rubyipq 0.1.0-i686-linux

data/rubyipq_defs.h

@@ -0,0 +1,85 @@
+/*
+ * rubyipq v0.1.0
+ * Ruby bindings for Netfilter's libipq.
+ *
+ * Copyright (c) 2005 Leonardo Eloy
+ * Author: Leonardo Eloy <l.eloy@terra.com.br/leonardo.eloy@gmail.com>
+ * Project Homepage: http://rubyipq.rubyforge.org
+ *
+ *
+ *      This program is free software; you can redistribute it and/or modify
+ *      it under the terms of the GNU General Public License as published by
+ *      the Free Software Foundation; either version 2 of the License, or
+ *      (at your option) any later version.
+ *
+ *      This program is distributed in the hope that it will be useful,
+ *      but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *      GNU General Public License for more details.
+ *
+ *      You should have received a copy of the GNU General Public License
+ *      along with this program; if not, write to the Free Software
+ *      Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ */
+
+#include <sys/types.h>
+#include <limits.h>
+#include <net/if.h>
+#include <netinet/ip.h>
+#include <linux/netfilter_ipv4.h>
+#include <linux/tcp.h>
+#include <linux/udp.h>
+#include <linux/icmp.h>
+
+#include <linux/netfilter.h>
+#include <libipq.h>
+
+struct ipq_handle *handle;
+unsigned char *last_packet;
+ipq_packet_msg_t *last_packet_msg;
+struct iphdr *last_ip_h;
+struct tcphdr *last_tcp_h;
+struct udphdr *last_udp_h;
+struct icmphdr *last_icmp_h;
+static int rubyipq_open, buffer_size;
+
+
+/* Function declaration */
+VALUE ipheader_new(VALUE class);
+VALUE ipheader_init(VALUE class);
+VALUE ipheader_tos(VALUE class);
+VALUE ipheader_tot_len(VALUE class);
+VALUE ipheader_id(VALUE class);
+VALUE ipheader_frag_off(VALUE class);
+VALUE ipheader_ttl(VALUE class);
+VALUE ipheader_protocol(VALUE class);
+VALUE ipheader_check(VALUE class);
+VALUE ipheader_saddr(VALUE class);
+VALUE ipheader_daddr(VALUE class);
+
+VALUE tcpheader_new(VALUE class);
+VALUE tcpheader_init(VALUE class);
+VALUE tcpheader_source(VALUE class);
+VALUE tcpheader_dest(VALUE class);
+VALUE tcpheader_seq(VALUE class);
+VALUE tcpheader_ack_seq(VALUE class);
+VALUE tcpheader_window(VALUE class);
+VALUE tcpheader_check(VALUE class);
+VALUE tcpheader_get_data(VALUE class);
+
+VALUE udpheader_new(VALUE class);
+VALUE udpheader_init(VALUE class);
+VALUE udpheader_source(VALUE class);
+VALUE udpheader_dest(VALUE class);
+VALUE udpheader_len(VALUE class);
+VALUE udpheader_check(VALUE class);
+VALUE udpheader_get_data(VALUE class);
+
+char *__u32_to_str (__u32 ip);
+unsigned char *get_last_packet();
+ipq_packet_msg_t *get_last_packet_msg();
+struct iphdr *get_last_ip_h();
+struct tcphdr *get_last_tcp_h();
+struct udphdr *get_last_udp_h();
+struct udphdr *get_last_icmp_h();
+void static_cleanup();

data/rubyipq_ipheader.c

@@ -0,0 +1,73 @@
+/*
+ * rubyipq v0.1.0
+ * Ruby bindings for Netfilter's libipq.
+ *
+ * Copyright (c) 2005 Leonardo Eloy
+ * Author: Leonardo Eloy <l.eloy@terra.com.br/leonardo.eloy@gmail.com>
+ * Project Homepage: http://rubyipq.rubyforge.org
+ *
+ *
+ *      This program is free software; you can redistribute it and/or modify
+ *      it under the terms of the GNU General Public License as published by
+ *      the Free Software Foundation; either version 2 of the License, or
+ *      (at your option) any later version.
+ *
+ *      This program is distributed in the hope that it will be useful,
+ *      but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *      GNU General Public License for more details.
+ *
+ *      You should have received a copy of the GNU General Public License
+ *      along with this program; if not, write to the Free Software
+ *      Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ */
+
+#include "rubyipq.h"
+
+/* IPHeader methods */
+VALUE ipheader_new(VALUE class) {
+        last_ip_h = get_last_ip_h();
+
+        return class;
+}
+
+VALUE ipheader_init(VALUE class) {
+        return class;
+}
+
+VALUE ipheader_tos(VALUE class) {
+        return INT2NUM(get_last_ip_h()->tos);
+}
+
+VALUE ipheader_tot_len(VALUE class) {
+        return INT2NUM(get_last_ip_h()->tot_len);
+}
+
+VALUE ipheader_id(VALUE class) {
+        return INT2NUM(get_last_ip_h()->id);
+}
+
+VALUE ipheader_frag_off(VALUE class) {
+        return INT2NUM(get_last_ip_h()->frag_off);
+}
+
+VALUE ipheader_ttl(VALUE class) {
+        return INT2NUM(get_last_ip_h()->ttl);
+}
+
+VALUE ipheader_protocol(VALUE class) {
+        return INT2NUM(get_last_ip_h()->protocol);
+}
+
+VALUE ipheader_check(VALUE class) {
+        return INT2NUM(get_last_ip_h()->check);
+}
+
+VALUE ipheader_saddr(VALUE class) {
+        return rb_str_new2(__u32_to_str((__u32)get_last_ip_h()->saddr));
+}
+
+VALUE ipheader_daddr(VALUE class) {
+        return rb_str_new2(__u32_to_str((__u32)get_last_ip_h()->daddr));
+}
+

data/rubyipq_proto.h

@@ -0,0 +1,167 @@
+/*
+ * rubyipq v0.1.0
+ * Ruby bindings for Netfilter's libipq.
+ *
+ * Copyright (c) 2005 Leonardo Eloy
+ * Author: Leonardo Eloy <l.eloy@terra.com.br/leonardo.eloy@gmail.com>
+ * Project Homepage: http://rubyipq.rubyforge.org
+ *
+ *
+ *      This program is free software; you can redistribute it and/or modify
+ *      it under the terms of the GNU General Public License as published by
+ *      the Free Software Foundation; either version 2 of the License, or
+ *      (at your option) any later version.
+ *
+ *      This program is distributed in the hope that it will be useful,
+ *      but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *      GNU General Public License for more details.
+ *
+ *      You should have received a copy of the GNU General Public License
+ *      along with this program; if not, write to the Free Software
+ *      Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ */
+
+/*
+  Protocol numbers took from http://www.iana.org/assignments/protocol_numbers
+*/
+
+#define PROTO_HOPOPT    0
+#define PROTO_GGP       3
+#define PROTO_ST        5
+#define PROTO_CBT       7
+#define PROTO_EGP       8
+#define PROTO_IGP       9
+#define PROTO_BBN_RCC_MON       10
+#define PROTO_NVP_II    11
+#define PROTO_PUP       12
+#define PROTO_ARGUS     13
+#define PROTO_EMCON     14
+#define PROTO_XNET      15
+#define PROTO_CHAOS     16
+#define PROTO_MUX	18
+#define PROTO_DCN_MEAS	19
+#define PROTO_HMP	20
+#define PROTO_PRM	21
+#define PROTO_XNS_IDP	22
+#define PROTO_TRUNK_1	23
+#define PROTO_TRUNK_2	24
+#define PROTO_LEAF_1	25
+#define PROTO_LEAF_2	26
+#define PROTO_RDP	27
+#define PROTO_IRTP	28
+#define PROTO_ISO_TP4	29
+#define PROTO_NETBLT    30
+#define PROTO_MFE_NSP   31
+#define PROTO_MERIT_INP 32
+#define PROTO_DCCP      33
+#define PROTO_3PC       34
+#define PROTO_IDPR      35
+#define PROTO_XTP       36
+#define PROTO_DDP       37
+#define PROTO_IDPR_CMTP 38
+#define PROTO_TPpp      39
+#define PROTO_IL        40
+#define PROTO_IPV6      41
+#define PROTO_SDRP      42
+#define PROTO_IPV6_ROUTE        43
+#define PROTO_IPV6_FRAG 44
+#define PROTO_IDRP      45
+#define PROTO_RSVP      46
+#define PROTO_MHRP      48
+#define PROTO_BNA       49
+#define PROTO_I_NLSP    52
+#define PROTO_SWIPE     53
+#define PROTO_NARP      54
+#define PROTO_MOBILE    55
+#define PROTO_TLSP      56
+#define PROTO_SKIP      57
+#define PROTO_IPV6_ICMP 58
+#define PROTO_IPV6_NONXT        59
+#define PROTO_IPV6_OPTS 60
+#define PROTO_ANY_HOST_INTERNAL_PROTOCOL	61
+#define PROTO_CFTP      62
+#define PROTO_ANY_LOCAL_NETWORK	63
+#define PROTO_SAT_EXPAK 64
+#define PROTO_KRYPTOLAN 65
+#define PROTO_RVD       66
+#define PROTO_IPPC      67
+#define PROTO_ANY_DISTRIBUTED_FILE_SYSTEM	68
+#define PROTO_SAT_MON   69
+#define PROTO_VISA      70
+#define PROTO_IPCV      71
+#define PROTO_CPNX      72
+#define PROTO_CPHB      73
+#define PROTO_WSN       74
+#define PROTO_PVP       75
+#define PROTO_BR_SAT_MON        76
+#define PROTO_SUN_ND    77
+#define PROTO_WB_MON    78
+#define PROTO_WB_EXPAK  79
+#define PROTO_ISO_IP    80
+#define PROTO_VMTP      81
+#define PROTO_SECURE_VMTP       82
+#define PROTO_VINES     83
+#define PROTO_TTP       84
+#define PROTO_NSFNET_IGP        85
+#define PROTO_DGP       86
+#define PROTO_TCF       87
+#define PROTO_EIGRP     88
+#define PROTO_OSPFIGP   89
+#define PROTO_SPRITE_RPC        90
+#define PROTO_LARP      91
+#define PROTO_MTP       92
+#define PROTO_AX_25     93
+#define PROTO_IPIP      94
+#define PROTO_MICP      95
+#define PROTO_SCC_SP    96
+#define PROTO_ETHERIP   97
+#define PROTO_ENCAP     98
+#define PROTO_ANY_PRIVATE_ENCRYPTION_SCHEME	 99
+#define PROTO_GMTP      100
+#define PROTO_IFMP      101
+#define PROTO_PNNI      102
+#define PROTO_PIM       103
+#define PROTO_ARIS      104
+#define PROTO_SCPS      105
+#define PROTO_QNX       106
+#define PROTO_A_N       107
+#define PROTO_IPCOMP    108
+#define PROTO_SNP       109
+#define PROTO_COMPAQ_PEER       110
+#define PROTO_IPX_IN_IP 111
+#define PROTO_VRRP      112
+#define PROTO_PGM       113
+#define	PROTO_ANY_0_HOP_PROTOCOL	114
+#define PROTO_DDX       116
+#define PROTO_IATP      117
+#define PROTO_STP       118
+#define PROTO_SRP       119
+#define PROTO_UTI       120
+#define PROTO_SMP       121
+#define PROTO_SM        122
+#define PROTO_PTP       123
+#define PROTO_ISIS_OVER_IPV4      124
+#define PROTO_FIRE      125
+#define PROTO_CRTP      126
+#define PROTO_CRUDP     127
+#define PROTO_SSCOPMCE  128
+#define PROTO_IPLT      129
+#define PROTO_SPS       130
+#define PROTO_PIPE      131
+#define PROTO_SCTP      132
+#define PROTO_FC        133
+#define PROTO_RSVP_E2E_IGNORE   134
+#define PROTO_MOBILITY  135
+#define PROTO_UDPLITE   136
+#define PROTO_MPLS_IN_IP        137
+
+#define PROTO_ICMP      1
+#define PROTO_IGMP      2
+#define PROTO_IP	4
+#define PROTO_TCP       6
+#define PROTO_UDP       17
+#define PROTO_GRE	47
+#define PROTO_ESP       50
+#define PROTO_AH        51
+#define PROTO_L2TP    115

data/rubyipq_tcpheader.c

@@ -0,0 +1,69 @@
+/*
+ * rubyipq v0.1.0
+ * Ruby bindings for Netfilter's libipq.
+ *
+ * Copyright (c) 2005 Leonardo Eloy
+ * Author: Leonardo Eloy <l.eloy@terra.com.br/leonardo.eloy@gmail.com>
+ * Project Homepage: http://rubyipq.rubyforge.org
+ *
+ *
+ *      This program is free software; you can redistribute it and/or modify
+ *      it under the terms of the GNU General Public License as published by
+ *      the Free Software Foundation; either version 2 of the License, or
+ *      (at your option) any later version.
+ *
+ *      This program is distributed in the hope that it will be useful,
+ *      but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *      GNU General Public License for more details.
+ *
+ *      You should have received a copy of the GNU General Public License
+ *      along with this program; if not, write to the Free Software
+ *      Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ */
+
+#include "rubyipq.h"
+
+/* TCPHeader methods */
+VALUE tcpheader_new(VALUE class) {
+        last_tcp_h = get_last_tcp_h();
+
+        return class;
+}
+
+VALUE tcpheader_init(VALUE class) {
+        return class;
+}
+
+VALUE tcpheader_source(VALUE class) {
+        return INT2NUM(ntohs((__u16)get_last_tcp_h()->source));
+}
+VALUE tcpheader_dest(VALUE class) {
+        return INT2NUM(ntohs((__u16)get_last_tcp_h()->dest));
+}
+VALUE tcpheader_seq(VALUE class) {
+        return INT2NUM(get_last_tcp_h()->seq);
+}
+VALUE tcpheader_ack_seq(VALUE class) {
+        return INT2NUM(get_last_tcp_h()->ack_seq);
+}
+VALUE tcpheader_window(VALUE class) {
+        return INT2NUM(get_last_tcp_h()->window);
+}
+VALUE tcpheader_check(VALUE class) {
+        return INT2NUM(get_last_tcp_h()->check);
+}
+
+VALUE tcpheader_get_data(VALUE class) {
+        unsigned int len = (unsigned int)ntohs(get_last_ip_h()->tot_len) - ((get_last_ip_h()->ihl<<2) + (get_last_tcp_h()->doff<<2));
+
+        if (len) {
+                char *str;
+                str = (get_last_packet_msg()->payload + (get_last_ip_h()->ihl<<2) + (get_last_tcp_h()->doff<<2));
+
+                return rb_str_new2(str);
+        }
+
+        return Qnil;
+}
+

data/rubyipq_udpheader.c

@@ -0,0 +1,67 @@
+/*
+ * rubyipq v0.1.0
+ * Ruby bindings for Netfilter's libipq.
+ *
+ * Copyright (c) 2005 Leonardo Eloy
+ * Author: Leonardo Eloy <l.eloy@terra.com.br/leonardo.eloy@gmail.com>
+ * Project Homepage: http://rubyipq.rubyforge.org
+ *
+ *
+ *      This program is free software; you can redistribute it and/or modify
+ *      it under the terms of the GNU General Public License as published by
+ *      the Free Software Foundation; either version 2 of the License, or
+ *      (at your option) any later version.
+ *
+ *      This program is distributed in the hope that it will be useful,
+ *      but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *      GNU General Public License for more details.
+ *
+ *      You should have received a copy of the GNU General Public License
+ *      along with this program; if not, write to the Free Software
+ *      Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ */
+
+#include "rubyipq.h"
+
+/* UDP header methods */
+VALUE udpheader_new(VALUE class) {
+        last_udp_h = get_last_udp_h();
+
+        return class;
+}
+
+VALUE udpheader_init(VALUE class) {
+        return class;
+}
+
+VALUE udpheader_source(VALUE class) {
+        return INT2NUM(ntohs((__u16)get_last_udp_h()->source));
+}
+
+VALUE udpheader_dest(VALUE class) {
+        return INT2NUM(ntohs((__u16)get_last_udp_h()->dest));
+}
+
+VALUE udpheader_len(VALUE class) {
+        return INT2NUM(get_last_udp_h()->len);
+}
+
+VALUE udpheader_check(VALUE class) {
+        return INT2NUM(get_last_udp_h()->check);
+}
+
+VALUE udpheader_get_data(VALUE class) {
+        /* UDP header has always 8 bytes in size */
+
+        if ((unsigned int)ntohs(get_last_ip_h()->tot_len) - (get_last_ip_h()->ihl<<2) + 8) {
+                char *str;
+                str = (get_last_packet_msg()->payload + (get_last_ip_h()->ihl<<2) + 8);
+
+                return rb_str_new2(str);
+        }
+
+        return Qnil;
+}
+
+