// // $Copyright$ // // $Name: $ // // $Id: RTU_A_DM_Inner_Payload.def,v 1.1.1.1 2000/10/31 22:38:51 sekiya Exp $ // #include "./RTU_A_common.def" //====================================================================== // // AH/ESP definition // //====================================================================== // // Real packet definition with IPsec AH // FEM_icmp6_echo_request( echo_request_from_host1_net4_to_host1_net1_on_net1_cracked, hether_nut2host1, { _SRC(v6(IPSEC_HOST1_NET4_ADDR)); _DST(v6(IPSEC_HOST1_NET1_ADDR)); }, { payload = echo_data_cracked; // cracked data // payload = IPSEC_ECHO_DATA; // original data } ) Payload echo_data_cracked { data={0x63, 0x72, 0x61, 0x63, 0x6b, 0x65, 0x64, 0x20}; // "cracked " } FEM_hdr_ipv6_exth( ahtun_from_sg1_net2_real1 , hether_router2nut, { _SRC(v6(IPSEC_SG1_NET2_ADDR)); _DST(v6(IPSEC_NUT_NET0_ADDR)); }, { header = _HDR_IPV6_NAME(ahtun_from_sg1_net2_real1); exthdr = ah_from_sg_sn2; upper = _PACKET_IPV6_NAME(echo_request_from_host1_net4_to_host1_net1_on_net0); // Inner IPv6 header hoplimit will be modified } ) FEM_hdr_ipv6_exth( ahtun_from_sg1_net2_cracked , hether_router2nut, { _SRC(v6(IPSEC_SG1_NET2_ADDR)); _DST(v6(IPSEC_NUT_NET0_ADDR)); }, { header = _HDR_IPV6_NAME(ahtun_from_sg1_net2_real1); exthdr = ah_from_sg_sn2; upper = _PACKET_IPV6_NAME(echo_request_from_host1_net4_to_host1_net1_on_net1_cracked); } ) //====================================================================== // // Modified packet definition with IPsec AH // // Common use Ether Header Hdr_Ether hether_router2nut_0x86dd { SourceAddress=ether(IPSEC_ROUTER_NET0_MAC_ADDR); DestinationAddress=nutether(); Type=0x86dd; // need to specify IPv6 } // Inner IPv6 payload is modified Frame_Ether ahtun_from_sg1_net2_dm_inner_payload_echo_request_from_host1_net4_to_host1_net1_on_net0 { header=hether_router2nut_0x86dd; packet=ahtun_from_sg1_net2_modpkt1; } Payload ahtun_from_sg1_net2_modpkt1 { data=substr(ahtun_from_sg1_net2_real1, 14, 40); // Tunnel Outer IPv6 header data=substr(ahtun_from_sg1_net2_real1, 54, 12); // Tunnel Outer AH (except for ICV) data=substr(ahtun_from_sg1_net2_real1, 66, 12); // Tunnel Outer AH (only ICV) //data={0x11,0xb9,0x73,0x5f, 0x5a,0xfa,0xe6,0x18, 0x47,0xe2,0xc8,0x89}; // correct ICV data=substr(ahtun_from_sg1_net2_real1, 78, 40); // Tunnel Inner IPv6 header data=substr(ahtun_from_sg1_net2_real1, 118, 2); // Tunnel Inner ICMP type,code data={0x61, 0xcf}; // correct ICMP checksum data=substr(ahtun_from_sg1_net2_real1, 122, 4); // Tunnel Inner ICMP echo request ID,Seq data={0x63, 0x72, 0x61, 0x63, 0x6b, 0x65, 0x64, 0x20}; // echo request data "cracked " } //end