1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
/*
* netsniff-ng - the packet sniffing beast
* Copyright 2011 Daniel Borkmann <dborkma@tik.ee.ethz.ch>,
* Swiss federal institute of technology (ETH Zurich)
* Subject to the GPL, version 2.
*/
#include <stdio.h>
#include <stdlib.h>
#include <getopt.h>
#include <ctype.h>
#include <unistd.h>
#include <sys/fsuid.h>
#include "xmalloc.h"
#include "xutils.h"
#include "die.h"
#include "bpf.h"
static const char *short_options = "vhi:VdbD";
static const struct option long_options[] = {
{"input", required_argument, NULL, 'i'},
{"verbose", no_argument, NULL, 'V'},
{"decimal", no_argument, NULL, 'D'},
{"bypass", no_argument, NULL, 'b'},
{"dump", no_argument, NULL, 'd'},
{"version", no_argument, NULL, 'v'},
{"help", no_argument, NULL, 'h'},
{NULL, 0, NULL, 0}
};
extern int compile_filter(char *file, int verbose, int bypass, int decimal);
static void help(void)
{
printf("\nbpfc %s, a tiny BPF compiler\n", VERSION_STRING);
puts("http://www.netsniff-ng.org\n\n"
"Usage: bpfc [options] || bpfc <program>\n"
"Options:\n"
" -i|--input <program/-> Berkeley Packet Filter file/stdin\n"
" -D|--decimal Decimal output, e.g. for xt_bpf\n"
" -V|--verbose Be more verbose\n"
" -b|--bypass Bypass filter validation (e.g. for bug testing)\n"
" -d|--dump Dump supported instruction table\n"
" -v|--version Print version\n"
" -h|--help Print this help\n\n"
"Examples:\n"
" bpfc fubar\n"
" bpfc -Dbi fubar\n"
" bpfc - (read from stdin)\n\n"
"Please report bugs to <bugs@netsniff-ng.org>\n"
"Copyright (C) 2011-2013 Daniel Borkmann <dborkma@tik.ee.ethz.ch>,\n"
"Swiss federal institute of technology (ETH Zurich)\n"
"License: GNU GPL version 2.0\n"
"This is free software: you are free to change and redistribute it.\n"
"There is NO WARRANTY, to the extent permitted by law.\n");
die();
}
static void version(void)
{
printf("\nbpfc %s, a tiny BPF compiler\n", VERSION_STRING);
puts("http://www.netsniff-ng.org\n\n"
"Please report bugs to <bugs@netsniff-ng.org>\n"
"Copyright (C) 2011-2013 Daniel Borkmann <dborkma@tik.ee.ethz.ch>,\n"
"Swiss federal institute of technology (ETH Zurich)\n"
"License: GNU GPL version 2.0\n"
"This is free software: you are free to change and redistribute it.\n"
"There is NO WARRANTY, to the extent permitted by law.\n");
die();
}
int main(int argc, char **argv)
{
int ret, verbose = 0, c, opt_index, bypass = 0, decimal = 0;
char *file = NULL;
setfsuid(getuid());
setfsgid(getgid());
if (argc == 1)
help();
while ((c = getopt_long(argc, argv, short_options,
long_options, &opt_index)) != EOF) {
switch (c) {
case 'h':
help();
break;
case 'v':
version();
break;
case 'V':
verbose = 1;
break;
case 'D':
decimal = 1;
break;
case 'b':
bypass = 1;
break;
case 'd':
bpf_dump_op_table();
die();
case 'i':
file = xstrdup(optarg);
break;
case '?':
switch (optopt) {
case 'i':
panic("Option -%c requires an argument!\n",
optopt);
default:
if (isprint(optopt))
printf("Unknown option character `0x%X\'!\n", optopt);
die();
}
default:
break;
}
}
if (argc == 2)
file = xstrdup(argv[1]);
if (!file)
panic("No Berkeley Packet Filter program specified!\n");
ret = compile_filter(file, verbose, bypass, decimal);
xfree(file);
return ret;
}
|
