1#!/usr/local/bin/python3 2# send a ping6 packet with routing header type 0 3# the address list is empty 4# hide the routing header in a second fragment to preclude header scan 5# we expect an echo reply, as there are no more hops 6 7print("send with fragment and routing header type 0 to be source routed") 8 9import os 10from addr import * 11from scapy.all import * 12 13pid=os.getpid() 14eid=pid & 0xffff 15payload=b"ABCDEFGHIJKLMNOP" 16packet=IPv6(src=LOCAL_ADDR6, dst=REMOTE_ADDR6)/\ 17 IPv6ExtHdrDestOpt()/\ 18 IPv6ExtHdrRouting(addresses=[])/\ 19 ICMPv6EchoRequest(id=eid, data=payload) 20frag=[] 21fid=pid & 0xffffffff 22frag.append(IPv6ExtHdrFragment(nh=60, id=fid, m=1)/bytes(packet)[40:48]) 23frag.append(IPv6ExtHdrFragment(nh=60, id=fid, offset=1)/bytes(packet)[48:80]) 24eth=[] 25for f in frag: 26 pkt=IPv6(src=LOCAL_ADDR6, dst=REMOTE_ADDR6)/f 27 eth.append(Ether(src=LOCAL_MAC, dst=REMOTE_MAC)/pkt) 28 29if os.fork() == 0: 30 time.sleep(1) 31 sendp(eth, iface=LOCAL_IF) 32 os._exit(0) 33 34ans=sniff(iface=LOCAL_IF, timeout=3, filter= 35 "ip6 and dst "+LOCAL_ADDR6+" and icmp6") 36for a in ans: 37 if a and a.type == ETH_P_IPV6 and \ 38 ipv6nh[a.payload.nh] == 'ICMPv6' and \ 39 icmp6types[a.payload.payload.type] == 'Echo Reply': 40 reply=a.payload.payload 41 id=reply.id 42 print("id=%#x" % (id)) 43 if id != eid: 44 print("WRONG ECHO REPLY ID") 45 exit(2) 46 data=reply.data 47 print("payload=%s" % (data)) 48 if data != payload: 49 print("WRONG PAYLOAD") 50 exit(2) 51 exit(0) 52print("NO ICMP6 ECHO REPLY") 53exit(1) 54