C / C++ / MFC

jkirkerx wrote:

I just need to extract the server name and version number of sql out of the byte array.

BOOL CA_SQLServer_Scan::_socket_Enumerate_SQLServers( void ) 
{
	int iResult;
    WSADATA wsaData;
	
	char recvbuf[256];
    int rv = 0; 
	int recvbuflen = 256;
	int bytesReceived = 0;
					    
    iResult = WSAStartup(MAKEWORD(2,2), &wsaData);
    if (iResult != NO_ERROR) {
        return FALSE;
    }		
	//////////////////////////////////////////////////////////////////////////////////////
	// Send Data Socket
	SOCKET sUDPSocket = INVALID_SOCKET;
	struct sockaddr_in sTargetDevice;
	char cBuffer[] = {0x02};
	
	sUDPSocket = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
    if (sUDPSocket == INVALID_SOCKET) {
        int iSocketError = WSAGetLastError();
		goto wsaCleanup;
    }
   
	ZeroMemory( &sTargetDevice, sizeof(sTargetDevice));
    sTargetDevice.sin_family = AF_INET;
    sTargetDevice.sin_addr.s_addr = inet_addr( "192.168.3.255" );
	sTargetDevice.sin_port = htons( BROADCAST_SND_PORT );

	// Try a Connectionless Send Data first
	iResult = sendto(sUDPSocket, cBuffer, 1, 0, (SOCKADDR *) & sTargetDevice, sizeof (sTargetDevice));
    if (iResult == SOCKET_ERROR) {
        goto closeSocket;        
    }
	    
	// Shutdown the send socket for some reason
    iResult = shutdown(sUDPSocket, SD_SEND);
    if (iResult == SOCKET_ERROR) {
        goto closeSocket;
    }
	// End of Send Data Connection
	//////////////////////////////////////////////////////////////////////////////////////
	// Enumerate Return Packets	
	do {
        bytesReceived = recv(sUDPSocket, recvbuf, recvbuflen, 0);
        if ( bytesReceived > 0 ) {            
			char buf[256];
			recvbuf[bytesReceived] = '\0';
			memcpy(buf, recvbuf, bytesReceived);			
			_process_SQL_BufferData(buf, bytesReceived);						
		}
        else if ( bytesReceived == 0 ) {
            printf("Connection closed\n");
			goto closeSocket;
		}		
		else {
            printf("recv failed: %d\n", WSAGetLastError());
			goto closeSocket;
		}
    }	
	while( bytesReceived > 0 );
	// End of Enumerate Packets
	//////////////////////////////////////////////////////////////////////////////////////
closeSocket:	
	iResult = closesocket(sUDPSocket);
    if (iResult == SOCKET_ERROR) {
        goto wsaCleanup;       
    }	
wsaCleanup:
    WSACleanup();	
	return TRUE;
}

void CA_SQLServer_Scan::_process_SQL_BufferData( char pBuffer[256], int packetSize ) 
{	


}

recvbuf	0x0012f8a0 "T"	char [256]
	[0]	5 ''	char
	[1]	84 'T'	char
	[2]	0	char
	[3]	83 'S'	char
	[4]	101 'e'	char
	[5]	114 'r'	char
	[6]	118 'v'	char
	[7]	101 'e'	char
	[8]	114 'r'	char
	[9]	78 'N'	char
	[10]	97 'a'	char
	[11]	109 'm'	char
	[12]	101 'e'	char
	[13]	59 ';'	char
	[14]	68 'D'	char
	[15]	69 'E'	char
	[16]	76 'L'	char
	[17]	76 'L'	char
	[18]	67 'C'	char
	[19]	53 '5'	char
	[20]	50 '2'	char
	[21]	49 '1'	char
	[22]	45 '-'	char
	[23]	48 '0'	char
	[24]	49 '1'	char
	[25]	59 ';'	char
	[26]	73 'I'	char
	[27]	110 'n'	char
	[28]	115 's'	char
	[29]	116 't'	char
	[30]	97 'a'	char
	[31]	110 'n'	char
	[32]	99 'c'	char
	[33]	101 'e'	char
	[34]	78 'N'	char
	[35]	97 'a'	char
	[36]	109 'm'	char
	[37]	101 'e'	char
	[38]	59 ';'	char
	[39]	83 'S'	char
	[40]	81 'Q'	char
	[41]	76 'L'	char
	[42]	69 'E'	char
	[43]	88 'X'	char
	[44]	80 'P'	char
	[45]	82 'R'	char
	[46]	69 'E'	char
	[47]	83 'S'	char
	[48]	83 'S'	char
	[49]	59 ';'	char
	[50]	73 'I'	char
	[51]	115 's'	char
	[52]	67 'C'	char
	[53]	108 'l'	char
	[54]	117 'u'	char
	[55]	115 's'	char
	[56]	116 't'	char
	[57]	101 'e'	char
	[58]	114 'r'	char
	[59]	101 'e'	char
	[60]	100 'd'	char
	[61]	59 ';'	char
	[62]	78 'N'	char
	[63]	111 'o'	char
	[64]	59 ';'	char
	[65]	86 'V'	char
	[66]	101 'e'	char
	[67]	114 'r'	char
	[68]	115 's'	char
	[69]	105 'i'	char
	[70]	111 'o'	char
	[71]	110 'n'	char
	[72]	59 ';'	char
	[73]	49 '1'	char
	[74]	48 '0'	char
	[75]	46 '.'	char
	[76]	53 '5'	char
	[77]	48 '0'	char
	[78]	46 '.'	char
	[79]	49 '1'	char
	[80]	54 '6'	char
	[81]	48 '0'	char
	[82]	48 '0'	char
	[83]	46 '.'	char
	[84]	49 '1'	char
	[85]	59 ';'	char
	[86]	59 ';'	char
	[87]	0	char

#include <iostream>
#include <vector>

void processData(char &c)
{
	char* array = &c;
	std::cout << array << std::endl;
}

int main()
{

	char* rcvBuffer = "Hello world";
	char& c = rcvBuffer[0];
	processData(c);

return 0;
}

Addr Content
0    05
1    0084  (as bytes 8400)
3    "ServerName;DELLC521-01;InstanceName;SQLEXPRESS;IsClustered;No;Version;10.50.1600.1;;"

Byte zero contains some flag or identifier (no idea what)
Bytes 1 & 2 contain a 16-bit integer giving the length of the following data
Bytes 3 - n contain the message data, which in this case is a semi-colon delimited string.

int msgLength = buffer[2] << 8 + buffer[1];
char* szWords = new char[msgLength + 1];
strncpy(szWords, buffer + 3, msgLength);
// remainder of code left as an exercise for the reader
// use strtok() to extract each token
//     strcmp() to look for keywords
//
// alternatively use std::string to parse and extract

int msgLength = 80;
            char* szWords = new char[msgLength + 1];
            strncpy(szWords, recvbuf + 3, msgLength);

szWords	0x003e8f10 "ServerName;DELLC521-01;InstanceName;SQLEXPRESS;IsClustered;No;Version;10.50.1600Íýýýý««««««««þîþ"

jkirkerx wrote:

I need to figure out the length calculation.

int msgLength = buffer[2] << 8 + buffer[1];
char* szWords = new char[msgLength + 1];
strncpy(szWords, buffer + 3, msgLength);
szWords[msgLength] = '\0';

int msgLength = bytesReceived - 3;
            //int msgLength = recvbuf[2] << 8 + recvbuf[1];
            char* szWords = new char[msgLength + 1];
            strncpy(szWords, recvbuf + 3, msgLength);

int msgLength = (recvbuf[2] << 8) + recvbuf[1];

#include <iostream>
using namespace std;


void charray(char test[]) {
    strncpy(test,"test",sizeof(test));
}


int main() {
    char test[256]={' '};
    charray(test);
    printf("Text in %s!\n", test);
    return 0;
}

jkirkerx wrote:

When I pass it to a function, the data is lost.