SBjoern A. Zeeb 136f74e6e49SBjoern A. Zeebif __name__ == '__main__': 137f74e6e49SBjoern A. Zeeb main() 138