src/icmp/Icmp6.cc

   1 /*
   2  * DEBUG: section 42    ICMP Pinger program
   3  * AUTHOR: Duane Wessels, Amos Jeffries
   4  *
   5  * SQUID Web Proxy Cache          http://www.squid-cache.org/
   6  * ----------------------------------------------------------
   7  *
   8  *  Squid is the result of efforts by numerous individuals from
   9  *  the Internet community; see the CONTRIBUTORS file for full
  10  *  details.   Many organizations have provided support for Squid's
  11  *  development; see the SPONSORS file for full details.  Squid is
  12  *  Copyrighted (C) 2001 by the Regents of the University of
  13  *  California; see the COPYRIGHT file for full details.  Squid
  14  *  incorporates software developed and/or copyrighted by other
  15  *  sources; see the CREDITS file for full details.
  16  *
  17  *  This program is free software; you can redistribute it and/or modify
  18  *  it under the terms of the GNU General Public License as published by
  19  *  the Free Software Foundation; either version 2 of the License, or
  20  *  (at your option) any later version.
  21  *
  22  *  This program is distributed in the hope that it will be useful,
  23  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  24  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  25  *  GNU General Public License for more details.
  26  *
  27  *  You should have received a copy of the GNU General Public License
  28  *  along with this program; if not, write to the Free Software
  29  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
  30  *
  31  */
  32 //#define SQUID_HELPER 1
  33
  34 #include "squid.h"
  35
  36 #if USE_ICMP
  37
  38 #include "leakcheck.h"
  39 #include "SquidTime.h"
  40 #include "Debug.h"
  41 #include "Icmp6.h"
  42 #include "IcmpPinger.h"
  43
  44 // Some system headers are only neeed internally here.
  45 // They should not be included via the header.
  46
  47 #if HAVE_NETINET_IP6_H
  48 #include <netinet/ip6.h>
  49 #endif
  50
  51 // Icmp6 OP-Codes
  52 // see http://www.iana.org/assignments/icmpv6-parameters
  53 // NP: LowPktStr is for codes 0-127
  54 static const char *icmp6LowPktStr[] = {
  55     "ICMP 0",                   // 0
  56     "Destination Unreachable",  // 1 - RFC2463
  57     "Packet Too Big",           // 2 - RFC2463
  58     "Time Exceeded",            // 3 - RFC2463
  59     "Parameter Problem",                // 4 - RFC2463
  60     "ICMP 5",                   // 5
  61     "ICMP 6",                   // 6
  62     "ICMP 7",                   // 7
  63     "ICMP 8",                   // 8
  64     "ICMP 9",                   // 9
  65     "ICMP 10"                   // 10
  66 };
  67
  68 // NP: HighPktStr is for codes 128-255
  69 static const char *icmp6HighPktStr[] = {
  70     "Echo Request",                                     // 128 - RFC2463
  71     "Echo Reply",                                       // 129 - RFC2463
  72     "Multicast Listener Query",                 // 130 - RFC2710
  73     "Multicast Listener Report",                        // 131 - RFC2710
  74     "Multicast Listener Done",                  // 132 - RFC2710
  75     "Router Solicitation",                              // 133 - RFC4861
  76     "Router Advertisement",                             // 134 - RFC4861
  77     "Neighbor Solicitation",                    // 135 - RFC4861
  78     "Neighbor Advertisement",                   // 136 - RFC4861
  79     "Redirect Message",                         // 137 - RFC4861
  80     "Router Renumbering",                               // 138 - Crawford
  81     "ICMP Node Information Query",                      // 139 - RFC4620
  82     "ICMP Node Information Response",           // 140 - RFC4620
  83     "Inverse Neighbor Discovery Solicitation",  // 141 - RFC3122
  84     "Inverse Neighbor Discovery Advertisement", // 142 - RFC3122
  85     "Version 2 Multicast Listener Report",              // 143 - RFC3810
  86     "Home Agent Address Discovery Request",             // 144 - RFC3775
  87     "Home Agent Address Discovery Reply",               // 145 - RFC3775
  88     "Mobile Prefix Solicitation",                       // 146 - RFC3775
  89     "Mobile Prefix Advertisement",                      // 147 - RFC3775
  90     "Certification Path Solicitation",          // 148 - RFC3971
  91     "Certification Path Advertisement",         // 149 - RFC3971
  92     "ICMP Experimental (150)",                  // 150 - RFC4065
  93     "Multicast Router Advertisement",           // 151 - RFC4286
  94     "Multicast Router Solicitation",            // 152 - RFC4286
  95     "Multicast Router Termination",                     // 153 - [RFC4286]
  96     "ICMP 154",
  97     "ICMP 155",
  98     "ICMP 156",
  99     "ICMP 157",
 100     "ICMP 158",
 101     "ICMP 159",
 102     "ICMP 160"
 103 };
 104
 105 Icmp6::Icmp6() : Icmp()
 106 {
 107     ; // nothing new.
 108 }
 109
 110 Icmp6::~Icmp6()
 111 {
 112     Close();
 113 }
 114
 115 int
 116 Icmp6::Open(void)
 117 {
 118     icmp_sock = socket(PF_INET6, SOCK_RAW, IPPROTO_ICMPV6);
 119
 120     if (icmp_sock < 0) {
 121         debugs(50, DBG_CRITICAL, HERE << " icmp_sock: " << xstrerror());
 122         return -1;
 123     }
 124
 125     icmp_ident = getpid() & 0xffff;
 126     debugs(42, DBG_IMPORTANT, "pinger: ICMPv6 socket opened");
 127
 128     return icmp_sock;
 129 }
 130
 131 /**
 132  * Generates an RFC 4443 Icmp6 ECHO Packet and sends into the network.
 133  */
 134 void
 135 Icmp6::SendEcho(Ip::Address &to, int opcode, const char *payload, int len)
 136 {
 137     int x;
 138     LOCAL_ARRAY(char, pkt, MAX_PKT6_SZ);
 139     struct icmp6_hdr *icmp = NULL;
 140     icmpEchoData *echo = NULL;
 141     struct addrinfo *S = NULL;
 142     size_t icmp6_pktsize = 0;
 143
 144     memset(pkt, '\0', MAX_PKT6_SZ);
 145     icmp = (struct icmp6_hdr *)pkt;
 146
 147     /*
 148      * cevans - beware signed/unsigned issues in untrusted data from
 149      * the network!!
 150      */
 151     if (len < 0) {
 152         len = 0;
 153     }
 154
 155     // Construct Icmp6 ECHO header
 156     icmp->icmp6_type = ICMP6_ECHO_REQUEST;
 157     icmp->icmp6_code = 0;
 158     icmp->icmp6_cksum = 0;
 159     icmp->icmp6_id = icmp_ident;
 160     icmp->icmp6_seq = (unsigned short) icmp_pkts_sent;
 161     ++icmp_pkts_sent;
 162
 163     icmp6_pktsize = sizeof(struct icmp6_hdr);
 164
 165     // Fill Icmp6 ECHO data content
 166     echo = (icmpEchoData *) (pkt + sizeof(icmp6_hdr));
 167     echo->opcode = (unsigned char) opcode;
 168     memcpy(&echo->tv, &current_time, sizeof(struct timeval));
 169
 170     icmp6_pktsize += sizeof(struct timeval) + sizeof(char);
 171
 172     if (payload) {
 173         if (len > MAX_PAYLOAD)
 174             len = MAX_PAYLOAD;
 175
 176         memcpy(echo->payload, payload, len);
 177
 178         icmp6_pktsize += len;
 179     }
 180
 181     icmp->icmp6_cksum = CheckSum((unsigned short *) icmp, icmp6_pktsize);
 182
 183     to.GetAddrInfo(S);
 184     ((sockaddr_in6*)S->ai_addr)->sin6_port = 0;
 185
 186     assert(icmp6_pktsize <= MAX_PKT6_SZ);
 187
 188     debugs(42, 5, HERE << "Send Icmp6 packet to " << to << ".");
 189
 190     x = sendto(icmp_sock,
 191                (const void *) pkt,
 192                icmp6_pktsize,
 193                0,
 194                S->ai_addr,
 195                S->ai_addrlen);
 196
 197     if (x < 0) {
 198         debugs(42, DBG_IMPORTANT, HERE << "Error sending to ICMPv6 packet to " << to << ". ERR: " << xstrerror());
 199     }
 200     debugs(42,9, HERE << "x=" << x);
 201
 202     Log(to, 0, NULL, 0, 0);
 203 }
 204
 205 /**
 206  * Reads an RFC 4443 Icmp6 ECHO-REPLY Packet from the network.
 207  */
 208 void
 209 Icmp6::Recv(void)
 210 {
 211     int n;
 212     struct addrinfo *from = NULL;
 213 //    struct ip6_hdr *ip = NULL;
 214     static char *pkt = NULL;
 215     struct icmp6_hdr *icmp6header = NULL;
 216     icmpEchoData *echo = NULL;
 217     struct timeval now;
 218     static pingerReplyData preply;
 219
 220     if (icmp_sock < 0) {
 221         debugs(42, DBG_CRITICAL, HERE << "dropping ICMPv6 read. No socket!?");
 222         return;
 223     }
 224
 225     if (pkt == NULL) {
 226         pkt = (char *)xmalloc(MAX_PKT6_SZ);
 227     }
 228
 229     preply.from.InitAddrInfo(from);
 230
 231     n = recvfrom(icmp_sock,
 232                  (void *)pkt,
 233                  MAX_PKT6_SZ,
 234                  0,
 235                  from->ai_addr,
 236                  &from->ai_addrlen);
 237
 238     preply.from = *from;
 239
 240 #if GETTIMEOFDAY_NO_TZP
 241
 242     gettimeofday(&now);
 243
 244 #else
 245
 246     gettimeofday(&now, NULL);
 247
 248 #endif
 249
 250     debugs(42, 8, HERE << n << " bytes from " << preply.from);
 251
 252 // FIXME INET6 : The IPv6 Header (ip6_hdr) is not availble directly >:-(
 253 //
 254 // TTL still has to come from the IP header somewhere.
 255 //      still need to strip and process it properly.
 256 //      probably have to rely on RTT as given by timestamp in data sent and current.
 257     /* IPv6 Header Structures (linux)
 258     struct ip6_hdr
 259
 260     // fields (via simple define)
 261     #define ip6_vfc             // N.A
 262     #define ip6_flow    // N/A
 263     #define ip6_plen    // payload length.
 264     #define ip6_nxt             // expect to be type 0x3a - ICMPv6
 265     #define ip6_hlim    // MAX hops  (always 64, but no guarantee)
 266     #define ip6_hops    // HOPS!!!  (can it be true??)
 267
 268         ip = (struct ip6_hdr *) pkt;
 269         pkt += sizeof(ip6_hdr);
 270
 271     debugs(42, DBG_CRITICAL, HERE << "ip6_nxt=" << ip->ip6_nxt <<
 272                 ", ip6_plen=" << ip->ip6_plen <<
 273                 ", ip6_hlim=" << ip->ip6_hlim <<
 274                 ", ip6_hops=" << ip->ip6_hops   <<
 275                 " ::: 40 == sizef(ip6_hdr) == " << sizeof(ip6_hdr)
 276     );
 277     */
 278
 279     icmp6header = (struct icmp6_hdr *) pkt;
 280     pkt += sizeof(icmp6_hdr);
 281
 282     if (icmp6header->icmp6_type != ICMP6_ECHO_REPLY) {
 283
 284         switch (icmp6header->icmp6_type) {
 285         case 134:
 286         case 135:
 287         case 136:
 288             /* ignore Router/Neighbour Advertisements */
 289             break;
 290
 291         default:
 292             debugs(42, 8, HERE << preply.from << " said: " << icmp6header->icmp6_type << "/" << (int)icmp6header->icmp6_code << " " <<
 293                    ( icmp6header->icmp6_type&0x80 ? icmp6HighPktStr[(int)(icmp6header->icmp6_type&0x7f)] : icmp6LowPktStr[(int)(icmp6header->icmp6_type&0x7f)] )
 294                   );
 295         }
 296         return;
 297     }
 298
 299     if (icmp6header->icmp6_id != icmp_ident) {
 300         debugs(42, 8, HERE << "dropping Icmp6 read. IDENT check failed. ident=='" << icmp_ident << "'=='" << icmp6header->icmp6_id << "'");
 301         return;
 302     }
 303
 304     echo = (icmpEchoData *) pkt;
 305
 306     preply.opcode = echo->opcode;
 307
 308     struct timeval tv;
 309     memcpy(&tv, &echo->tv, sizeof(struct timeval));
 310     preply.rtt = tvSubMsec(tv, now);
 311
 312     /*
 313      * FIXME INET6: Without access to the IPv6-Hops header we must rely on the total RTT
 314      *      and could caculate the hops from that, but it produces some weird value mappings using ipHops
 315      *  for now everything is 1 v6 hop away with variant RTT
 316      * WANT:    preply.hops = ip->ip6_hops; // ipHops(ip->ip_hops);
 317      */
 318     preply.hops = 1;
 319
 320     preply.psize = n - /* sizeof(ip6_hdr) - */ sizeof(icmp6_hdr) - (sizeof(icmpEchoData) - MAX_PKT6_SZ);
 321
 322     /* Ensure the response packet has safe payload size */
 323     if ( preply.psize > (unsigned short) MAX_PKT6_SZ) {
 324         preply.psize = MAX_PKT6_SZ;
 325     } else if ( preply.psize < (unsigned short)0) {
 326         preply.psize = 0;
 327     }
 328
 329     Log(preply.from,
 330         icmp6header->icmp6_type,
 331         ( icmp6header->icmp6_type&0x80 ? icmp6HighPktStr[(int)(icmp6header->icmp6_type&0x7f)] : icmp6LowPktStr[(int)(icmp6header->icmp6_type&0x7f)] ),
 332         preply.rtt,
 333         preply.hops);
 334
 335     /* send results of the lookup back to squid.*/
 336     control.SendResult(preply, (sizeof(pingerReplyData) - PINGER_PAYLOAD_SZ + preply.psize) );
 337 }
 338
 339 #endif /* USE_ICMP */