mirror of
https://github.com/opnsense/src.git
synced 2026-04-22 06:39:32 -04:00
cc07e75f30
There are times when we have to wait for reply packets. There are either an ICMPv6 (error) reply or the expiration timeout. In these cases synchonous ICMPv6 replies should arrive, always, unless the packet is lost. Due to errors experienced with the test software sending an invlaid request on at least i386 (*) these packets are not generated. That means we are waiting for a long time for the replies or even timeout the test case. Manually set the "End" flag on these test cases as well, so they do fail rather than timeout as the sniffer timeout happens. This improves debugging options, reflects the error properly, and saves time on each test suit run. (*) The real cause for that is still to be found (see the referenced PRs) PR: 241493, 239380 MFC after: 2 weeks Sponsored by: Netflix
109 lines
3.3 KiB
Python
109 lines
3.3 KiB
Python
#!/usr/bin/env python
|
|
#-
|
|
# SPDX-License-Identifier: BSD-2-Clause
|
|
#
|
|
# Copyright (c) 2019 Netflix, Inc.
|
|
#
|
|
# Redistribution and use in source and binary forms, with or without
|
|
# modification, are permitted provided that the following conditions
|
|
# are met:
|
|
# 1. Redistributions of source code must retain the above copyright
|
|
# notice, this list of conditions and the following disclaimer.
|
|
# 2. Redistributions in binary form must reproduce the above copyright
|
|
# notice, this list of conditions and the following disclaimer in the
|
|
# documentation and/or other materials provided with the distribution.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
# SUCH DAMAGE.
|
|
#
|
|
# $FreeBSD$
|
|
#
|
|
|
|
import argparse
|
|
import scapy.all as sp
|
|
import socket
|
|
import sys
|
|
from sniffer import Sniffer
|
|
from time import sleep
|
|
|
|
def check_icmp6_error(args, packet):
|
|
ip6 = packet.getlayer(sp.IPv6)
|
|
if not ip6:
|
|
return False
|
|
oip6 = sp.IPv6(src=args.src[0], dst=args.to[0])
|
|
if ip6.dst != oip6.src:
|
|
return False
|
|
icmp6 = packet.getlayer(sp.ICMPv6ParamProblem)
|
|
if not icmp6:
|
|
return False
|
|
# ICMP6_PARAMPROB_HEADER 0
|
|
if icmp6.code != 0:
|
|
return False
|
|
# Should we check the payload as well?
|
|
# We are running in a very isolated environment and nothing else
|
|
# should trigger an ICMPv6 Param Prob so leave it.
|
|
#icmp6.display()
|
|
return True
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser("frag6.py",
|
|
description="IPv6 fragementation test tool")
|
|
parser.add_argument('--sendif', nargs=1,
|
|
required=True,
|
|
help='The interface through which the packet will be sent')
|
|
parser.add_argument('--recvif', nargs=1,
|
|
required=True,
|
|
help='The interface on which to check for the packet')
|
|
parser.add_argument('--src', nargs=1,
|
|
required=True,
|
|
help='The source IP address')
|
|
parser.add_argument('--to', nargs=1,
|
|
required=True,
|
|
help='The destination IP address')
|
|
parser.add_argument('--debug',
|
|
required=False, action='store_true',
|
|
help='Enable test debugging')
|
|
|
|
args = parser.parse_args()
|
|
|
|
|
|
# Start sniffing on recvif
|
|
sniffer = Sniffer(args, check_icmp6_error)
|
|
|
|
|
|
########################################################################
|
|
#
|
|
# A single start fragment with payload length not % 8.
|
|
#
|
|
# A: Error handling in code.
|
|
# R: ICMPv6 param problem.
|
|
#
|
|
data = "6" * 1287
|
|
ip6f01 = sp.Ether() / \
|
|
sp.IPv6(src=args.src[0], dst=args.to[0]) / \
|
|
sp.IPv6ExtHdrFragment(offset=0, m=1, id=5) / \
|
|
sp.UDP(dport=3456, sport=6543) / \
|
|
data
|
|
if args.debug :
|
|
ip6f01.display()
|
|
sp.sendp(ip6f01, iface=args.sendif[0], verbose=False)
|
|
|
|
sleep(0.10)
|
|
sniffer.setEnd()
|
|
sniffer.join()
|
|
if not sniffer.foundCorrectPacket:
|
|
sys.exit(1)
|
|
|
|
sys.exit(0)
|
|
|
|
if __name__ == '__main__':
|
|
main()
|