netfilter实现内核重构skb来发送udp包

代码来之：http://blog.chinaunix.net/uid-23069658-id-3245853.html

洞悉linux下的Netfilter&iptables：开发自己的hook函数【实战】

原来的代码在3.x上有些问题，主要是内核更新了，一些函数接口和数据结构变了，以下代码在3.0.5上测试通过：

#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 

MODULE_LICENSE("GPL");
MODULE_AUTHOR("koorey KING");
MODULE_DESCRIPTION("My hook test");


#define ETH "eth1"
#define SIP "192.168.81.238"
#define DIP "192.168.81.211"
#define SPORT 39804
#define DPORT 6980
unsigned char SMAC[ETH_ALEN]={0x00,0x0B,0x82,0x27,0xFD,0xE4};
unsigned char DMAC[ETH_ALEN]={0x10,0x78,0xD2,0xC6,0x2F,0x89};

static int build_and_xmit_udp(char * eth, u_char * smac, u_char * dmac,
							 u_char * pkt, int pkt_len,u_long sip, u_long dip,
							 u_short sport, u_short dport)
{
	struct sk_buff * skb = NULL;
	struct net_device * dev = NULL;
	struct ethhdr * ethdr = NULL;
	struct iphdr * iph = NULL;
	struct udphdr * udph = NULL;
	u_char * pdata = NULL;
  
	if(NULL == smac || NULL == dmac)
		goto out;

	if(NULL == (dev= dev_get_by_name(&init_net,eth)))
		goto out;

	skb = alloc_skb(pkt_len + sizeof(struct iphdr) + sizeof(struct udphdr) + LL_RESERVED_SPACE(dev), GFP_ATOMIC);
        printk(KERN_INFO"dean: %s =>> %s ==>>%d\n",__FILE__,__FUNCTION__,__LINE__);
	if(NULL == skb)
		goto out;
	skb_reserve(skb, LL_RESERVED_SPACE(dev));

	skb->dev = dev;
	skb->pkt_type = PACKET_OTHERHOST;
	skb->protocol = __constant_htons(ETH_P_IP);
	skb->ip_summed = CHECKSUM_NONE;
	skb->priority = 0;

	//skb->nh.iph = (struct iphdr*)skb_put(skb, sizeof(struct iphdr));
	skb->network_header = skb_put(skb, sizeof(struct iphdr));
	//skb->h.uh = (struct udphdr*)skb_put(skb, sizeof(struct udphdr));
	skb->transport_header =  skb_put(skb, sizeof(struct udphdr));

	pdata = skb_put(skb, pkt_len);
	{
		if(NULL != pkt)
			memcpy(pdata, pkt, pkt_len);
	}

  
	udph = (struct udphdr *)skb->transport_header;
	memset(udph, 0, sizeof(struct udphdr));
	udph->source = sport;
	udph->dest = dport;
	skb->csum = 0;
	udph->len = htons(sizeof(struct udphdr)+pkt_len);
	udph->check = 0;

	iph = (struct iphdr*)skb->network_header;
	iph->version = 4;
	iph->ihl = sizeof(struct iphdr)>>2;
	iph->frag_off = 0;
	iph->protocol = IPPROTO_UDP;
	iph->tos = 0;
	iph->daddr = dip;
	iph->saddr = sip;
	iph->ttl = 0x40;
	iph->tot_len = __constant_htons(skb->len);
	iph->check = 0;
	iph->check = ip_fast_csum((unsigned char *)iph,iph->ihl);

	skb->csum = skb_checksum(skb, iph->ihl*4, skb->len - iph->ihl * 4, 0);
	udph->check = csum_tcpudp_magic(sip, dip, skb->len - iph->ihl * 4, IPPROTO_UDP, skb->csum);

	skb->mac_header = skb_push(skb, 14);
	ethdr = (struct ethhdr *)skb->mac_header;
	memcpy(ethdr->h_dest, dmac, ETH_ALEN);
	memcpy(ethdr->h_source, smac, ETH_ALEN);
	ethdr->h_proto = __constant_htons(ETH_P_IP);

	if(0 > dev_queue_xmit(skb))
		goto out;
        printk(KERN_INFO"dean: %s =>> %s ==>>%d\n",__FILE__,__FUNCTION__,__LINE__);
out:
	if(NULL != skb)
	{
		dev_put (dev);
		//kfree_skb (skb);
	}
	return(NF_ACCEPT);
}

static int pktcnt=0;

static unsigned int hook_func(unsigned int hooknum, struct sk_buff *skb, const struct net_device *in, const struct net_device *out, int (*okfn)(struct sk_buff *))
{
	const struct iphdr *iph = (struct iphdr *)skb->network_header;
	int ret = NF_ACCEPT;
      printk(KERN_INFO"dean: %s =>> %s ==>>%d\n",__FILE__,__FUNCTION__,__LINE__);
	if(iph->protocol == IPPROTO_ICMP){
	   pktcnt++;
	   if(pktcnt%5 == 0){
			printk(KERN_INFO "Sending the %d udp pkt !\n",pktcnt/5);
			ret = build_and_xmit_udp(ETH,SMAC,DMAC,"hello",5,in_aton(SIP),in_aton(DIP),htons(SPORT),htons(DPORT));
	   }
	}
	return ret;
}

static struct nf_hook_ops nfho={
	.hook           = hook_func,
	.owner          = THIS_MODULE,
	.pf             = PF_INET,
	.hooknum        = NF_INET_LOCAL_OUT,
	.priority       = NF_IP_PRI_FIRST,
};

static int __init myhook_init(void)
{
    printk(KERN_INFO"dean: %s =>> %s ==>>%d\n",__FILE__,__FUNCTION__,__LINE__);
    return nf_register_hook(&nfho);
}

static void __exit myhook_fini(void)
{
    printk(KERN_INFO"dean: %s =>> %s ==>>%d\n",__FILE__,__FUNCTION__,__LINE__);
    nf_unregister_hook(&nfho);
}

module_init(myhook_init);
module_exit(myhook_fini);