1#!/usr/local/bin/python2.7
2# send ping6 fragments containig destination option extension header
3# and the same as atomic fragments with missing protocol header
4
5# |-IP-|-Frag-|-ExtDest-|-ICMP6-|-pay|
6# |-- atomic fragment --|
7#                                    |load-|
8
9import os
10from addr import *
11from scapy.all import *
12
13pid=os.getpid()
14payload="ABCDEFGHIJKLOMNO"
15packet=IPv6(src=SRC_OUT6, dst=DST_IN6)/IPv6ExtHdrDestOpt()/ \
16    ICMPv6EchoRequest(id=pid, data=payload)
17frag=[]
18frag.append(IPv6ExtHdrFragment(nh=60, id=pid, m=1)/str(packet)[40:64])
19frag.append(IPv6ExtHdrFragment(nh=60, id=pid)/str(packet)[40:48])
20frag.append(IPv6ExtHdrFragment(nh=60, id=pid, offset=3)/str(packet)[64:72])
21eth=[]
22for f in frag:
23	pkt=IPv6(src=SRC_OUT6, dst=DST_IN6)/f
24	eth.append(Ether(src=SRC_MAC, dst=DST_MAC)/pkt)
25
26if os.fork() == 0:
27	time.sleep(1)
28	sendp(eth, iface=SRC_IF)
29	os._exit(0)
30
31ans=sniff(iface=SRC_IF, timeout=3, filter=
32    "ip6 and src "+DST_IN6+" and dst "+SRC_OUT6+" and icmp6")
33for a in ans:
34	if a and a.type == scapy.layers.dot11.ETHER_TYPES.IPv6 and \
35	    ipv6nh[a.payload.nh] == 'ICMPv6' and \
36	    icmp6types[a.payload.payload.type] == 'Echo Reply':
37		id=a.payload.payload.id
38		print "id=%#x" % (id)
39		if id != pid:
40			print "WRONG ECHO REPLY ID"
41			exit(2)
42		data=a.payload.payload.data
43		print "payload=%s" % (data)
44		if data == payload:
45			exit(0)
46		print "PAYLOAD!=%s" % (payload)
47		exit(2)
48print "NO ECHO REPLY"
49exit(1)
50