1#!/usr/local/bin/python2.7 2# send 2 non-overlapping ping fragments 3 4import os 5import threading 6from addr import * 7from scapy.all import * 8 9class Sniff1(threading.Thread): 10 filter = None 11 captured = None 12 packet = None 13 def run(self): 14 self.captured = sniff(iface=SRC_IF, filter=self.filter, 15 count=1, timeout=3) 16 if self.captured: 17 self.packet = self.captured[0] 18 19dstaddr=sys.argv[1] 20pid=os.getpid() & 0xffff 21payload="ABCDEFGHIJKLOMNO" 22packet=IP(src=SRC_OUT, dst=dstaddr)/ICMP(id=pid)/payload 23frag0=str(packet)[20:36] 24frag1=str(packet)[36:44] 25pkt0=IP(src=SRC_OUT, dst=dstaddr, proto=1, id=pid, frag=0, flags='MF')/frag0 26pkt1=IP(src=SRC_OUT, dst=dstaddr, proto=1, id=pid, frag=2)/frag1 27eth=[] 28eth.append(Ether(src=SRC_MAC, dst=PF_MAC)/pkt0) 29eth.append(Ether(src=SRC_MAC, dst=PF_MAC)/pkt1) 30 31sniffer = Sniff1(); 32sniffer.filter = "ip and src %s and dst %s and icmp" % (dstaddr, SRC_OUT) 33sniffer.start() 34sendp(eth, iface=SRC_IF) 35sniffer.join(timeout=5) 36a = sniffer.packet 37 38if a and a.type == ETH_P_IP and \ 39 a.payload.proto == 1 and \ 40 a.payload.frag == 0 and a.payload.flags == 0 and \ 41 icmptypes[a.payload.payload.type] == 'echo-reply': 42 id=a.payload.payload.id 43 print "id=%#x" % (id) 44 if id != pid: 45 print "WRONG ECHO REPLY ID" 46 exit(2) 47 load=a.payload.payload.payload.load 48 print "payload=%s" % (load) 49 if load == payload: 50 exit(0) 51 print "PAYLOAD!=%s" % (payload) 52 exit(1) 53print "NO ECHO REPLY" 54exit(2) 55