【转】busybox分析——arp设置ARP缓存表中的mac地址
转自:http://blog.chinaunix.net/uid-26009923-id-5098083.html
1. 将arp缓存表中某一IP的MAC地址修改
cong@msi:/work/test/tcpip/busy/arp$ cat arp.c
#include "utils.h" #include <net/if_arp.h>
#include <linux/sockios.h>
//usage: arp 192.168.4.111 78:6a:89:18:31:0c
#define ETH_ALEN 6 int INET_resolve(const char *name, struct sockaddr_in *s_in)
{
struct hostent *hp;
/* Grmpf. -FvK */
s_in->sin_family = AF_INET;
s_in->sin_port = 0; /* Look to see if it's a dotted quad. */
if (inet_aton(name, &s_in->sin_addr)) {
return 0;
} hp = gethostbyname(name);
if (hp == NULL) {
return -1;
}
memcpy(&s_in->sin_addr, hp->h_addr_list[0], sizeof(struct in_addr));
return 0;
} /* Convert Ethernet address from "XX[:]XX[:]XX[:]XX[:]XX[:]XX" to sockaddr.
* Return nonzero on error.
*/
int in_ether(const char *bufp, struct sockaddr *sap)
{
char *ptr;
int i, j;
unsigned char val;
unsigned char c;
dbmsg();
sap->sa_family = ARPHRD_ETHER;
ptr = (char *) sap->sa_data; i = ETH_ALEN;
goto first;
do {
/* We might get a semicolon here */
if (*bufp == ':')
bufp++;
first:
j = val = 0;
do {
c = *bufp;
if (((unsigned char)(c - '0')) <= 9) {
c -= '0';
} else if ((unsigned char)((c|0x20) - 'a') <= 5) {
c = (unsigned char)((c|0x20) - 'a') + 10;
} else {
if (j && (c == ':' || c == '\0'))
/* One-digit byte: __:X:__ */
break;
return -1;
}
++bufp;
val <<= 4;
val += c;
j ^= 1;
} while (j); *ptr++ = val; } while (--i); /* Error if we aren't at end of string */
return *bufp;
} int main ( int argc, char *argv[] )
{
struct arpreq req;
struct sockaddr sa;
int ret;
if(argc != 3)
{
dbmsg("usage: ./arp ");
exit(0);
}
int sockfd = socket(AF_INET, SOCK_DGRAM, 0);
if(sockfd < 0)
return -1;
memset(&req, 0, sizeof(req));
//a. put host IP to arp_p
INET_resolve(argv[1], (struct sockaddr_in*)&sa);
memcpy(&req.arp_pa, &sa, sizeof(struct sockaddr)); //b. put host MAC to arp_ha
in_ether(argv[2], &req.arp_ha); //c. set flag
req.arp_flags = ATF_PERM | ATF_COM; //d. invoke ioctl
dbmsg("next invoke ioctl");
ret = ioctl(sockfd, SIOCSARP, &req);
if(ret < 0)
{
dbmsg("error %s", strerror(errno));
exit(-1);
}
return EXIT_SUCCESS;
}
3. 执行结果
cong@msi:/work/test/tcpip/busy/arp$ cat /proc/net/arp | grep "192.168.4.111" //查看arp缓存中的192.168.4.111的MAC地址
192.168.4.111 0x1 0x2 78:6a:89:18:31:0b * eth2 -->结尾是0b cong@msi:/work/test/tcpip/busy/arp$ ping 192.168.4.111 //可以ping通的
PING 192.168.4.111 (192.168.4.111) 56(84) bytes of data.
64 bytes from 192.168.4.111: icmp_seq=1 ttl=64 time=93.9 ms cong@msi:/work/test/tcpip/busy/arp$ sudo ./arp 192.168.4.111 78:6a:89:18:31:0c //修改arp缓存中的192.168.4.111的MAC地址
arp.c:in_ether[38]:
arp.c:main[101]: next invoke ioctl cong@msi:/work/test/tcpip/busy/arp$ ping 192.168.4.111 //再次ping发现不通了
PING 192.168.4.111 (192.168.4.111) 56(84) bytes of data.
From 192.168.4.62: icmp_seq=1 Redirect Network(New nexthop: 192.168.4.62)
From 192.168.4.62: icmp_seq=2 Redirect Network(New nexthop: 192.168.4.62)
From 192.168.4.62: icmp_seq=3 Redirect Network(New nexthop: 192.168.4.62) cong@msi:/work/test/tcpip/busy/arp$ cat /proc/net/arp | grep "192.168.4.111" //查看arp缓存中的192.168.4.111的MAC地址
192.168.4.111 0x1 0x6 78:6a:89:18:31:0c * eth2 -->将结尾的0b改成了0c