1 |
#!/usr/bin/perl |
2 |
|
3 |
use strict; |
4 |
use IO::Socket::Multicast; |
5 |
use Data::Dump qw/dump/; |
6 |
use Getopt::Long; |
7 |
|
8 |
my $GROUP = '224.0.0.103'; |
9 |
my $PORT = '3235'; |
10 |
|
11 |
my $debug = 0; |
12 |
my $quiet = 1; |
13 |
my $verbose = 0; |
14 |
|
15 |
my $resend_search_delay = 3; |
16 |
my $tftp_path = '/srv/tftp/'; |
17 |
|
18 |
GetOptions( |
19 |
"port=i" => \$PORT, |
20 |
"group=s" => \$GROUP, |
21 |
"debug!" => \$debug, |
22 |
"quiet!" => \$quiet, |
23 |
"verbose!" => \$verbose, |
24 |
"search=i" => \$resend_search_delay, |
25 |
"tftp=s" => \$tftp_path, |
26 |
); |
27 |
|
28 |
$quiet = 0 if $verbose; |
29 |
|
30 |
# tab-delimited list of user id/passwd to try on ants |
31 |
my @try_accounts = ( "Administrator\t" ); |
32 |
|
33 |
my $passwd_path = $0; |
34 |
$passwd_path =~ s/[^\/]+$/passwd/; |
35 |
|
36 |
if (-e $passwd_path) { |
37 |
open(my $fh, $passwd_path) || die "can't open $passwd_path: $!"; |
38 |
while(<$fh>) { |
39 |
chomp; |
40 |
next if /^#/ || /^$/ || /^\s+$/; |
41 |
if (/^\S+\t\S+$/) { |
42 |
push @try_accounts, $_; |
43 |
} else { |
44 |
warn "invalid $passwd_path entry: $_\n"; |
45 |
} |
46 |
} |
47 |
print "found ", $#try_accounts + 1, " accounts to try on password protected ants\n"; |
48 |
} |
49 |
|
50 |
warn "search for ants every ${resend_search_delay}s\ntftp server path: $tftp_path\n"; |
51 |
|
52 |
sub fw { |
53 |
my ($board, $offset,$len) = @_; |
54 |
open(my $fh, "$tftp_path/$board") || die "Can't open image $tftp_path/$board: $!"; |
55 |
my $b; |
56 |
seek($fh, $offset, 0) || die "can't seek to $offset: $!"; |
57 |
read($fh, $b, $len) || die "can't read $len bytes from $offset: $!"; |
58 |
close($fh); |
59 |
return $b; |
60 |
} |
61 |
|
62 |
sub fw_build { |
63 |
my $board_name = shift || return 0; |
64 |
my $v = join('.', unpack('CCCC',fw($board_name,0x20,4)) ); |
65 |
print "# fw_build $board_name $v\n" unless $quiet; |
66 |
return $v; |
67 |
} |
68 |
|
69 |
sub fw_exists { |
70 |
my $board = shift; |
71 |
return -e "$tftp_path/$board"; |
72 |
} |
73 |
|
74 |
my $sock = IO::Socket::Multicast->new(LocalPort=>$PORT,ReuseAddr=>1); |
75 |
$sock->mcast_add($GROUP) || die "Couldn't set group: $!\n"; |
76 |
$sock->mcast_ttl(1); |
77 |
|
78 |
sub ant2hash { |
79 |
my $data = shift; |
80 |
my $hash; |
81 |
map { |
82 |
if ( m/:/ ) { |
83 |
my ($n,$v) = split(/:/,$_,2); |
84 |
$hash->{$n} = $v; |
85 |
} |
86 |
} split(/[\n\r]/, $data); |
87 |
return $hash; |
88 |
} |
89 |
|
90 |
sub mdap_send { |
91 |
my $data = shift; |
92 |
|
93 |
my $xor = 0; |
94 |
map { $xor ^= ord($_) } split(//,$data); |
95 |
$data .= sprintf('%02X', $xor); |
96 |
|
97 |
$sock->mcast_send( $data, "${GROUP}:${PORT}" ); |
98 |
if ($debug) { |
99 |
warn ">> ", dump( $data ), $/; |
100 |
} elsif( ! $quiet ) { |
101 |
$data =~ s/\s+/ /gi; |
102 |
warn ">> ", substr($data,0,70), $/; |
103 |
} |
104 |
} |
105 |
|
106 |
my $ant_passwd; |
107 |
|
108 |
sub ant_credentials { |
109 |
my $ant = shift || die "no ant?"; |
110 |
my $i = $ant_passwd->{$ant} || 0; |
111 |
my ($user_id,$user_pwd) = split(/\t/, $try_accounts[$i]); |
112 |
#warn "ant $ant as [$i] $user_id / $user_pwd\n"; |
113 |
return ($user_id,$user_pwd); |
114 |
} |
115 |
|
116 |
my $ant_unknown_password; |
117 |
my $ant_ok_password; |
118 |
|
119 |
sub ant_another_passwd { |
120 |
my $ant = shift || die "no ant?"; |
121 |
return 0 if ( $ant_unknown_password->{$ant} ); |
122 |
|
123 |
$ant_passwd->{$ant}++; |
124 |
|
125 |
if ( $ant_passwd->{$ant} > $#try_accounts ) { |
126 |
print "$ant ant with unknown password\n"; |
127 |
$ant_unknown_password->{$ant}++; |
128 |
$ant_passwd->{$ant} = 0; |
129 |
return 0; |
130 |
} |
131 |
return 1; |
132 |
} |
133 |
|
134 |
my $once; |
135 |
|
136 |
sub once { |
137 |
my $m = join('', @_); |
138 |
$once->{$m}++; |
139 |
print $m if ($once->{$m} == 1); |
140 |
} |
141 |
|
142 |
local $SIG{ALRM} = sub { |
143 |
mdap_send("ANT-SEARCH MDAP/1.1\r\n"); |
144 |
alarm( $resend_search_delay ); |
145 |
}; |
146 |
|
147 |
alarm( $resend_search_delay ); |
148 |
|
149 |
mdap_send("ANT-SEARCH MDAP/1.1\r\n"); |
150 |
|
151 |
while (1) { |
152 |
my $data; |
153 |
next unless $sock->recv($data,1024); |
154 |
|
155 |
if ( $data =~ m#^(INFO|ANT-SEARCH|EXEC-CLI|REPLY-\S+)\s(MDAP)/(\d+\.\d+)# ) { |
156 |
|
157 |
my ($type,$proto,$mdap_ver) = ($1,$2,$3); |
158 |
|
159 |
my $h = ant2hash($data); |
160 |
|
161 |
my $client_version = $h->{'MDAP-VERSION'}; |
162 |
$mdap_ver = $client_version if ($client_version); |
163 |
|
164 |
print "<< $type $proto/$mdap_ver << ", length($data), " bytes\n" unless $quiet; |
165 |
|
166 |
warn dump($h),$/ if ($debug); |
167 |
|
168 |
# we are getting our own messages (since our source port |
169 |
# is same as destination) |
170 |
next if ( $type =~ m#^(INFO|ANT-SEARCH|EXEC-CLI)# ); |
171 |
|
172 |
my $ant = $h->{'ANT-ID'} || die "no ANT-ID in ", dump( $h ); |
173 |
my $seq_nr = $h->{'SEQ-NR'}; |
174 |
#warn "SEQ-NR: $seq_nr ok: ",$ant_ok_password->{$ant},"\n" if ($seq_nr); |
175 |
|
176 |
my ($user_id,$user_pwd) = ant_credentials( $ant ); |
177 |
|
178 |
if ($type eq 'REPLY-ANT-SEARCH') { |
179 |
mdap_send("INFO MDAP/$mdap_ver\r\nSEQ-NR:1\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n") unless ( $ant_unknown_password->{$ant} ); |
180 |
} elsif ($type eq 'REPLY-INFO') { |
181 |
|
182 |
if ( $seq_nr < 0 ) { |
183 |
if ( $ant_ok_password ) { |
184 |
$ant_ok_password->{$ant} = 0; |
185 |
} elsif ( ant_another_passwd( $ant ) ) { |
186 |
($user_id,$user_pwd) = ant_credentials( $ant ); |
187 |
mdap_send("INFO MDAP/$mdap_ver\r\nSEQ-NR:1\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n"); |
188 |
} |
189 |
next; |
190 |
} else { |
191 |
$ant_ok_password->{$ant}++; |
192 |
} |
193 |
|
194 |
my $board = $h->{'_BOARD_NAME'} || die "no _BOARD_NAME?"; |
195 |
if ( fw_exists( $board ) ) { |
196 |
my $build = $h->{'_BUILD'} || die "no _BUILD?"; |
197 |
my $new_build = fw_build( $board ); |
198 |
if ( $build ne $new_build ) { |
199 |
print "+ $ant version $build -> $new_build\n"; |
200 |
mdap_send("EXEC-CLI MDAP/$mdap_ver\r\nCLI-CMD:software upgrade\r\nSEQ-NR:1\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n"); |
201 |
} else { |
202 |
once "$ant OK version $build", |
203 |
$ant_unknown_password->{$ant} ? ' with unknown password' : |
204 |
$ant_ok_password->{$ant} ? ' password protected' : |
205 |
'', |
206 |
"\n"; |
207 |
} |
208 |
} else { |
209 |
once "!! NO FIRMWARE for $board in $tftp_path for ant $ant, skipping update\n"; |
210 |
} |
211 |
} elsif ( $type eq 'REPLY-EXEC-CLI' && $h->{'SEQ-NR'} == 1 ) { |
212 |
print "+ $ant bootp mode re-flash started\n"; |
213 |
mdap_send("EXEC-CLI MDAP/$mdap_ver\r\nSEQ-NR:2\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n"); |
214 |
$ant_unknown_password->{$ant} = 0; |
215 |
$ant_passwd->{$ant} = 0; |
216 |
$ant_ok_password->{$ant} = 0; |
217 |
} else { |
218 |
print "!! reply ignored ", dump( $h ), $/; |
219 |
} |
220 |
|
221 |
} else { |
222 |
warn "<=" x 15, "\n", $data, "\n", "<=" x 15, "\n"; |
223 |
} |
224 |
} |