/*
This file is part of Wi-viz (http://wiviz.natetrue.com).

Wi-viz is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License v2 as published by
the Free Software Foundation.

Wi-viz is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with Wi-viz; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
*/
#include <stdio.h>
#include <pcap.h>
#include <signal.h>

#define HOST_TIMEOUT 300

#include "wl_access.h"
#include "structs.h"
#include "channelhopper.h"

#ifdef WIN32
#define OFFLINE
#endif
#ifndef __cplusplus
#define __cdecl
#endif

#define nonzeromac(x) memcmp(x, "\0\0\0\0\0\0", 6)

void dealWithPacket(wiviz_cfg * cfg, struct pcap_pkthdr * header, const u_char * packet);
wiviz_host * gotHost(wiviz_cfg * cfg, u_char * mac, host_type type);
void fprint_mac(FILE * outf, u_char * mac, char * extra);
void print_mac(u_char * mac, char * extra);
void print_host(FILE * outf, wiviz_host * host);
void __cdecl signal_handler(int);
void readWL(wiviz_cfg * cfg);
void reloadConfig();

wiviz_cfg * global_cfg;

////////////////////////////////////////////////////////////////////////////////
int main(int argc, char * * argv) {
  pcap_t *handle;                        
  char *dev;                                
  char errbuf[PCAP_ERRBUF_SIZE]; 
  int stop = 0;
  int oldMonitor, newMonitor;
  struct pcap_pkthdr header;          
  const u_char *packet;                 
  wiviz_cfg cfg;
  int i;
  int defaultHopSeq[] = { 1, 3, 6, 8, 11 };
  
  global_cfg = &cfg;
  signal(SIGUSR1, &signal_handler);
  signal(SIGUSR2, &signal_handler);

  fprintf(stderr, "Wi-Viz infogathering daemon by Nathan True\n");
  
  memset(&cfg, 0, sizeof(wiviz_cfg));
  cfg.numHosts = 0;
  cfg.lastKeepAlive = time(NULL);
  cfg.channelHopping = 0;
  cfg.channelDwellTime = 1000;
  cfg.channelHopSeqLen = 5;
  memcpy(cfg.channelHopSeq, defaultHopSeq, sizeof(defaultHopSeq));

  wl_ioctl(WL_DEVICE, WLC_GET_MAGIC, &i, 4);
	if (i != WLC_IOCTL_MAGIC) {
		fprintf(stderr, "Wireless magic not correct, not querying wl for info\n");
		cfg.readFromWl = 0;
	}
	else {
	  cfg.readFromWl = 1;
	  wl_ioctl(WL_DEVICE, WLC_GET_MONITOR, &oldMonitor, 4);
	  newMonitor = 1;
	  wl_ioctl(WL_DEVICE, WLC_SET_MONITOR, &newMonitor, 4);
	}

  reloadConfig();

#ifndef OFFLINE
  dev = "prism0";
  handle = pcap_open_live(dev, BUFSIZ, 1, 0, errbuf);
#else
  dev = "c:\\cifsroot\\wdump2.pcap";
  handle = pcap_open_offline(dev, errbuf);
#endif

	if (cfg.readFromWl) {
	  readWL(&cfg);
	}

  if (!handle) {
    fprintf(stderr, "Failure to open pcap!\nErr=%s\n", errbuf);
    return -1;
    }
  while (!stop) {
    packet = pcap_next(handle, &header);
    if (!packet) break;
    dealWithPacket(&cfg, &header, packet);
    if (time(NULL) - cfg.lastKeepAlive > 30) stop = 1;
    }

  signal_handler(SIGUSR1);

  if (cfg.channelHopperPID) kill(cfg.channelHopperPID, SIGKILL);

  for (i = 0; i < MAX_HOSTS; i++) {
    print_host(stderr, cfg.hosts + i);
    if (cfg.hosts[i].occupied) printf("\n");
    if (cfg.hosts[i].apInfo) free(cfg.hosts[i].apInfo);
    if (cfg.hosts[i].staInfo) free(cfg.hosts[i].staInfo);
    }

  wl_ioctl(WL_DEVICE, WLC_SET_MONITOR, &oldMonitor, 4);

  pcap_close(handle);
  return 0;
  }

////////////////////////////////////////////////////////////////////////////////
void writeJavascript() { 
  int i;
  FILE * outf;
  wiviz_host * h;

  outf = fopen("/tmp/wiviz-pipe", "w");
  if (!outf) {
    fprintf(stderr, "Failure to open output file\n");
    return;
    }

  global_cfg->lastKeepAlive = time(NULL);
  
  if(global_cfg->readFromWl) readWL(global_cfg);
  
  fprintf(outf, "top.hosts = new Array(\n");
  for (i = 0; i < MAX_HOSTS; i++) {
    h = global_cfg->hosts + i;
    if (h->occupied == 0) continue;
    if (time(NULL) - h->lastSeen > HOST_TIMEOUT) {
      h->occupied = 0;
      }
    fprintf(outf, "  new Array(");
    print_host(outf, h);
    fprintf(outf, "),\n");
    }
  fprintf(outf, "new Array());\n");
  fprintf(outf, "var cfg_string = 'channel-");
  if (global_cfg->channelHopping) {
    fprintf(outf, "hopping");
    }
  else {
    fprintf(outf, "%i", global_cfg->curChannel);
    }
  fprintf(outf, "';\ntop.wiviz_callback(top.hosts, cfg_string);\n");
  fclose(outf);
  }

////////////////////////////////////////////////////////////////////////////////
void reloadConfig() {
  FILE * cnf;
  wiviz_cfg * cfg = global_cfg;
  char filebuffer[512];
  char * fbptr, * p, * v, * vv;
  int fblen, val;
  int hopCfgChanged = 0;
  int newHopSeq[12];
  int newHopSeqLen = 0;

  fprintf(stderr, "Loading config file\n");

  cnf = fopen("/tmp/wiviz-cfg", "r");
  if (!cnf) {
    fprintf(stderr, "Wiviz: No config file (/tmp/wiviz-cfg) present, using defaults\n");
    return;
    }

  fblen = fread(filebuffer, 1, 512, cnf);
  fclose(cnf);
  if (fblen >= 512) {
    fprintf(stderr, "Error reading config file\n");
    return;
    }
  filebuffer[fblen] = 0;
  fprintf(stderr, "Read %i bytes from config file\n", fblen);

  fbptr = filebuffer;

  while (fbptr < filebuffer + fblen && *fbptr != 0) {
    p = fbptr;
    //Find end of parameter
    for (; *fbptr != '=' && *fbptr != 0; fbptr++);
    *fbptr = 0;
    v = ++fbptr;
    //Find end of value
    for (; *fbptr != '&' && *fbptr != 0; fbptr++);
    *(fbptr++) = 0;
    fprintf(stderr, "Config: %s=%s\n", p, v);
    //Apply configuration
    if (!strcmp(p, "channelsel")) {
      //Channel selector
      cfg->channelHopping = 0;
      if (!strcmp(v, "hop")) {
        //Set channel hopping
        cfg->channelHopping = 1;
        hopCfgChanged = 1;
        }
      else if (!strcmp(v, "nochange")) {
        //Don't change anything, read channel from wireless card
        readWL(cfg);
        }
      else {
        val = atoi(v);
        if (val < 1 || val > 14) {
          fprintf(stderr, "Channel setting in config file invalid (%i)\n", cfg->curChannel);
        }
        else {
          cfg->curChannel = val;
          if (cfg->readFromWl) {
            if (wl_ioctl(WL_DEVICE, WLC_SET_CHANNEL, &cfg->curChannel, 4) < 0) {
              fprintf(stderr, "Channel set to %i failed\n", cfg->curChannel);
              }
            }
          else {
            fprintf(stderr, "Can't set channel, no Broadcom wireless device present\n");
            }
          }
        }
      }
    if (!strcmp(p, "hopdwell")) {
      val = atoi(v);
      if (val < 100) val = 100;
      if (val > 30000) val = 30000;
      if (cfg->channelDwellTime != val) hopCfgChanged = 1;
      cfg->channelDwellTime = val;
      }
    if (!strcmp(p, "hopseq")) {
      cfg->channelHopSeqLen = 0;
      while (v < fbptr) {
        for (vv = v; *vv != ',' && *vv != 0; vv++);
        if (*vv == 0) {
          cfg->channelHopSeq[cfg->channelHopSeqLen++] = atoi(v);
          break;          
          }
        *vv = 0;
        cfg->channelHopSeq[cfg->channelHopSeqLen++] = atoi(v);
        v = vv + 1;
        }
      }
    /*
    if (!strcmp(p, "")) {
      }
    */
    }
  //Apply channel hopper settings
  if (cfg->channelHopping == 0 && cfg->channelHopperPID) {
    kill(cfg->channelHopperPID, SIGKILL);
    cfg->channelHopperPID = 0;
    }
  if (cfg->channelHopping == 1 && hopCfgChanged) {
    if (cfg->channelHopperPID) kill(cfg->channelHopperPID, SIGKILL);
    if ((cfg->channelHopperPID = fork()) == 0) {
      channelHopper(cfg);
      }
    }
  }

////////////////////////////////////////////////////////////////////////////////
void __cdecl signal_handler(int signum) {
  if (signum == SIGUSR1) writeJavascript();
  if (signum == SIGUSR2) reloadConfig();
  }

////////////////////////////////////////////////////////////////////////////////
void dealWithPacket(wiviz_cfg * cfg, struct pcap_pkthdr * header, const u_char * packet) {
  ieee802_11_hdr * hWifi;
  prism_hdr * hPrism;
  wiviz_host * host;
  wiviz_host * emergebss;
  host_type type = typeUnknown;
  int wfType;
  int rssi = 0;
  int to_ds, from_ds;
  prism_did * i;
  ieee_802_11_tag * e;
  ieee_802_11_mgt_frame * m;
  char * src = "\0\0\0\0\0\0";
  char * dst = "\0\0\0\0\0\0";
  char * bss = "\0\0\0\0\0\0";
  char * ssid = "";
  int channel = 0;
  int adhocbeacon = 0;
  u_char ssidlen = 0;
  ap_enc_type encType = aetUnknown;

  if (!packet) return;
  if (header->len < sizeof(prism_hdr) + sizeof(ieee802_11_hdr)) return;
  hPrism = (prism_hdr *) packet;
  hWifi = (ieee802_11_hdr *) (packet + (hPrism->msg_length));

  //Parse the prism DIDs
  i = (prism_did *)((char *)hPrism + sizeof(prism_hdr));
  while ((int)i < (int)hWifi) {
    if (i->did == pdn_rssi) rssi = *(int *)(i+1);
    i = (prism_did *) ((int)(i+1) + i->length);
    }

  //Establish the frame type
  wfType = ((hWifi->frame_control & 0xF0) >> 4) + ((hWifi->frame_control & 0xC) << 2);
  switch (wfType) {
    case mgt_assocRequest:
    case mgt_reassocRequest:
    case mgt_probeRequest:
      type = typeSta;
      src=hWifi->addr2;
      dst=hWifi->addr1;
      break;
    case mgt_assocResponse:
    case mgt_reassocResponse:
    case mgt_probeResponse:
    case mgt_beacon:
      src=hWifi->addr2;
      dst=hWifi->addr1;
      bss=hWifi->addr3;
      type = typeAP;
      break;
    }
  to_ds = hWifi->flags & IEEE80211_TO_DS;
  from_ds = hWifi->flags & IEEE80211_FROM_DS;
  if ((wfType & 0xF0) == 0x20 && (wfType & 0xF) < 4) {
    //Data frame
    src=hWifi->addr2;
    dst=hWifi->addr1;
    if (!from_ds) type = typeSta;
      else type = typeAP;
    if (!to_ds && !from_ds) bss = hWifi->addr3;
    if (to_ds && !from_ds) bss = hWifi->addr1;
    if (!to_ds && from_ds) bss = hWifi->addr2;
    }
  if (type == typeUnknown) return;

  //Parse the 802.11 tags
  if (wfType == mgt_probeResponse || wfType == mgt_beacon) {
    m = (ieee_802_11_mgt_frame *) (hWifi + 1);
    if (m->caps & MGT_CAPS_IBSS) {
      type = typeSta;
      adhocbeacon = 1;
      }
    if (m->caps & MGT_CAPS_WEP) encType = aetEncWEP;
    else encType = aetUnencrypted;
    e = (ieee_802_11_tag *) ((int) m + sizeof(ieee_802_11_mgt_frame));
    while ((u_int)e < (u_int)packet + header->len) {
      if (e->tag == tagSSID) {
        ssidlen = e->length;
        ssid = (char *)(e + 1);
        }
      if (e->tag == tagChannel) {
        channel = *(char *)(e + 1);
        }
      if (e->tag == tagVendorSpecific) {
        if (e->length >= 4 && memcmp(e + 1, "\x00\x50\xf2\x01", 4) == 0) {
          //WPA encryption
          encType = aetEncWPA;
          }
        }
      e = (ieee_802_11_tag *) ((int)(e + 1) + e->length);
      }
    }
  
  //Look up the host in the hash table
  host = gotHost(cfg, src, type);

  //Add any info we received
  if (host->RSSI) {
    host->RSSI = host->RSSI * 9 / 10 + (-rssi * 10);
    }
  else {
    host->RSSI = -rssi * 100;
    }
  if (type == typeSta) {
    if (nonzeromac(bss)) {
      memcpy(host->staInfo->connectedBSSID, bss, 6);
      host->staInfo->state = ssAssociated;
      emergebss = gotHost(cfg, bss, typeAP);
      if (emergebss->RSSI == 0) emergebss->RSSI = 10000;
      memcpy(emergebss->apInfo->bssid, bss, 6);
      if (adhocbeacon) {
        emergebss->type = typeAdhocHub;
        if (ssidlen > 0 && ssidlen <= 32) {
          memcpy(emergebss->apInfo->ssid, ssid, ssidlen);
          emergebss->apInfo->ssidlen = ssidlen;
          }
        if (channel) emergebss->apInfo->channel = channel;
        emergebss->apInfo->flags = hWifi->flags;
        emergebss->RSSI = host->RSSI;
        if (encType != aetUnknown) emergebss->apInfo->encryption = encType;
        }
      }
    if (wfType == mgt_probeRequest && host->staInfo->state == ssUnknown) host->staInfo->state = ssUnassociated;
    }
  if (type == typeAP) {
    if (nonzeromac(bss)) {
      memcpy(host->apInfo->bssid, bss, 6);
      }
    if (ssidlen > 0 && ssidlen <= 32) {
      memcpy(host->apInfo->ssid, ssid, ssidlen);
      host->apInfo->ssidlen = ssidlen;
      }
    if (channel) host->apInfo->channel = channel;
    host->apInfo->flags = hWifi->flags;
    if (encType != aetUnknown) host->apInfo->encryption = encType;
    }
  }

////////////////////////////////////////////////////////////////////////////////
void print_mac(u_char * mac, char * extra) {
  fprint_mac(stdout, mac, extra);
  }

////////////////////////////////////////////////////////////////////////////////
void fprint_mac(FILE * outf, u_char * mac, char * extra) {
  fprintf(outf, "%02X:%02X:%02X:%02X:%02X:%02X%s",
      mac[0] & 0xFF,
      mac[1] & 0xFF,
      mac[2] & 0xFF,
      mac[3] & 0xFF,
      mac[4] & 0xFF,
      mac[5] & 0xFF,
      extra);
  }

////////////////////////////////////////////////////////////////////////////////
#define MAX_PROBES MAX_HOSTS/2
wiviz_host * gotHost(wiviz_cfg * cfg, u_char * mac, host_type type) {
  int i = (mac[5] + (mac[4] << 8)) % MAX_HOSTS;
  int c = 0;
  wiviz_host * h = cfg->hosts + i;
  while (h->occupied && memcmp(h->mac, mac, 6)) {
    i++; h++; c++;
    if (i >= MAX_HOSTS) {
      i = 0;
      h = cfg->hosts;
      }
    if (c > MAX_PROBES) break;
    } 
  if (!h->occupied) {
    fprintf(stderr, "New host, ");
    fprint_mac(stderr, mac, ", type=");
    fprintf(stderr, "%s\n", (type==typeAP) ? "AP" : ((type==typeSta) ? "Sta" : "Unk"));
    }
  h->occupied = 1;
  h->lastSeen = time(NULL);
  h->type = type;
  memcpy(h->mac, mac, 6);
  if (h->type == typeAP && !h->apInfo) {
    h->apInfo = (ap_info *) malloc(sizeof(ap_info));
    memset(h->apInfo, 0, sizeof(ap_info));
    }
  if (h->type == typeSta && !h->staInfo) {
    h->staInfo = (sta_info *) malloc(sizeof(sta_info));
    memset(h->staInfo, 0, sizeof(sta_info));
    }
  return h;
  }

////////////////////////////////////////////////////////////////////////////////
void print_host(FILE * outf, wiviz_host * host) {
  int i;

  if (!host->occupied) return;
  fprintf(outf, "'");
  fprint_mac(outf, host->mac, "'");
  fprintf(outf, ", -%i, '", host->RSSI / 100);
  switch (host->type) {
    case typeAP:  fprintf(outf, "ap"); break;
    case typeSta: fprintf(outf, "sta"); break;
    case typeAdhocHub: fprintf(outf, "adhoc"); break;
    }
  if (host->type == typeSta) {
    switch(host->staInfo->state) {
      case ssAssociated:
        fprintf(outf, "-assoc-");
        fprint_mac(outf, host->staInfo->connectedBSSID, "");
        break;
      case ssUnassociated:
        fprintf(outf, "-unassoc");
      }
    }
  if (host->type == typeAP || host->type == typeAdhocHub) {
    fprintf(outf, "-channel-%i-ssid-", host->apInfo->channel & 0xFF);
    for (i = 0; i < host->apInfo->ssidlen; i++) {
      fprintf(outf, "\\x%02X", *((char *)host->apInfo->ssid + i) & 0xFF);
    	}
    switch (host->apInfo->encryption) {
      case aetUnknown: fprintf(outf, "-?enc-?alg"); break;
      case aetUnencrypted: fprintf(outf, "-unenc-na"); break;
      case aetEncUnknown: fprintf(outf, "-enc-unknown"); break;
      case aetEncWEP: fprintf(outf, "-enc-wep"); break;
      case aetEncWPA: fprintf(outf, "-enc-wpa"); break;
      }
    }
  fprintf(outf, "', %i", time(0) - host->lastSeen);
  }

////////////////////////////////////////////////////////////////////////////////
#define MAX_STA_COUNT 64
void readWL(wiviz_cfg * cfg) {
	int ap, i;
	wiviz_host * host, * sta;
	uchar mac[6];
	wlc_ssid_t ssid; 
	channel_info_t channel;
	maclist_t * macs;
  sta_rssi_t starssi;
	
	get_mac(WL_DEVICE, mac);
	printf("AP mac: ");
	print_mac(mac, "\n");
	if (!nonzeromac(mac)) return;
	wl_ioctl(WL_DEVICE, WLC_GET_AP, &ap, 4);
	if (ap) {
		host = gotHost(cfg, mac, typeAP);
		wl_ioctl(WL_DEVICE, WLC_GET_BSSID, host->apInfo->bssid, 6);
		wl_ioctl(WL_DEVICE, WLC_GET_SSID, &ssid, sizeof(wlc_ssid_t));
		memcpy(host->apInfo->ssid, ssid.SSID, 32);
		host->apInfo->ssidlen = ssid.SSID_len;
		host->RSSI = 0;
		wl_ioctl(WL_DEVICE, WLC_GET_CHANNEL, &channel, sizeof(channel_info_t));
		host->apInfo->channel = channel.hw_channel;
		macs = (maclist_t *) malloc(4 + MAX_STA_COUNT * sizeof(ether_addr_t));
		macs->count = MAX_STA_COUNT;
		if (wl_ioctl(WL_DEVICE, WLC_GET_ASSOCLIST, macs, 4 + MAX_STA_COUNT * sizeof(ether_addr_t)) > -1) {
			for (i = 0; i < macs->count; i++) {
			  sta = gotHost(cfg, (char *)&macs->ea[i], typeSta);
        memcpy(starssi.mac, &macs->ea[i], 6);
        starssi.RSSI = 3000;
        starssi.zero_ex_forty_one = 0x41;
				if (wl_ioctl(WL_DEVICE, WLC_GET_RSSI, &starssi, 12) < 0) printf("rssifail\n");
				sta->RSSI = -starssi.RSSI * 100;
				sta->staInfo->state = ssAssociated;
				memcpy(sta->staInfo->connectedBSSID, host->apInfo->bssid, 6);
			}
		}
	}
	else {
		host = gotHost(cfg, mac, typeSta);
		host->RSSI = 0;
		if (wl_ioctl(WL_DEVICE, WLC_GET_BSSID, &host->staInfo->connectedBSSID, 6) < 0) {
		  host->staInfo->state = ssUnassociated;
		}
		else {
		  host->staInfo->state = ssAssociated;
		}
	}
  if (wl_ioctl(WL_DEVICE, WLC_GET_CHANNEL, &channel, sizeof(channel_info_t)) >= 0) {
    cfg->curChannel = channel.hw_channel;
    fprintf(stderr, "Current channel is %i\n", cfg->curChannel);
    }
}