public SnifferSocket()
{
this.m_Data = new DataManager();
this.m_Filter = new FilterManager();
this.m_SocketMap = new Hashtable();
}
// Parses out an IPv4 Datagram.
private void HandleIPv4Datagram(byte[] buffer)
{
int identification = 0;
int protocol = 0;
uint source = 0;
uint dest = 0;
int header_length = 0;
IPv4Datagram datagram = null;
IPAddress source_ip;
IPAddress dest_ip;
source = HeaderParser.ToUInt(buffer, 96, 32);
dest = HeaderParser.ToUInt(buffer, 128, 32);
source_ip = IPAddress.Parse(IPv4Datagram.GetIPString(source));
dest_ip = IPAddress.Parse(IPv4Datagram.GetIPString(dest));
if (isRelatedToThisCom(source_ip.ToString(), dest_ip.ToString()))
{
IPv4Fragment fragment = new IPv4Fragment();
fragment.MoreFlag = (HeaderParser.ToByte(buffer, 50, 1) > 0) ? true : false;
fragment.Offset = HeaderParser.ToInt(buffer, 51, 13) * 8;
fragment.TTL = HeaderParser.ToInt(buffer, 64, 8);
fragment.Length = HeaderParser.ToUShort(buffer, 16, 16);
header_length = HeaderParser.ToInt(buffer, 4, 4) * 4;
fragment.SetData(buffer, header_length, fragment.Length - header_length);
identification = HeaderParser.ToInt(buffer, 32, 16);
protocol = HeaderParser.ToByte(buffer, 72, 8);
// source = HeaderParser.ToUInt(buffer,96,32);
// dest = HeaderParser.ToUInt(buffer,128,32);
// source_ip = IPAddress.Parse(IPv4Datagram.GetIPString(source));
// dest_ip = IPAddress.Parse(IPv4Datagram.GetIPString(dest));
datagram = Data_.GetIPv4Datagram(identification, source_ip, dest_ip);
if (datagram == null)
{
datagram = new IPv4Datagram();
datagram.IHL = HeaderParser.ToInt(buffer, 4, 4) * 4;
datagram.TypeOfService = HeaderParser.ToInt(buffer, 8, 8);
datagram.ReservedFlag = HeaderParser.ToInt(buffer, 48, 1);
datagram.DontFragmentFlag = HeaderParser.ToInt(buffer, 49, 1);
datagram.Identification = identification;
datagram.TTL = HeaderParser.ToInt(buffer, 64, 8);
datagram.Checksum = HeaderParser.ToInt(buffer, 80, 16);
datagram.Source = source_ip;
datagram.SourceName = DnsTable.GetName(source_ip.ToString());
datagram.DestinationName = DnsTable.GetName(dest_ip.ToString());
datagram.Destination = dest_ip;
datagram.Protocol = protocol;
if (datagram.IHL == 24)
{
datagram.Options = HeaderParser.ToInt(buffer, 160, 32);
}
}
datagram.AddFragment(fragment);
if (datagram.Complete)
{
datagram.SetPorts();
if (FilterManager.isAllowed(datagram.GetUpperProtocol(), datagram.SourceIP, datagram.DestinationIP, datagram.SPort, datagram.DPort))
{
FireIPv4DatagramReceived(datagram);
datagram.SetHeader(buffer);
if (datagram.WasFragmented())
{
Data_.RemoveIPv4Datagram(datagram);
}
}
}
else
{
Data_.AddIPv4Datagram(datagram);
this.FireIPv4FragmentReceived(fragment);
}
}
}
