Changeset 1567

Timestamp:

04/22/10 16:56:20 (3 years ago)

Author:

salcock

Message:

• traceanon now replaces checksums with zeroes - TODO: maybe re-calculate checksums to what they would be with the new IP addresses

File:

• trunk/tools/traceanon/traceanon.c (modified) (2 diffs)

trunk/tools/traceanon/traceanon.c

@@ -208 +208 @@
         for(;;) {
                 struct libtrace_ip *ipptr;
+                libtrace_udp_t *udp = NULL;
+                libtrace_tcp_t *tcp = NULL;
+
                 int psize;
                 psize = trace_read_packet(trace, packet);
@@ -220 +223 @@
                 ipptr = trace_get_ip(packet);
 
-                if (ipptr && (enc_source || enc_dest))
+                if (ipptr && (enc_source || enc_dest)) {
                         encrypt_ips(ipptr,enc_source,enc_dest);
+                        ipptr->ip_sum = 0;
+                }
+
+                /* Replace checksums so that IP encryption cannot be
+                 * reversed */
+
+                /* XXX replace with nice use of trace_get_transport() */
+
+                udp = trace_get_udp(packet);
+                if (udp && (enc_source || enc_dest)) {
+                        udp->check = 0;
+                } 
+
+                tcp = trace_get_tcp(packet);
+                if (tcp && (enc_source || enc_dest)) {
+                        tcp->check = 0;
+                }
 
                 /* TODO: Encrypt IP's in ARP packets */