public DataFrame(PacketDotNet.Ieee80211.QosDataFrame DataFrame, DateTime TimeStamp)
{
this.TimeStamp = TimeStamp;
this.SourceMacAddress = DataFrame.SourceAddress.GetAddressBytes();
this.TargetMacAddress = DataFrame.DestinationAddress.GetAddressBytes();
this.SourceMacAddressLong = Utils.MacToLong(SourceMacAddress);
this.TargetMacAddressLong = Utils.MacToLong(TargetMacAddress);
this.FramePayload = DataFrame.Bytes;
//a hacky "parser" to get to the actual payload to get what we need
int ReadOffset = 0;
ReadOffset += 26; //IEEE 802.11 header
ReadOffset += 8; //Logical-Link Control header
byte[] PacketData = DataFrame.Bytes;
if (!(ReadOffset + 20 /*IPv4*/ + 5 > PacketData.Length)) //5byte Packet size as reserved... who wants to read a ~10byte packet anyway
{
this.isIPv4 = PacketData[ReadOffset] == 0x45;
this.isTCP = PacketData[ReadOffset + 9] == 0x06;
this.isUDP = PacketData[ReadOffset + 9] == 0x11;
if (isIPv4 && (isTCP || isUDP))
{
SourceIp = PacketData[ReadOffset + 12] + "." + PacketData[ReadOffset + 13] + "." + PacketData[ReadOffset + 14] + "." + PacketData[ReadOffset + 15];
DestIp = PacketData[ReadOffset + 16] + "." + PacketData[ReadOffset + 17] + "." + PacketData[ReadOffset + 18] + "." + PacketData[ReadOffset + 19];
ReadOffset += 20; //IPv4 header
if (isTCP)
{
PortSource = PacketData[ReadOffset] << 8 | PacketData[ReadOffset + 1];
PortDest = PacketData[ReadOffset + 2] << 8 | PacketData[ReadOffset + 3];
ReadOffset += 32; //TCP header
}
if (isUDP)
{
PortSource = PacketData[ReadOffset] << 8 | PacketData[ReadOffset + 1];
PortDest = PacketData[ReadOffset + 2] << 8 | PacketData[ReadOffset + 3];
ReadOffset += 8; //UDP header
}
this.PayloadLen = PacketData.Length - ReadOffset;
this.PayloadOffset = ReadOffset;
}
}
if (String.IsNullOrEmpty(SourceIp) || String.IsNullOrEmpty(DestIp))
{
SourceIp = "";
DestIp = "";
}
}
public void ProcessPacket(Packet packet, DateTime ArrivalDate, int Channel)
{
PacketDotNet.Ieee80211.BeaconFrame beacon = packet as PacketDotNet.Ieee80211.BeaconFrame;
PacketDotNet.Ieee80211.ProbeRequestFrame probeRequest = packet as PacketDotNet.Ieee80211.ProbeRequestFrame;
PacketDotNet.Ieee80211.QosDataFrame DataFrame = packet as PacketDotNet.Ieee80211.QosDataFrame;
PacketDotNet.Ieee80211.DeauthenticationFrame DeAuthFrame = packet as PacketDotNet.Ieee80211.DeauthenticationFrame;
PacketDotNet.Ieee80211.AssociationRequestFrame AuthRequestFrame = packet as PacketDotNet.Ieee80211.AssociationRequestFrame;
PacketDotNet.Ieee80211.DataDataFrame DataDataFrame = packet as PacketDotNet.Ieee80211.DataDataFrame;
PacketDotNet.Ieee80211.RadioPacket radioFrame = packet as PacketDotNet.Ieee80211.RadioPacket;
if (packet != null && false)//LiveCaptureMode)
{
_allFrames.Add(new AnyPacketFrame(ArrivalDate, packet, Channel));
}
if (radioFrame != null)
{
PacketDotNet.Ieee80211.FrameControlField.FrameSubTypes type = ((PacketDotNet.Ieee80211.MacFrame)radioFrame.PayloadPacket).FrameControl.SubType;
if (type == PacketDotNet.Ieee80211.FrameControlField.FrameSubTypes.ManagementBeacon)
{
beacon = new PacketDotNet.Ieee80211.BeaconFrame(new PacketDotNet.Utils.ByteArraySegment(packet.Bytes));
}
else if (type == PacketDotNet.Ieee80211.FrameControlField.FrameSubTypes.Data)
{
DataFrame = new PacketDotNet.Ieee80211.QosDataFrame(new PacketDotNet.Utils.ByteArraySegment(packet.Bytes));
}
}
if (beacon != null)
{
BeaconFrame beaconFrame = new BeaconFrame(beacon, ArrivalDate, Channel);
_beacons.Add(beaconFrame);
long MacAddrNumber = Utils.MacToLong(beaconFrame.MacAddress);
//check for APs with this Mac Address
AccessPoint AP = null;
if (!_accessPoints.TryGetValue(MacAddrNumber, out AP))
{
AP = new AccessPoint(beaconFrame);
_accessPoints.Add(MacAddrNumber, AP);
}
AP.AddBeaconFrame(beaconFrame);
if (onReadAccessPoint != null)
{
onReadAccessPoint(AP);
}
}
else if (probeRequest != null)
{
ProbePacket probe = new ProbePacket(probeRequest, ArrivalDate);
Station station = null;
long MacAddrNumber = Utils.MacToLong(probe.SourceMacAddress);
if (!_stations.TryGetValue(MacAddrNumber, out station))
{
station = new Station(probe);
_stations.Add(MacAddrNumber, station);
}
station.AddProbe(probe);
if (onReadStation != null)
{
onReadStation(station);
}
}
/**/ else if (DataFrame != null)
{
DataFrame _dataFrame = new Packets.DataFrame(DataFrame, ArrivalDate, Channel);
_dataFrames.Add(_dataFrame);
if (onReadDataFrame != null)
{
onReadDataFrame(_dataFrame);
}
}
else if (DataDataFrame != null)
{
DataFrame _dataFrame = new Packets.DataFrame(DataDataFrame, ArrivalDate, Channel);
_dataFrames.Add(_dataFrame);
if (onReadDataFrame != null)
{
onReadDataFrame(_dataFrame);
}
}
else if (AuthRequestFrame != null)
{
_authRequestFrames.Add(new AuthRequestFrame(AuthRequestFrame, ArrivalDate));
}
else if (radioFrame != null)
{
}
}
private void device_OnPacketArrival(object sender, CaptureEventArgs e)
{
packetsProcessed++;
if (packetsProcessed == 38)
{
}
if (e.Packet.LinkLayerType == PacketDotNet.LinkLayers.Ieee80211)
{
Packet packet = PacketDotNet.Packet.ParsePacket(e.Packet.LinkLayerType, e.Packet.Data);
PacketDotNet.Ieee80211.BeaconFrame beacon = packet as PacketDotNet.Ieee80211.BeaconFrame;
PacketDotNet.Ieee80211.ProbeRequestFrame probeRequest = packet as PacketDotNet.Ieee80211.ProbeRequestFrame;
PacketDotNet.Ieee80211.QosDataFrame DataFrame = packet as PacketDotNet.Ieee80211.QosDataFrame;
PacketDotNet.Ieee80211.DeauthenticationFrame DeAuthFrame = packet as PacketDotNet.Ieee80211.DeauthenticationFrame;
PacketDotNet.Ieee80211.AssociationRequestFrame AuthFrame2 = packet as PacketDotNet.Ieee80211.AssociationRequestFrame;
PacketDotNet.Ieee80211.DataDataFrame DataDataFrame = packet as PacketDotNet.Ieee80211.DataDataFrame;
if (beacon != null)
{
BeaconFrame beaconFrame = new BeaconFrame(beacon, e.Packet.Timeval.Date);
_beacons.Add(beaconFrame);
long MacAddrNumber = MacToLong(beaconFrame.MacAddress);
//check for APs with this Mac Address
AccessPoint AP = null;
if (!_accessPoints.TryGetValue(MacAddrNumber, out AP))
{
AP = new AccessPoint(beaconFrame);
_accessPoints.Add(MacAddrNumber, AP);
}
AP.AddBeaconFrame(beaconFrame);
}
else if (probeRequest != null)
{
ProbePacket probe = new ProbePacket(probeRequest, e.Packet.Timeval.Date);
Station station = null;
long MacAddrNumber = MacToLong(probe.SourceMacAddress);
if (!_stations.TryGetValue(MacAddrNumber, out station))
{
station = new Station(probe);
_stations.Add(MacAddrNumber, station);
}
station.AddProbe(probe);
}
else if (DataFrame != null)
{
DataFrame _dataFrame = new Packets.DataFrame(DataFrame, e.Packet.Timeval.Date);
//invalid packets are useless, probably encrypted
if (_dataFrame.IsValidPacket)
{
_dataFrames.Add(_dataFrame);
}
}
else if (DataDataFrame != null)
{
}
}
}
public void ProcessPacket(Packet packet, DateTime ArrivalDate)
{
PacketDotNet.Ieee80211.BeaconFrame beacon = packet as PacketDotNet.Ieee80211.BeaconFrame;
PacketDotNet.Ieee80211.ProbeRequestFrame probeRequest = packet as PacketDotNet.Ieee80211.ProbeRequestFrame;
PacketDotNet.Ieee80211.QosDataFrame DataFrame = packet as PacketDotNet.Ieee80211.QosDataFrame;
PacketDotNet.Ieee80211.DeauthenticationFrame DeAuthFrame = packet as PacketDotNet.Ieee80211.DeauthenticationFrame;
PacketDotNet.Ieee80211.AssociationRequestFrame AuthRequestFrame = packet as PacketDotNet.Ieee80211.AssociationRequestFrame;
PacketDotNet.Ieee80211.DataDataFrame DataDataFrame = packet as PacketDotNet.Ieee80211.DataDataFrame;
if (beacon != null)
{
BeaconFrame beaconFrame = new BeaconFrame(beacon, ArrivalDate);
_beacons.Add(beaconFrame);
long MacAddrNumber = Utils.MacToLong(beaconFrame.MacAddress);
//check for APs with this Mac Address
AccessPoint AP = null;
if (!_accessPoints.TryGetValue(MacAddrNumber, out AP))
{
AP = new AccessPoint(beaconFrame);
_accessPoints.Add(MacAddrNumber, AP);
}
AP.AddBeaconFrame(beaconFrame);
if (onReadAccessPoint != null)
{
onReadAccessPoint(AP);
}
}
else if (probeRequest != null)
{
ProbePacket probe = new ProbePacket(probeRequest, ArrivalDate);
Station station = null;
long MacAddrNumber = Utils.MacToLong(probe.SourceMacAddress);
if (!_stations.TryGetValue(MacAddrNumber, out station))
{
station = new Station(probe);
_stations.Add(MacAddrNumber, station);
}
station.AddProbe(probe);
if (onReadStation != null)
{
onReadStation(station);
}
}
else if (DataFrame != null)
{
DataFrame _dataFrame = new Packets.DataFrame(DataFrame, ArrivalDate);
_dataFrames.Add(_dataFrame);
if (onReadDataFrame != null)
{
onReadDataFrame(_dataFrame);
}
}
else if (DataDataFrame != null)
{
DataFrame _dataFrame = new Packets.DataFrame(DataDataFrame, ArrivalDate);
_dataFrames.Add(_dataFrame);
if (onReadDataFrame != null)
{
onReadDataFrame(_dataFrame);
}
}
else if (AuthRequestFrame != null)
{
_authRequestFrames.Add(new AuthRequestFrame(AuthRequestFrame, ArrivalDate));
}
}
public DataFrame(PacketDotNet.Ieee80211.QosDataFrame DataFrame, DateTime TimeStamp)
: this(DataFrame, TimeStamp, 0)
{
}
