1 |
#!/usr/bin/perl |
2 |
|
3 |
use warnings; |
4 |
use strict; |
5 |
use IO::Socket::Multicast; |
6 |
use Data::Dump qw/dump/; |
7 |
use Getopt::Long; |
8 |
|
9 |
use lib './lib'; |
10 |
use MDAP; |
11 |
|
12 |
my $GROUP = '224.0.0.103'; |
13 |
my $PORT = '3235'; |
14 |
|
15 |
#my $debug = 0; # from MDAP |
16 |
my $quiet = 1; |
17 |
my $verbose = 0; |
18 |
my $credentials = 0; |
19 |
|
20 |
my $plugins = 1; |
21 |
|
22 |
my $resend_search_delay = 3; |
23 |
my $tftp_path = '/srv/tftp/'; |
24 |
|
25 |
my $flashed_cmd = 'system config led=flash'; |
26 |
|
27 |
GetOptions( |
28 |
"port=i" => \$PORT, |
29 |
"group=s" => \$GROUP, |
30 |
"debug!" => \$debug, |
31 |
"quiet!" => \$quiet, |
32 |
"verbose!" => \$verbose, |
33 |
"search=i" => \$resend_search_delay, |
34 |
"tftp=s" => \$tftp_path, |
35 |
"credentials" => \$credentials, |
36 |
"exec=s" => \$flashed_cmd, |
37 |
'plugins!' => \$plugins, |
38 |
); |
39 |
|
40 |
$quiet = 0 if $verbose; |
41 |
$credentials = 1 if $debug; |
42 |
|
43 |
# tab-delimited list of user id/passwd to try on ants |
44 |
my @try_accounts = ( "Administrator\t" ); |
45 |
|
46 |
my $passwd_path = $0; |
47 |
$passwd_path =~ s/[^\/]+$/passwd/; |
48 |
|
49 |
if (-e $passwd_path) { |
50 |
open(my $fh, $passwd_path) || die "can't open $passwd_path: $!"; |
51 |
while(<$fh>) { |
52 |
chomp; |
53 |
next if /^#/ || /^$/ || /^\s+$/; |
54 |
if (/^\S+\s+\S+$/) { |
55 |
push @try_accounts, $_; |
56 |
} else { |
57 |
warn "invalid $passwd_path entry: $_\n"; |
58 |
} |
59 |
} |
60 |
print "found ", $#try_accounts + 1, " accounts to try on password protected ants", |
61 |
$credentials ? " and display credentials" : "", "\n"; |
62 |
} |
63 |
|
64 |
warn "search for ants every ${resend_search_delay}s\ntftp server path: $tftp_path\nflashed to current version: $flashed_cmd\n"; |
65 |
|
66 |
sub fw { |
67 |
my ($board, $offset,$len) = @_; |
68 |
open(my $fh, "$tftp_path/$board") || die "Can't open image $tftp_path/$board: $!"; |
69 |
my $b; |
70 |
seek($fh, $offset, 0) || die "can't seek to $offset: $!"; |
71 |
read($fh, $b, $len) || die "can't read $len bytes from $offset: $!"; |
72 |
close($fh); |
73 |
return $b; |
74 |
} |
75 |
|
76 |
sub fw_build { |
77 |
my $board_name = shift || return 0; |
78 |
my $v = join('.', unpack('CCCC',fw($board_name,0x20,4)) ); |
79 |
print "# fw_build $board_name $v\n" unless $quiet; |
80 |
return $v; |
81 |
} |
82 |
|
83 |
sub fw_exists { |
84 |
my $board = shift; |
85 |
return -e "$tftp_path/$board"; |
86 |
} |
87 |
|
88 |
my $sock = IO::Socket::Multicast->new(LocalPort=>$PORT,ReuseAddr=>1); |
89 |
$sock->mcast_add($GROUP) || die "Couldn't set group: $!\n"; |
90 |
$sock->mcast_ttl(1); |
91 |
|
92 |
sub ant2hash { |
93 |
my $data = shift; |
94 |
my $hash; |
95 |
map { |
96 |
if ( m/:/ ) { |
97 |
my ($n,$v) = split(/:/,$_,2); |
98 |
$hash->{$n} = $v; |
99 |
} |
100 |
} split(/[\n\r]/, $data); |
101 |
return $hash; |
102 |
} |
103 |
|
104 |
sub mdap_send { |
105 |
my $data = shift; |
106 |
|
107 |
my $xor = 0; |
108 |
map { $xor ^= ord($_) } split(//,$data); |
109 |
$data .= sprintf('%02X', $xor); |
110 |
|
111 |
$sock->mcast_send( $data, "${GROUP}:${PORT}" ); |
112 |
if ($debug) { |
113 |
warn ">> ${GROUP}:${PORT} >> ", dump( $data ), $/; |
114 |
} elsif( ! $quiet ) { |
115 |
$data =~ s/\s+/ /gi; |
116 |
warn ">> ", substr($data,0,70), $/; |
117 |
} |
118 |
} |
119 |
|
120 |
my $ant_passwd; |
121 |
my $ant_unknown_password; |
122 |
my $ant_ok_password; |
123 |
my $ant_flashing; |
124 |
|
125 |
sub ant_credentials { |
126 |
my $ant = shift || die "no ant?"; |
127 |
my $i = $ant_passwd->{$ant} || 0; |
128 |
my ($user_id,$user_pwd) = split(/\t/, $try_accounts[$i]); |
129 |
#warn "ant $ant as [$i] $user_id / $user_pwd\n"; |
130 |
return ($user_id,$user_pwd); |
131 |
} |
132 |
|
133 |
sub ant_unknown_password { |
134 |
my $ant = shift || die "no ant?"; |
135 |
if ( $ant_unknown_password->{$ant} ) { |
136 |
$ant_unknown_password->{$ant}--; |
137 |
} |
138 |
return $ant_unknown_password->{$ant}; |
139 |
} |
140 |
|
141 |
sub ant_another_passwd { |
142 |
my $ant = shift || die "no ant?"; |
143 |
|
144 |
return 0 if ant_unknown_password( $ant ); |
145 |
return 0 if $ant_ok_password->{$ant}; |
146 |
|
147 |
$ant_passwd->{$ant}++; |
148 |
|
149 |
if ( $ant_passwd->{$ant} > $#try_accounts ) { |
150 |
print "$ant ant with unknown password\n"; |
151 |
$ant_unknown_password->{$ant} = 10; |
152 |
$ant_passwd->{$ant} = 0; |
153 |
return 0; |
154 |
} |
155 |
return 1; |
156 |
} |
157 |
|
158 |
sub forget_ant { |
159 |
my $ant = shift || die "no ant?"; |
160 |
delete $ant_unknown_password->{$ant}; |
161 |
delete $ant_passwd->{$ant}; |
162 |
delete $ant_ok_password->{$ant}; |
163 |
} |
164 |
|
165 |
my $status = ''; |
166 |
|
167 |
sub status { |
168 |
my $m = join('', @_); |
169 |
if ($m ne $status) { |
170 |
print $m; |
171 |
$status = $m; |
172 |
} |
173 |
} |
174 |
|
175 |
local $SIG{ALRM} = sub { |
176 |
mdap_send("ANT-SEARCH MDAP/1.1\r\n"); |
177 |
alarm( $resend_search_delay ); |
178 |
}; |
179 |
|
180 |
alarm( $resend_search_delay ); |
181 |
|
182 |
mdap_send("ANT-SEARCH MDAP/1.1\r\n"); |
183 |
|
184 |
while (1) { |
185 |
my $data; |
186 |
next unless $sock->recv($data,1024); |
187 |
|
188 |
if ( $data =~ m#^(INFO|ANT-SEARCH|EXEC-CLI|REPLY-\S+)\s(MDAP)/(\d+\.\d+)# ) { |
189 |
|
190 |
my ($type,$proto,$mdap_ver) = ($1,$2,$3); |
191 |
|
192 |
my $h = ant2hash($data); |
193 |
|
194 |
my $client_version = $h->{'MDAP-VERSION'}; |
195 |
$mdap_ver = $client_version if ($client_version); |
196 |
|
197 |
print "<< $type $proto/$mdap_ver << ", length($data), " bytes\n" unless $quiet; |
198 |
|
199 |
warn dump( $data, $h ),$/ if ($debug); |
200 |
|
201 |
# we are getting our own messages (since our source port |
202 |
# is same as destination) |
203 |
next if ( $type =~ m#^(INFO|ANT-SEARCH|EXEC-CLI)# ); |
204 |
|
205 |
my $ant = $h->{'ANT-ID'} || die "no ANT-ID in ", dump( $h ); |
206 |
my $seq_nr = $1 if (defined $h->{'SEQ-NR'} && $h->{'SEQ-NR'} =~ m/^-*(\d)+/); |
207 |
#warn "SEQ-NR: $seq_nr ok: ",$ant_ok_password->{$ant},"\n" if ($seq_nr); |
208 |
|
209 |
my ($user_id,$user_pwd) = ant_credentials( $ant ); |
210 |
|
211 |
if ($type eq 'REPLY-ANT-SEARCH') { |
212 |
mdap_send("INFO MDAP/$mdap_ver\r\nSEQ-NR:1\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n") unless ant_unknown_password( $ant ); |
213 |
} elsif ($type eq 'REPLY-INFO') { |
214 |
|
215 |
if ( $seq_nr < 0 ) { |
216 |
# if ( $ant_ok_password ) { |
217 |
# $ant_ok_password->{$ant} = 0; |
218 |
# } elsif ( ant_another_passwd( $ant ) ) { |
219 |
if ( ant_another_passwd( $ant ) ) { |
220 |
($user_id,$user_pwd) = ant_credentials( $ant ); |
221 |
mdap_send("INFO MDAP/$mdap_ver\r\nSEQ-NR:1\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n"); |
222 |
} |
223 |
next; |
224 |
} else { |
225 |
$ant_ok_password->{$ant}++; |
226 |
print "$ant credentials $user_id $user_pwd\n" if ( $credentials && $ant_ok_password->{$ant} == 1 ) || $debug; |
227 |
} |
228 |
|
229 |
my $board = $h->{'_BOARD_NAME'} || die "no _BOARD_NAME?"; |
230 |
if ( fw_exists( $board ) ) { |
231 |
my $build = $h->{'_BUILD'} || die "no _BUILD?"; |
232 |
my $new_build = fw_build( $board ); |
233 |
if ( $build ne $new_build ) { |
234 |
print "+ $ant version $build -> $new_build\n"; |
235 |
mdap_send("EXEC-CLI MDAP/$mdap_ver\r\nCLI-CMD:software upgrade\r\nSEQ-NR:1\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n"); |
236 |
$ant_flashing->{$ant}++; |
237 |
next; |
238 |
} else { |
239 |
once "$ant OK version $build", |
240 |
$ant_unknown_password->{$ant} ? ' with unknown password' : |
241 |
$ant_passwd->{$ant} ? ' password protected' : |
242 |
''; |
243 |
|
244 |
$ant_flashing->{$ant} = 0; |
245 |
# green|red|orange|flash|off |
246 |
mdap_send("EXEC-CLI MDAP/$mdap_ver\r\nCLI-CMD:$flashed_cmd\r\nSEQ-NR:1\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n"); |
247 |
my $waiting = 0; |
248 |
my $count = 0; |
249 |
map { |
250 |
$waiting++ if ($ant_flashing->{$_}); |
251 |
$count++; |
252 |
} keys %$ant_flashing; |
253 |
if ($waiting == 0) { |
254 |
status "ALL $count ANTS FLASHED to $build\n"; |
255 |
$ant_flashing = undef; |
256 |
} else { |
257 |
status "$waiting of $count ants still flasing upto $build\n"; |
258 |
} |
259 |
} |
260 |
|
261 |
if ( $plugins ) { |
262 |
foreach my $plugin ( MDAP->plugins ) { |
263 |
warn "## calling $plugin\n" if $debug; |
264 |
if ( my $command = $plugin->check( $h ) ) { |
265 |
|
266 |
warn ">> $plugin $ant ", |
267 |
$h->{'ANT-NAME'}, " ", |
268 |
$h->{'_BUILD'}, " ", |
269 |
"\t:$command\n"; |
270 |
|
271 |
mdap_send("EXEC-CLI MDAP/$mdap_ver\r\nCLI-CMD:$command\r\nSEQ-NR:1\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n"); |
272 |
last; |
273 |
} |
274 |
} |
275 |
} |
276 |
|
277 |
} else { |
278 |
once "!! NO FIRMWARE for $board in $tftp_path for ant $ant, skipping update"; |
279 |
} |
280 |
|
281 |
} elsif ( $type eq 'REPLY-EXEC-CLI' ) { |
282 |
print "##<< $type\n$data\n" if $debug; |
283 |
if ( $seq_nr == 1 ) { |
284 |
mdap_send("EXEC-CLI MDAP/$mdap_ver\r\nSEQ-NR:2\r\nTO-ANT:$ant\r\nUSER-ID:$user_id\r\nUSER-PWD:$user_pwd\r\n"); |
285 |
forget_ant( $ant ) if ( $ant_flashing->{$ant} ); |
286 |
} elsif ( $seq_nr < 0 ) { |
287 |
warn "EXEC-CLI failed: $data\n"; |
288 |
} |
289 |
|
290 |
} else { |
291 |
print "!! reply $type ignored ", dump( $h ), $/; |
292 |
} |
293 |
|
294 |
} else { |
295 |
warn "<=" x 15, "\n", $data, "\n", "<=" x 15, "\n"; |
296 |
} |
297 |
} |