// // $Copyright$ // // $Name: $ // // $TAHI: ct/ipsec4/HTR_A_DM_IPv4H.def,v 1.2 2001/10/05 06:38:58 masaxmasa Exp $ // #include "../ipsec/HTR_A_common.def" //====================================================================== // // AH/ESP definition // //====================================================================== // // Real packet definition with IPsec AH // FEM_icmp4_echo_request_exth( echo_request_from_host1_ah_real1, hether_router2nut, { _SRC(v4(IPSEC_HOST1_NET5_ADDR)); _DST(v4(IPSEC_HOST1_NET3_ADDR)); // this address will be modified to // _DST(v4(IPSEC_NUT_NET3_ADDR)); // this address in // // echo_request_from_host1_ah_dm_ipv4h_dst }, { header = _HDR_IPV4_NAME(echo_request_from_host1_ah_real1); exthdr = ah_from_host_sn2; upper = _ICMPV4_NAME(echo_request_from_host1_ah_real1); }, { payload = IPSEC_ECHO_DATA; } ) FEM_icmp4_echo_request_exth( echo_request_from_host1_ah_real2, hether_router2nut, { _SRC(v4(IPSEC_HOST2_NET5_ADDR)); // this address will be modified to // _SRC(v4(IPSEC_HOST1_NET5_ADDR)); // this address in // // echo_request_from_host1_ah_dm_ipv4h_src _DST(v4(IPSEC_NUT_NET3_ADDR)); }, { header = _HDR_IPV4_NAME(echo_request_from_host1_ah_real2); exthdr = ah_from_host_sn3; upper = _ICMPV4_NAME(echo_request_from_host1_ah_real2); }, { payload = IPSEC_ECHO_DATA; } ) FEM_icmp4_echo_request_exth( echo_request_from_host1_ah_real3, hether_router2nut, { _SRC(v4(IPSEC_HOST1_NET5_ADDR)); _DST(v4(IPSEC_NUT_NET3_ADDR)); TTL=255; }, { header = _HDR_IPV4_NAME(echo_request_from_host1_ah_real3); exthdr = ah_from_host_sn4; upper = _ICMPV4_NAME(echo_request_from_host1_ah_real3); }, { payload = IPSEC_ECHO_DATA; } ) //====================================================================== // // Modified packet definition with IPsec AH // // Common use Ether Header Hdr_Ether hether_router2nut_0x0800 { SourceAddress=ether(IPSEC_ROUTER_NET3_MAC_ADDR); DestinationAddress=nutether(); Type=0x0800; // need to specify IPv4 } // IPv4 Dst address is modified Frame_Ether echo_request_from_host1_ah_dm_ipv4h_dst { header=hether_router2nut_0x0800; packet=echo_request_from_host1_ah_modpkt1; } Payload echo_request_from_host1_ah_modpkt1 { data=substr(echo_request_from_host1_ah_real1, 14, 1); // Ver, Len data=substr(echo_request_from_host1_ah_real1, 15, 1); // TOS data=substr(echo_request_from_host1_ah_real1, 16, 2); // Total Len data=substr(echo_request_from_host1_ah_real1, 18, 2); // ID data=substr(echo_request_from_host1_ah_real1, 20, 2); // Flags, Ofs data=substr(echo_request_from_host1_ah_real1, 22, 1); // TTL data=substr(echo_request_from_host1_ah_real1, 23, 1); // Proto. //data=substr(echo_request_from_host1_ah_real1, 24, 2); // Hdr chksum data={0x69,0xfa}; // correct Hdr chksum data=substr(echo_request_from_host1_ah_real1, 26, 4); // Src Addr //data=substr(echo_request_from_host1_ah_real1, 30, 4); // Dst Addr data=substr(echo_request_from_host1_ah_real1, 30, 3); // Dst Addr data={20}; // modify dstaddr IPSEC_HOST1_NET3_ADDR -> IPSEC_NUT_NET3_ADDR data=substr(echo_request_from_host1_ah_real1, 34, 24); // AH data=substr(echo_request_from_host1_ah_real1, 58, 1); // ICMP Type data=substr(echo_request_from_host1_ah_real1, 59, 1); // ICMP Code data=substr(echo_request_from_host1_ah_real1, 60, 2); // ICMP chksum data=substr(echo_request_from_host1_ah_real1, 62, 2); // ICMP ID data=substr(echo_request_from_host1_ah_real1, 64, 2); // ICMP Seq No. data=substr(echo_request_from_host1_ah_real1, 66, 24); // ICMP Data } // IPv4 Src address is modified Frame_Ether echo_request_from_host1_ah_dm_ipv4h_src { header=hether_router2nut_0x0800; packet=echo_request_from_host1_ah_modpkt2; } Payload echo_request_from_host1_ah_modpkt2 { data=substr(echo_request_from_host1_ah_real2, 14, 1); // Ver, Len data=substr(echo_request_from_host1_ah_real2, 15, 1); // TOS data=substr(echo_request_from_host1_ah_real2, 16, 2); // Total Len data=substr(echo_request_from_host1_ah_real2, 18, 2); // ID data=substr(echo_request_from_host1_ah_real2, 20, 2); // Flags, Ofs data=substr(echo_request_from_host1_ah_real2, 22, 1); // TTL data=substr(echo_request_from_host1_ah_real2, 23, 1); // Proto. //data=substr(echo_request_from_host1_ah_real2, 24, 2); // Hdr chksum data={0x69,0xfa}; // correct Hdr chksum //data=substr(echo_request_from_host1_ah_real2, 26, 4); // Src Addr data=substr(echo_request_from_host1_ah_real2, 26, 3); // Src Addr data={31}; // modify srcaddr IPSEC_HOST2_NET5_ADDR -> IPSEC_HOST1_NET5_ADDR data=substr(echo_request_from_host1_ah_real2, 30, 4); // Dst Addr data=substr(echo_request_from_host1_ah_real2, 34, 24); // AH data=substr(echo_request_from_host1_ah_real2, 58, 1); // ICMP Type data=substr(echo_request_from_host1_ah_real2, 59, 1); // ICMP Code data=substr(echo_request_from_host1_ah_real2, 60, 2); // ICMP chksum data=substr(echo_request_from_host1_ah_real2, 62, 2); // ICMP ID data=substr(echo_request_from_host1_ah_real2, 64, 2); // ICMP Seq No. data=substr(echo_request_from_host1_ah_real2, 66, 24); // ICMP Data } // IPv4 TTL is modified Frame_Ether echo_request_from_host1_ah_dm_ipv4h_ttl { header=hether_router2nut_0x0800; packet=echo_request_from_host1_ah_modpkt3; } Payload echo_request_from_host1_ah_modpkt3 { data=substr(echo_request_from_host1_ah_real3, 14, 1); // Ver, Len data=substr(echo_request_from_host1_ah_real3, 15, 1); // TOS data=substr(echo_request_from_host1_ah_real3, 16, 2); // Total Len data=substr(echo_request_from_host1_ah_real3, 18, 2); // ID data=substr(echo_request_from_host1_ah_real3, 20, 2); // Flags, Ofs //data=substr(echo_request_from_host1_ah_real3, 22, 1); // TTL data=0x80; // modify TTL 255->128 data=substr(echo_request_from_host1_ah_real3, 23, 1); // Proto. //data=substr(echo_request_from_host1_ah_real3, 24, 2); // Hdr chksum data={0xe8,0xfa}; // correct Hdr chksum data=substr(echo_request_from_host1_ah_real3, 26, 4); // Src Addr data=substr(echo_request_from_host1_ah_real3, 30, 4); // Dst Addr data=substr(echo_request_from_host1_ah_real3, 34, 24); // AH data=substr(echo_request_from_host1_ah_real3, 58, 1); // ICMP Type data=substr(echo_request_from_host1_ah_real3, 59, 1); // ICMP Code data=substr(echo_request_from_host1_ah_real3, 60, 2); // ICMP chksum data=substr(echo_request_from_host1_ah_real3, 62, 2); // ICMP ID data=substr(echo_request_from_host1_ah_real3, 64, 2); // ICMP Seq No. data=substr(echo_request_from_host1_ah_real3, 66, 24); // ICMP Data } //end