devbox
2023面试高手
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

09 网络ARP请求，响应，ICMP协议

作者：2023面试高手 | 2024-03-29 00:55:21

赞

踩

09 网络ARP请求，响应，ICMP协议

arp协议_arp请求_arp回应

ICMP包构造ping搜狐服务器参考

  1. #include <stdio.h>
  2. #include <sys/types.h> /* See NOTES */
  3. #include <sys/socket.h>
  4. #include <linux/if_packet.h>
  5. #include <linux/if_ether.h>
  6. #include <string.h>
  7. #include <net/if.h>
  8. #include <sys/ioctl.h>
  9. #include <pthread.h>
  10.  
  11. unsigned short in_cksum(unsigned short *addr, int len)
  12. {
  13.     unsigned int sum = 0, nleft = len;
  14.     unsigned short answer = 0;
  15.     unsigned short *w = addr;
  16.  
  17.     while (nleft > 1) {
  18.         sum += *w++;
  19.         nleft -= 2;
  20.     }
  21.     if (nleft == 1) {
  22.         *(u_char *) (&answer) = *(u_char *) w;
  23.         sum += answer;
  24.     }
  25.     sum = (sum >> 16) + (sum & 0xffff);//将高16bit与低16bit相加
  26.  
  27.     sum += (sum >> 16);//将进位到高位的16bit与低16bit 再相加
  28.     answer = (unsigned short)(~sum);
  29.     return (answer);
  30. }
  31.  
  32. unsigned char ICMPBuf[]=
  33. {
  34.     //===链路层
  35.         0x48, 0x5a, 0xea, 0x98, 0x27, 0x3c, //目标MAC为网关的MAC
  36.         0x00, 0x0c, 0x29, 0x5b, 0xe5, 0x7c, //ubuntu源MAC
  37.         0x08, 0x00,                         // ICMP协议是属于IP包
  38.     //===IP层或者说 网络层
  39.         0x45,//4代表IPV4   5代表IP头(5*4=20个字节)
  40.         0x00,//服务类型，可以反映当前主机一些状态信息，可以直接填0
  41.         0,0,//IP包的长度，也不是整个包字节-链路层14个字节？
  42.         0x00,0x00,0x40,0x00,//数据包标示编号设置为0,数据包不支持分片功能
  43.         64,//默认TTL time to live 64最多可以过64个路由器
  44.         1,//ICMP协议
  45.         0,0,//IP包头的20个字节校验和
  46.         192,168,1,11,//源IP,发送方ubuntu的IP
  47.         47,91,20,194,//目标IP,搜狐服务器IP
  48.  
  49.        //ICMP请求内容
  50.         0x08,0x00,//为ICMP请求包,如果是0x00,0x00，是回应
  51.         0x00,0x00,//ICMP报文校验
  52.         0,0,//通常填大端的getpid()，也可以填默认0 
  53.         0x00,0x2b,//发送的包编号 43,可以随意填，回应包编号和发送包一样
  54.  
  55.         // 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 时间戳 8个字节可加也可不加
  56.                                     
  57.         '1','2','3','4','5',//数据内容可以任意
  58.         'h','e','l','l','o'        
  59.        };
  60.  
  61.  
  62.  
  63.  
  64.  
  65. 192.168.18.10
  66.  
  67. 192.168.59
  68.  
  69. 192.168.18.10
  70. 192.168.18+100.10
  71.  
  72.  
  73.  
  74.  
  75.  
  76.  
  77. void *myfun(void *arg)
  78. {
  79.     int sockfd = (int)arg;
  80.     unsigned char recvbuf[100] = {0};
  81.     while (1)
  82.     {
  83.         int recvlen = recvfrom(sockfd, recvbuf, sizeof(recvbuf), 0, NULL, NULL);
  84.         if ((recvbuf[12] == 0x08) && (recvbuf[13] == 0x00))
  85.         {//IP包
  86.  
  87.             if (recvbuf[23] == 0x01)
  88.             {//ICMP协议
  89.                
  90.                if((recvbuf[34] == 0x00)&&(recvbuf[35] == 0x00))
  91.                {//回应
  92.  
  93.                    printf("hjs收到搜狐网服务器ICMP回应包:TTL=%d,经过%d个路由器\n",recvbuf[22],64-recvbuf[22]);
  94.                    
  95.                }
  96.               
  97.             }
  98.         }
  99.    
  100.     }
  101.  
  102.     retursn NULL;
  103. }
  104. int main()
  105. {
  106.     unsigned char data[]={0x45,0x00,0x00,0x54,0x00,0x00,0x40,0x00,0x40,0x01,\
  107.                     0,0,0xc0,0xa8,0x01,0x0b,0x2f,0x5b,0x14,0xc2};
  108.     printf("%#x\n",htons(in_cksum(data,20)));
  109.     //设置包编识
  110.      unsigned short mypid=getpid();
  111.    // *(unsigned short *)(ICMPBuf+38)=htons(mypid);
  112.  
  113.     //填入IP包长度
  114.     *(unsigned short *)(ICMPBuf+16)=htons(sizeof(ICMPBuf)-14);
  115.     //IP包头校验
  116.     *(unsigned short *)(ICMPBuf+24)=in_cksum(ICMPBuf+14,20);//htons(in_cksum(ICMPBuf+14,20));
  117.     //ICMP部分校验
  118.     unsigned short icmplen=sizeof(ICMPBuf)-34;
  119.     *(unsigned short *)(ICMPBuf+36)=in_cksum(ICMPBuf+34,sizeof(ICMPBuf)-34);//htons(in_cksum(ICMPBuf+34,sizeof(ICMPBuf)-34));
  120.     
  121.     
  122.      int myfd = socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
  123.  
  124.     struct sockaddr_ll mysocket;
  125.     struct ifreq ethreq;
  126.  
  127.     strcpy(ethreq.ifr_ifrn.ifrn_name, "eth0");
  128.     ioctl(myfd, SIOCGIFINDEX, &ethreq);
  129.     memset(&mysocket, 0, sizeof(mysocket));
  130.  
  131.     mysocket.sll_ifindex = ethreq.ifr_ifru.ifru_ivalue; //网卡信息的首地址
  132.  
  133.     pthread_t thread;
  134.     pthread_create(&thread, NULL, myfun,(void *)myfd);
  135.     pthread_detach(thread);
  136.     printf("myfd=%d\n", myfd);
  137.     
  138.     int var = sendto(myfd, ICMPBuf, sizeof(ICMPBuf), 0, (struct sockaddr *)&mysocket, sizeof(mysocket));
  139.  
  140.     sleep(2);
  141.     close(myfd);
  142. }

icmp协议_请求和回应 (1)

扫描局域网主机MAC和IP参考

  1. #include <stdio.h>
  2. #include <sys/types.h> /* See NOTES */
  3. #include <sys/socket.h>
  4. #include <linux/if_packet.h>
  5. #include <linux/if_ether.h>
  6. #include <string.h>
  7. #include <net/if.h>
  8. #include <sys/ioctl.h>
  9. #include <pthread.h>
  10.  
  11. unsigned char ArpBuf[] =
  12.     {
  13.         0xFF, 0XFF, 0XFF, 0XFF, 0xFF, 0XFF, //目标MAC，广播
  14.         0x00, 0x0c, 0x29, 0x5b, 0xe5, 0x7c, //源MAC，当前主机ARP请求包发出网卡的MAC
  15.         0x08, 0x06,                         // ARP包
  16.         0x00, 0x01,                         //以太网类型
  17.         0x08, 0x00,                         // IPv4
  18.         0x06,                               //硬件地址MAC 为6个字节
  19.         0x04,                               //网络地址 IP 为4个字节
  20.         0x00, 0x01,                         // arp 请求
  21.         0x00, 0x0c, 0x29, 0x5b, 0xe5, 0x7c, //发送方MAC
  22.         0xc0, 0xa8, 0x01, 0x0b,             //发送方IP 192.168.1.11
  23.         0x00, 0x00, 0x00, 0x00, 0x00, 0x00, //目标MAC                               
  24.         192, 168, 1, 0};//最后一个字节待定
  25.  
  26. void *myfun(void *arg)
  27. {
  28.     int sockfd = (int)arg;
  29.     unsigned char recvbuf[100] = {0};
  30.     while (1)
  31.     {
  32.         int recvlen = recvfrom(sockfd, recvbuf, sizeof(recvbuf), 0, NULL, NULL);
  33.         if ((recvbuf[12] == 0x08) && (recvbuf[13] == 0x06))
  34.         {//ARP 包
  35.  
  36.             if ((recvbuf[20] == 0x00) && (recvbuf[21] == 0x02))
  37.             {//ARP 回应
  38.                
  39.                 printf("MAC: %02x:%02x:%02x:%02x:%02x:%02x===>",
  40.                        recvbuf[22], recvbuf[23], recvbuf[24], recvbuf[25], recvbuf[26], recvbuf[27]);
  41.                 printf("IP: %d.%d.%d.%d\n",\
  42.                        recvbuf[28], recvbuf[29], recvbuf[30], recvbuf[31]);
  43.               
  44.             }
  45.         }
  46.        // printf("recvlen=%d\n", recvlen);
  47.     }
  48.  
  49.     retursn NULL;
  50. }
  51. int main()
  52. {
  53.     int myfd = socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL));//创建一个原始套接字
  54.  
  55.     struct sockaddr_ll mysocket;
  56.     struct ifreq ethreq;
  57.  
  58.     strcpy(ethreq.ifr_ifrn.ifrn_name, "eth0");//设置属性，等下sendto就从 eth0网卡发送出去数据包
  59.     ioctl(myfd, SIOCGIFINDEX, &ethreq);
  60.     memset(&mysocket, 0, sizeof(mysocket));
  61.  
  62.     mysocket.sll_ifindex = ethreq.ifr_ifru.ifru_ivalue; //网卡信息的首地址
  63.  
  64.     pthread_t thread;
  65.     pthread_create(&thread, NULL, myfun,(void *)myfd);
  66.     pthread_detach(thread);
  67.     printf("myfd=%d\n", myfd);
  68.     int cnt=1;
  69.     while(cnt < 255)
  70.     {
  71.         
  72.         ArpBuf[41]=cnt;   
  73.         int var = sendto(myfd, ArpBuf, sizeof(ArpBuf), 0, (struct sockaddr *)&mysocket, sizeof(mysocket));
  74.         cnt++;
  75.     }
  76.     sleep(2);
  77.     close(myfd);
  78. }

原始套接字构造ARP请求包获取网关的MAC

  1. //使用原始套接字，拿到当前局域网内，所有主机的IP和MAC
  2. // #include <stdio.h>
  3. // #include <sys/types.h> /* See NOTES */
  4. // #include <sys/socket.h>
  5.  
  6. // #include <linux/if_ether.h> //ETH_P_ALL
  7. // #include <net/if.h>
  8. // #include <sys/ioctl.h>
  9.  
  10. // #include <linux/if_packet.h> //struct sockaddr_ll
  11. // #include<string.h>
  12. // #include<stdlib.h>
  13. #include <stdio.h>
  14. #include <sys/types.h> /* See NOTES */
  15. #include <sys/socket.h>
  16. #include <linux/if_packet.h>
  17. #include <linux/if_ether.h>
  18. #include <string.h>
  19. #include <net/if.h>
  20. #include <sys/ioctl.h>
  21.  
  22. // unsigned char ArpBuf[] = {
  23. //     0xFF, 0XFF, 0XFF, 0XFF, 0XFF, 0XFF, //目标MAC，ARP广播地址
  24. //     0x00, 0x0c, 0x29, 0x5b, 0xe5, 0x7c,       //源MAC，虚拟机ubuntu的MAC
  25. //     0x08, 0x06,                               //是ARP包
  26. //     0x00, 0x01,                               //是以太网类型帧
  27. //     0x08, 0x00,                               //是IPV4协议
  28. //     0x06,                                     //硬件地址MAC是6个字节
  29. //     0x04,                                     //网络地址IP是4个字节
  30. //     0x00, 0x01,                               //这是一个ARP请求包
  31. //     0x00, 0x0c, 0x29, 0x5b, 0xe5, 0x7c,       //源MAC
  32. //     192, 168, 1, 11,                          //源IP
  33. //     0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
  34. //     192, 168, 1, 1 //目标的IP
  35. // };                 //其实一个ARP包是48个字节
  36. // // 17  9   7  8  1
  37.  
  38. unsigned char ArpBuf[] =
  39.     {
  40.         0xFF, 0XFF, 0XFF, 0XFF, 0xFF, 0XFF, //目标MAC
  41.         0x00, 0x0c, 0x29, 0x5b, 0xe5, 0x7c, //源MAC
  42.         0x08, 0x06,                         // ARP包
  43.         0x00, 0x01,                         //以太网类型
  44.         0x08, 0x00,                         // IPv4
  45.         0x06,                               //硬件地址MAC 为6个字节
  46.         0x04,                               //网络地址 IP 为4个字节
  47.         0x00, 0x01,                         // arp 请求
  48.         0x00, 0x0c, 0x29, 0x5b, 0xe5, 0x7c, //发送方MAC
  49.         0xc0, 0xa8, 0x01, 0x0b,             //发送方IP 192.168.1.11
  50.         0x00, 0x00, 0x00, 0x00, 0x00, 0x00, //目标MAC
  51.                                             // 0xc0,0xa8,0x01,0x09  //目标IP
  52.         192, 168, 1, 1};
  53.  
  54. int main()
  55. {
  56.     // 192.168.1.0 组网，主机IP 192.168.1.1~192.168.1.254
  57.     //手动构造192.168.1.1~192.168.1.254  的ARP请求包，在子网发送，拿到所有的
  58.     // ARP回应包。回应包 IP和MAC提取出来打印出来。
  59.     //经过扫描就可以拿到当前局域里所有的主机IP和MAC
  60.  
  61.     //创建原始套接字，补充协议需要主机字节序转网络字节序
  62.  
  63.     // int myfd = socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
  64.  
  65.     // //指定从哪一个网卡发送出去？
  66.     // //要获取一个个网卡 eth0
  67.  
  68.     // struct ifreq myeth;
  69.     // memset(&myeth,0,sizeof(myeth));
  70.     // strcpy(myeth.ifr_ifrn.ifrn_name, "eth0"); //填入网卡名字
  71.     // ioctl(myfd, SIOCGIFINDEX, &myeth);        //获取网卡名为 eth0的信息，并填入到myeth
  72.  
  73.     // struct sockaddr_ll sll;
  74.     // bzero(&sll,sizeof(sll));
  75.     // sll.sll_ifindex = myeth.ifr_ifru.ifru_ivalue; //网卡信息的首地址
  76.  
  77.     // int ret = sendto(myfd, ArpBuf, sizeof(ArpBuf), 0, (struct sockaddr *)&sll, sizeof(struct sockaddr)); //把ARP封包发送出去
  78.     int myfd = socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
  79.  
  80.     struct sockaddr_ll mysocket;
  81.     struct ifreq ethreq;
  82.  
  83.     // IFNAMSIZ
  84.     // # define ifr_name	ifr_ifrn.ifrn_name
  85.     // strcpy(ethreq.ifr_name,"eth0");仅仅是一个宏定义
  86.     strcpy(ethreq.ifr_ifrn.ifrn_name, "eth0");
  87.     ioctl(myfd, SIOCGIFINDEX, &ethreq);
  88.     memset(&mysocket, 0, sizeof(mysocket));
  89.  
  90.     mysocket.sll_ifindex = ethreq.ifr_ifru.ifru_ivalue; //网卡信息的首地址
  91.  
  92.     int var = sendto(myfd, ArpBuf, sizeof(ArpBuf), 0, (struct sockaddr *)&mysocket, sizeof(mysocket));
  93.  
  94.     printf("myfd=%d,ret=%d\n", myfd, var);
  95.  
  96.     unsigned char recvbuf[100] = {0};
  97.     int recvlen = recvfrom(myfd, recvbuf, sizeof(recvbuf), 0, NULL, NULL);
  98.     printf("recvlen=%d\n", recvlen);
  99.     int i = 0;
  100.     recvlen = 42;
  101.     while (i < recvlen)
  102.     {
  103.         if ((i % 10 == 0) && (i != 0))
  104.         { //一行如果有10个字节，就换行打印
  105.             printf("\n");
  106.         }
  107.         printf("%x ", recvbuf[i]);
  108.         i++;
  109.     }
  110.     if ((recvbuf[12] == 0x08) && (recvbuf[13] == 0x06))
  111.     {
  112.         printf("这是ARP包!!\n");
  113.         if ((recvbuf[20] == 0x00) && (recvbuf[21] == 0x02))
  114.         {
  115.             printf("这是回应包!!\n");
  116.             printf("网关的MAC:  %02x:%02x:%02x:%02x:%02x:%02x\n",\
  117.                    recvbuf[6], recvbuf[7], recvbuf[8], recvbuf[9], recvbuf[10], recvbuf[11]);
  118.         }
  119.     }
  120.  
  121.     close(myfd);
  122. }

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/2023面试高手/article/detail/332650
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号