Example #1
0
 public SnifferSocket()
 {
     this.m_Data      = new DataManager();
     this.m_Filter    = new FilterManager();
     this.m_SocketMap = new Hashtable();
 }
Example #2
0
        // Parses out an IPv4 Datagram.
        private void HandleIPv4Datagram(byte[] buffer)
        {
            int          identification = 0;
            int          protocol       = 0;
            uint         source         = 0;
            uint         dest           = 0;
            int          header_length  = 0;
            IPv4Datagram datagram       = null;
            IPAddress    source_ip;
            IPAddress    dest_ip;


            source    = HeaderParser.ToUInt(buffer, 96, 32);
            dest      = HeaderParser.ToUInt(buffer, 128, 32);
            source_ip = IPAddress.Parse(IPv4Datagram.GetIPString(source));
            dest_ip   = IPAddress.Parse(IPv4Datagram.GetIPString(dest));
            if (isRelatedToThisCom(source_ip.ToString(), dest_ip.ToString()))
            {
                IPv4Fragment fragment = new IPv4Fragment();

                fragment.MoreFlag = (HeaderParser.ToByte(buffer, 50, 1) > 0) ? true : false;
                fragment.Offset   = HeaderParser.ToInt(buffer, 51, 13) * 8;
                fragment.TTL      = HeaderParser.ToInt(buffer, 64, 8);
                fragment.Length   = HeaderParser.ToUShort(buffer, 16, 16);
                header_length     = HeaderParser.ToInt(buffer, 4, 4) * 4;
                fragment.SetData(buffer, header_length, fragment.Length - header_length);

                identification = HeaderParser.ToInt(buffer, 32, 16);
                protocol       = HeaderParser.ToByte(buffer, 72, 8);
//				source = HeaderParser.ToUInt(buffer,96,32);
//				dest = HeaderParser.ToUInt(buffer,128,32);
//				source_ip = IPAddress.Parse(IPv4Datagram.GetIPString(source));
//				dest_ip = IPAddress.Parse(IPv4Datagram.GetIPString(dest));

                datagram = Data_.GetIPv4Datagram(identification, source_ip, dest_ip);

                if (datagram == null)
                {
                    datagram                  = new IPv4Datagram();
                    datagram.IHL              = HeaderParser.ToInt(buffer, 4, 4) * 4;
                    datagram.TypeOfService    = HeaderParser.ToInt(buffer, 8, 8);
                    datagram.ReservedFlag     = HeaderParser.ToInt(buffer, 48, 1);
                    datagram.DontFragmentFlag = HeaderParser.ToInt(buffer, 49, 1);
                    datagram.Identification   = identification;
                    datagram.TTL              = HeaderParser.ToInt(buffer, 64, 8);
                    datagram.Checksum         = HeaderParser.ToInt(buffer, 80, 16);
                    datagram.Source           = source_ip;

                    datagram.SourceName = DnsTable.GetName(source_ip.ToString());

                    datagram.DestinationName = DnsTable.GetName(dest_ip.ToString());

                    datagram.Destination = dest_ip;
                    datagram.Protocol    = protocol;
                    if (datagram.IHL == 24)
                    {
                        datagram.Options = HeaderParser.ToInt(buffer, 160, 32);
                    }
                }

                datagram.AddFragment(fragment);
                if (datagram.Complete)
                {
                    datagram.SetPorts();
                    if (FilterManager.isAllowed(datagram.GetUpperProtocol(), datagram.SourceIP, datagram.DestinationIP, datagram.SPort, datagram.DPort))
                    {
                        FireIPv4DatagramReceived(datagram);

                        datagram.SetHeader(buffer);
                        if (datagram.WasFragmented())
                        {
                            Data_.RemoveIPv4Datagram(datagram);
                        }
                    }
                }
                else
                {
                    Data_.AddIPv4Datagram(datagram);
                    this.FireIPv4FragmentReceived(fragment);
                }
            }
        }