tcp.go

package packemon

import (
	"bytes"
	"context"
	"encoding/binary"

	"golang.org/x/sys/unix"
)

const (
	TCP_FLAGS_SYN         = 0x02
	TCP_FLAGS_SYN_ACK     = 0x12
	TCP_FLAGS_ACK         = 0x10
	TCP_FLAGS_FIN_ACK     = 0x11
	TCP_FLAGS_PSH_ACK     = 0x18 // データを上位層へ渡してという信号
	TCP_FLAGS_FIN_PSH_ACK = 0x19
)

type TCP struct {
	SrcPort        uint16
	DstPort        uint16
	Sequence       uint32
	Acknowledgment uint32

	// Data Offset (DOffset)(4bit. TCPヘッダ長. 32bit整数倍) と Reserved (Rsrvd)(4bit. すべて0)
	// ref: https://www.rfc-editor.org/rfc/rfc9293.html#section-3.1
	HeaderLength uint8

	// Control bits(8bit)
	// ref: https://www.rfc-editor.org/rfc/rfc9293.html#section-3.1-6.14.1
	Flags uint8

	Window        uint16
	Checksum      uint16
	UrgentPointer uint16
	Options       []byte // optionsをセットする用の関数あった方がいいかも？

	Data []byte
}

func ParsedTCP(payload []byte) *TCP {
	tcp := &TCP{
		SrcPort:        binary.BigEndian.Uint16(payload[0:2]),
		DstPort:        binary.BigEndian.Uint16(payload[2:4]),
		Sequence:       binary.BigEndian.Uint32(payload[4:8]),
		Acknowledgment: binary.BigEndian.Uint32(payload[8:12]),
		HeaderLength:   payload[12] & 0b11110000,
		Flags:          payload[13],
		Window:         binary.BigEndian.Uint16(payload[14:16]),
		Checksum:       binary.BigEndian.Uint16(payload[16:18]),
		UrgentPointer:  binary.BigEndian.Uint16(payload[18:20]),
	}

	// Wiresharkとpackemonのパケット詳細見比べるに、
	// ( tcpヘッダーのheader lengthを10進数に変換した値 / 4 ) - 20 = options のbyte数 になるよう
	// optionLength := tcp.HeaderLength>>2 - 20
	// if optionLength > 0 {
	// 	tcp.Options = payload[20 : optionLength+20]
	// }
	// tcp.Data = payload[optionLength+20:]

	tcp.Data = payload[20:]
	return tcp
}

func newTCP(flags uint8, srcPort, dstPort uint16, sequence, acknowledgment uint32, data []byte) *TCP {
	return &TCP{
		SrcPort:        srcPort,
		DstPort:        dstPort,
		Sequence:       sequence,
		Acknowledgment: acknowledgment,
		HeaderLength:   0x0050,
		Flags:          flags,
		Window:         0xfaf0,
		Checksum:       0x0000,
		UrgentPointer:  0x0000,
		// Options:        Options(),

		Data: data,
	}
}

// tcpパケット単発で連続で送るときは port/sequence 変えること
func NewTCPSyn(srcPort, dstPort uint16) *TCP {
	return newTCP(0x02 /** syn **/, srcPort, dstPort, 0x091f58f9, 0x00000000, nil)
}

// tcpパケット連続で送るときは port 変えること
func NewTCPAck(srcPort, dstPort uint16, prevSequence uint32, prevAcknowledgment uint32) *TCP {
	return newTCP(0x10 /** ack **/, srcPort, dstPort, prevAcknowledgment, prevSequence+0x00000001, nil)
}

// tcpパケット連続で送るときは port 変えること
func NewTCPAckForPassiveData(srcPort, dstPort uint16, prevSequence uint32, prevAcknowledgment uint32, tcpPayloadLength int) *TCP {
	return newTCP(0x10 /** ack **/, srcPort, dstPort, prevAcknowledgment, prevSequence+uint32(tcpPayloadLength), nil)
}

// tcpパケット連続で送るときは port 変えること
func NewTCPWithData(srcPort, dstPort uint16, data []byte, prevSequence uint32, prevAcknowledgment uint32) *TCP {
	return newTCP(0x18 /** push/ack **/, srcPort, dstPort, prevSequence, prevAcknowledgment, data)
}

// tcpパケット連続で送るときは port 変えること
func NewTCPFinAck(srcPort, dstPort uint16, prevSequence uint32, prevAcknowledgment uint32) *TCP {
	return newTCP(0x11 /** fin/ack **/, srcPort, dstPort, prevSequence, prevAcknowledgment, nil)
}

// https://atmarkit.itmedia.co.jp/ait/articles/0401/29/news080_2.html
// 「「チェックサム」フィールド：16bit幅」
func (t *TCP) CalculateChecksum(ipv4 *IPv4) {
	t.Checksum = func() uint16 {
		pseudoTCPHeader := func() []byte {
			buf := &bytes.Buffer{}
			WriteUint32(buf, ipv4.SrcAddr)
			WriteUint32(buf, ipv4.DstAddr)
			padding := byte(0x00)
			buf.WriteByte(padding)
			buf.WriteByte(ipv4.Protocol)
			WriteUint16(buf, uint16(len(t.Bytes())))
			return buf.Bytes()
		}()

		forTCPChecksum := &bytes.Buffer{}
		forTCPChecksum.Write(pseudoTCPHeader)
		forTCPChecksum.Write(t.Bytes())
		if len(t.Data)%2 != 0 {
			forTCPChecksum.WriteByte(0x00)
		}
		return binary.BigEndian.Uint16(t.checksum(forTCPChecksum.Bytes()))
	}()
}

func (t *TCP) CalculateChecksumForIPv6(ipv6 *IPv6) {
	pseudoHeader := ipv6.PseudoHeader(uint32(len(t.Bytes())))
	forTCPChecksum := &bytes.Buffer{}
	forTCPChecksum.Write(pseudoHeader)
	forTCPChecksum.Write(t.Bytes())
	if len(t.Data)%2 != 0 {
		forTCPChecksum.WriteByte(0x00)
	}

	data := forTCPChecksum.Bytes()
	t.Checksum = binary.BigEndian.Uint16(calculateChecksum(data))
}

func (*TCP) checksum(packet []byte) []byte {
	return calculateChecksum(packet)
}

// https://www.infraexpert.com/study/tcpip8.html
func (t *TCP) Bytes() []byte {
	buf := &bytes.Buffer{}
	buf.Write(t.headerToBytes())
	buf.Write(t.Data)
	return buf.Bytes()
}

func (t *TCP) headerToBytes() []byte {
	buf := &bytes.Buffer{}
	WriteUint16(buf, t.SrcPort)
	WriteUint16(buf, t.DstPort)
	WriteUint32(buf, t.Sequence)
	WriteUint32(buf, t.Acknowledgment)
	buf.WriteByte(t.HeaderLength)
	buf.WriteByte(t.Flags)
	WriteUint16(buf, t.Window)
	WriteUint16(buf, t.Checksum)
	WriteUint16(buf, t.UrgentPointer)
	buf.Write(t.Options)
	return buf.Bytes()
}

// with tcp 3 way handshake
func EstablishConnectionAndSendPayload(nwInterface string, dstIPAddr []byte, dstPort uint16, payload []byte) error {
	nwt, err := NewNetworkInterfaceForTCP(nwInterface)
	if err != nil {
		return err
	}

	if err := nwt.Connect(dstIPAddr, dstPort); err != nil {
		return err
	}
	defer nwt.Close()

	if _, err := nwt.Write(payload); err != nil {
		return err
	}

	return nil
}

// このなかで、ログ出力などしないこと。Monitor の下に出てくる
// 挙動を詳細に確認する場合は、internal内の SendTCP3wayhandshake 関数でやること
// TODO: 対向からRST,RST/ACKが来た時にreturnするようにする
// TODO: http専用になっちゃってるから、他のプロトコルでも使えるよう汎用的にする
func EstablishConnectionAndSendPayloadXxx(ctx context.Context, nwInterface string, fEthrh *EthernetHeader, fIpv4 *IPv4, fTcp *TCP, fHttp *HTTP) error {
	nw, err := NewNetworkInterface(nwInterface)
	if err != nil {
		return err
	}

	var srcPort uint16 = fTcp.SrcPort
	var dstPort uint16 = fTcp.DstPort
	var srcIPAddr uint32 = fIpv4.SrcAddr
	var dstIPAddr uint32 = fIpv4.DstAddr
	dstMACAddr := fEthrh.Dst
	srcMACAddr := fEthrh.Src

	tcp := NewTCPSyn(srcPort, dstPort)
	ipv4 := NewIPv4(IPv4_PROTO_TCP, srcIPAddr, dstIPAddr)
	tcp.CalculateChecksum(ipv4)

	ipv4.Data = tcp.Bytes()
	ipv4.CalculateTotalLength()
	ipv4.CalculateChecksum()

	ethernetFrame := NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv4, ipv4.Bytes())
	if err := nw.Send(ethernetFrame); err != nil {
		return err
	}

	for {
		select {
		case <-ctx.Done():
			return nil

		default:
			recieved := make([]byte, 1500)
			n, _, err := unix.Recvfrom(nw.Socket, recieved, 0)
			if err != nil {
				if n == -1 {
					continue
				}
				return err
			}

			ethernetFrame := ParsedEthernetFrame(recieved)

			switch ethernetFrame.Header.Typ {
			case ETHER_TYPE_IPv4:
				ipv4 := ParsedIPv4(ethernetFrame.Data)

				switch ipv4.Protocol {
				case IPv4_PROTO_TCP:
					tcp := ParsedTCP(ipv4.Data)

					switch tcp.DstPort {
					case srcPort: // synパケットの送信元ポート
						if tcp.Flags == TCP_FLAGS_SYN_ACK {
							// log.Println("passive TCP_FLAGS_SYN_ACK")

							// syn/ackを受け取ったのでack送信
							tcp := NewTCPAck(srcPort, dstPort, tcp.Sequence, tcp.Acknowledgment)
							ipv4 := NewIPv4(IPv4_PROTO_TCP, srcIPAddr, dstIPAddr)
							tcp.CalculateChecksum(ipv4)

							ipv4.Data = tcp.Bytes()
							ipv4.CalculateTotalLength()
							ipv4.CalculateChecksum()

							ethernetFrame := NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv4, ipv4.Bytes())
							if err := nw.Send(ethernetFrame); err != nil {
								return err
							}

							tcp = NewTCPWithData(srcPort, dstPort, fHttp.Bytes(), tcp.Sequence, tcp.Acknowledgment)
							ipv4 = NewIPv4(IPv4_PROTO_TCP, srcIPAddr, dstIPAddr)
							tcp.CalculateChecksum(ipv4)

							ipv4.Data = tcp.Bytes()
							ipv4.CalculateTotalLength()
							ipv4.CalculateChecksum()

							ethernetFrame = NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv4, ipv4.Bytes())
							if err := nw.Send(ethernetFrame); err != nil {
								return err
							}

							continue
						}

						if tcp.Flags == TCP_FLAGS_ACK {
							// log.Println("passive TCP_FLAGS_ACK")
							continue
						}

						if tcp.Flags == TCP_FLAGS_PSH_ACK {
							lineLength := bytes.Index(tcp.Data, []byte{0x0d, 0x0a}) // "\r\n"
							if lineLength == -1 {
								// log.Println("-1")
								continue
							}
							// log.Println("passive TCP_FLAGS_PSH_ACK")

							// HTTPレスポンス受信
							if tcp.SrcPort == PORT_HTTP {
								resp := ParsedHTTPResponse(tcp.Data)
								// log.Printf("%+v\n", resp)

								// そのackを返す
								// log.Printf("Length of http resp: %d\n", resp.Len())

								tcp := NewTCPAckForPassiveData(srcPort, dstPort, tcp.Sequence, tcp.Acknowledgment, resp.Len())
								ipv4 := NewIPv4(IPv4_PROTO_TCP, srcIPAddr, dstIPAddr)
								tcp.CalculateChecksum(ipv4)

								ipv4.Data = tcp.Bytes()
								ipv4.CalculateTotalLength()
								ipv4.CalculateChecksum()

								ethernetFrame := NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv4, ipv4.Bytes())
								if err := nw.Send(ethernetFrame); err != nil {
									return err
								}

								// 続けてFinAck
								tcp = NewTCPFinAck(srcPort, dstPort, tcp.Sequence, tcp.Acknowledgment)
								ipv4 = NewIPv4(IPv4_PROTO_TCP, srcIPAddr, dstIPAddr)
								tcp.CalculateChecksum(ipv4)

								ipv4.Data = tcp.Bytes()
								ipv4.CalculateTotalLength()
								ipv4.CalculateChecksum()

								ethernetFrame = NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv4, ipv4.Bytes())
								if err := nw.Send(ethernetFrame); err != nil {
									return err
								}
							}
							continue
						}

						if tcp.Flags == TCP_FLAGS_FIN_ACK {
							// log.Println("passive TCP_FLAGS_FIN_ACK")

							// それにack
							tcp := NewTCPAck(srcPort, dstPort, tcp.Sequence, tcp.Acknowledgment)
							ipv4 := NewIPv4(IPv4_PROTO_TCP, srcIPAddr, dstIPAddr)
							tcp.CalculateChecksum(ipv4)

							ipv4.Data = tcp.Bytes()
							ipv4.CalculateTotalLength()
							ipv4.CalculateChecksum()

							ethernetFrame := NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv4, ipv4.Bytes())
							if err := nw.Send(ethernetFrame); err != nil {
								return err
							}
							return nil
						}

						continue
					default:
						// noop
					}
				}
			}
		}
	}
}

func EstablishConnectionAndSendPayloadXxxForIPv6(ctx context.Context, nwInterface string, fEthrh *EthernetHeader, fIpv6 *IPv6, fTcp *TCP, fHttp *HTTP) error {
	nw, err := NewNetworkInterface(nwInterface)
	if err != nil {
		return err
	}

	var srcPort uint16 = fTcp.SrcPort
	var dstPort uint16 = fTcp.DstPort
	var srcIPAddr []uint8 = fIpv6.SrcAddr
	var dstIPAddr []uint8 = fIpv6.DstAddr
	dstMACAddr := fEthrh.Dst
	srcMACAddr := fEthrh.Src

	tcp := NewTCPSyn(srcPort, dstPort)
	ipv6 := NewIPv6(IPv4_PROTO_TCP, srcIPAddr, dstIPAddr)
	tcp.CalculateChecksumForIPv6(ipv6)

	ipv6.Data = tcp.Bytes()
	ipv6.PayloadLength = uint16(len(ipv6.Data))

	ethernetFrame := NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv6, ipv6.Bytes())
	if err := nw.Send(ethernetFrame); err != nil {
		return err
	}

	for {
		select {
		case <-ctx.Done():
			return nil

		default:
			recieved := make([]byte, 1500)
			n, _, err := unix.Recvfrom(nw.Socket, recieved, 0)
			if err != nil {
				if n == -1 {
					continue
				}
				return err
			}

			ethernetFrame := ParsedEthernetFrame(recieved)

			switch ethernetFrame.Header.Typ {
			case ETHER_TYPE_IPv6:
				ipv6 := ParsedIPv6(ethernetFrame.Data)

				switch ipv6.NextHeader {
				case IPv4_PROTO_TCP:
					tcp := ParsedTCP(ipv6.Data)

					switch tcp.DstPort {
					case srcPort: // synパケットの送信元ポート
						if tcp.Flags == TCP_FLAGS_SYN_ACK {
							// log.Println("passive TCP_FLAGS_SYN_ACK")

							// syn/ackを受け取ったのでack送信
							tcp := NewTCPAck(srcPort, dstPort, tcp.Sequence, tcp.Acknowledgment)
							ipv6 := NewIPv6(IPv4_PROTO_TCP, srcIPAddr, dstIPAddr)
							tcp.CalculateChecksumForIPv6(ipv6)

							ipv6.Data = tcp.Bytes()
							ipv6.PayloadLength = uint16(len(ipv6.Data))

							ethernetFrame := NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv6, ipv6.Bytes())
							if err := nw.Send(ethernetFrame); err != nil {
								return err
							}

							tcp = NewTCPWithData(srcPort, dstPort, fHttp.Bytes(), tcp.Sequence, tcp.Acknowledgment)
							ipv6 = NewIPv6(IPv6_NEXT_HEADER_TCP, srcIPAddr, dstIPAddr)
							tcp.CalculateChecksumForIPv6(ipv6)

							ipv6.Data = tcp.Bytes()
							ipv6.PayloadLength = uint16(len(ipv6.Data))

							ethernetFrame = NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv6, ipv6.Bytes())
							if err := nw.Send(ethernetFrame); err != nil {
								return err
							}

							continue
						}

						if tcp.Flags == TCP_FLAGS_ACK {
							// log.Println("passive TCP_FLAGS_ACK")
							continue
						}

						if tcp.Flags == TCP_FLAGS_PSH_ACK {
							lineLength := bytes.Index(tcp.Data, []byte{0x0d, 0x0a}) // "\r\n"
							if lineLength == -1 {
								// log.Println("-1")
								continue
							}
							// log.Println("passive TCP_FLAGS_PSH_ACK")

							// HTTPレスポンス受信
							if tcp.SrcPort == PORT_HTTP {
								resp := ParsedHTTPResponse(tcp.Data)
								// log.Printf("%+v\n", resp)

								// そのackを返す
								// log.Printf("Length of http resp: %d\n", resp.Len())

								tcp := NewTCPAckForPassiveData(srcPort, dstPort, tcp.Sequence, tcp.Acknowledgment, resp.Len())
								ipv6 := NewIPv6(IPv6_NEXT_HEADER_TCP, srcIPAddr, dstIPAddr)
								tcp.CalculateChecksumForIPv6(ipv6)

								ipv6.Data = tcp.Bytes()
								ipv6.PayloadLength = uint16(len(ipv6.Data))

								ethernetFrame := NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv6, ipv6.Bytes())
								if err := nw.Send(ethernetFrame); err != nil {
									return err
								}

								// 続けてFinAck
								tcp = NewTCPFinAck(srcPort, dstPort, tcp.Sequence, tcp.Acknowledgment)
								ipv6 = NewIPv6(IPv6_NEXT_HEADER_TCP, srcIPAddr, dstIPAddr)
								tcp.CalculateChecksumForIPv6(ipv6)

								ipv6.Data = tcp.Bytes()
								ipv6.PayloadLength = uint16(len(ipv6.Data))

								ethernetFrame = NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv6, ipv6.Bytes())
								if err := nw.Send(ethernetFrame); err != nil {
									return err
								}
							}
							continue
						}

						if tcp.Flags == TCP_FLAGS_FIN_ACK {
							// log.Println("passive TCP_FLAGS_FIN_ACK")

							// それにack
							tcp := NewTCPAck(srcPort, dstPort, tcp.Sequence, tcp.Acknowledgment)
							ipv6 := NewIPv6(IPv6_NEXT_HEADER_TCP, srcIPAddr, dstIPAddr)
							tcp.CalculateChecksumForIPv6(ipv6)

							ipv6.Data = tcp.Bytes()
							ipv6.PayloadLength = uint16(len(ipv6.Data))

							ethernetFrame := NewEthernetFrame(dstMACAddr, srcMACAddr, ETHER_TYPE_IPv6, ipv6.Bytes())
							if err := nw.Send(ethernetFrame); err != nil {
								return err
							}
							return nil
						}

						continue
					default:
						// noop
					}
				}
			}
		}
	}
}