w00t/prga/prga.c

150 int is_arp(struct ieee80211_frame *wh, int len)
153 	if (len > (sizeof(*wh) + 4 + 4 + 39))
163         struct ieee80211_frame *wh;
172         wh = get_wifi(buf, &rc);
173         if (!wh)
176 	if (!frame_type(wh, IEEE80211_FC0_TYPE_DATA,
180 	if (is_arp(wh, rc))
185 	if (wh->i_fc[1] & IEEE80211_FC1_DIR_TODS)
186 		bssid = wh->i_addr1;
188 		bssid = wh->i_addr2;
193 	if (!(wh->i_fc[1] & IEEE80211_FC1_PROTECTED)) {
198 	ptr = (char*) (wh+1);
201 	rc -= sizeof(wh) + 4;
239 	struct ieee80211_frame *wh;
250 	wh = (struct ieee80211_frame*) p->packet;
251 	wh->i_fc[1] |= IEEE80211_FC1_RETRY;
259 	struct ieee80211_frame *wh;
269 	wh = (struct ieee80211_frame*) p->packet;
282 	wh->i_fc[0] |= IEEE80211_FC0_TYPE_DATA;
283 	wh->i_fc[0] |= IEEE80211_FC0_SUBTYPE_DATA;
284 	wh->i_fc[1] |= IEEE80211_FC1_PROTECTED;
285 	wh->i_fc[1] |= IEEE80211_FC1_DIR_TODS;
287 		wh->i_fc[1] |= IEEE80211_FC1_MORE_FRAG;
289 	wh->i_dur[0] = 0x69;
290 	wh->i_dur[1] = 0x00;
292 	memcpy(wh->i_addr1, p->ap, 6);
293 	memcpy(wh->i_addr2, p->mac, 6);
294 	memset(wh->i_addr3, 0xff, 6);
296 	seqp = (short*) wh->i_seq;
301 	ptr = (char*) (wh+1);
316 	p->packet_len = sizeof(*wh) + 4 + dlen + 4;
341 	struct ieee80211_frame *wh;
380         wh = get_wifi(buf, &rc);
381         if (!wh)
384 	if (!frame_type(wh, IEEE80211_FC0_TYPE_CTL, IEEE80211_FC0_SUBTYPE_ACK))
387 	if (memcmp(p->mac, wh->i_addr1, 6) != 0)
408 	struct ieee80211_frame *wh;
441         wh = get_wifi(buf, &rc);
442         if (!wh)
445 	if (!frame_type(wh, IEEE80211_FC0_TYPE_DATA,
449 	if (memcmp(wh->i_addr2, p->ap, 6) != 0)
452 	if (memcmp(wh->i_addr3, p->mac, 6) != 0)
455 	if (memcmp(wh->i_addr1, "\xff\xff\xff\xff\xff\xff", 6) != 0)
459 	if ( (rc - sizeof(*wh) - 8) != p->data_len)
464 	ptr = (char*) (wh+1);
510 	struct ieee80211_frame *wh;
518 	offset = sizeof(*wh) + 4 + 8 - 14;
527 	wh = (struct ieee80211_frame*) p->packet;
528 	wh->i_fc[0] |= IEEE80211_FC0_TYPE_DATA;
529 	wh->i_fc[0] |= IEEE80211_FC0_SUBTYPE_DATA;
530 	wh->i_fc[1] |= IEEE80211_FC1_PROTECTED;
531 	wh->i_fc[1] |= IEEE80211_FC1_DIR_TODS;
533 	wh->i_dur[0] = 0x69;
535 	memcpy(wh->i_addr1, p->ap, 6);
536 	memcpy(wh->i_addr2, p->mac, 6);
537 	memcpy(wh->i_addr3, dst, 6);
539 	seq = (short*) wh->i_seq;
543 	ptr = (char*) (wh+1);
563 	p->packet_len = sizeof(*wh) + 4 + rc;