1#!/usr/local/bin/python3 2 3print("send first ping6 fragment that ends behind ipv6 max packet size") 4 5# IPV6_MAXPACKET | 6# |----| 7# |--------| 8# |----| 9 10import os 11from addr import * 12from scapy.all import * 13 14pid=os.getpid() 15eid=pid & 0xffff 16payload=b"ABCDEFGHIJKLMNOP" 17packet=IPv6(src=LOCAL_ADDR6, dst=REMOTE_ADDR6)/ \ 18 ICMPv6EchoRequest(id=eid, data=payload) 19frag=[] 20fid=pid & 0xffffffff 21frag.append(IPv6ExtHdrFragment(nh=58, id=fid, offset=8191)/bytes(packet)[56:64]) 22frag.append(IPv6ExtHdrFragment(nh=58, id=fid, m=1)/bytes(packet)[40:56]) 23frag.append(IPv6ExtHdrFragment(nh=58, id=fid, offset=2)/bytes(packet)[56:64]) 24eth=[] 25for f in frag: 26 pkt=IPv6(src=LOCAL_ADDR6, dst=REMOTE_ADDR6)/f 27 eth.append(Ether(src=LOCAL_MAC, dst=REMOTE_MAC)/pkt) 28 29if os.fork() == 0: 30 time.sleep(1) 31 sendp(eth, iface=LOCAL_IF) 32 os._exit(0) 33 34ans=sniff(iface=LOCAL_IF, timeout=3, filter= 35 "ip6 and src "+REMOTE_ADDR6+" and dst "+LOCAL_ADDR6+" and icmp6") 36for a in ans: 37 if a and a.type == ETH_P_IPV6 and \ 38 ipv6nh[a.payload.nh] == 'ICMPv6' and \ 39 icmp6types[a.payload.payload.type] == 'Echo Reply': 40 id=a.payload.payload.id 41 print("id=%#x" % (id)) 42 if id != eid: 43 print("WRONG ECHO REPLY ID") 44 exit(2) 45 data=a.payload.payload.data 46 print("payload=%s" % (data)) 47 if data == payload: 48 exit(0) 49 print("PAYLOAD!=%s" % (payload)) 50 exit(1) 51print("NO ECHO REPLY") 52exit(2) 53