#!/usr/bin/env python

from scapy.all import *

def ra_monitor_callback(pkt):

 if ICMPv6ND_RA in pkt and pkt[ICMPv6ND_RA].routerlifetime > 9000:

 send(IPv6(src=pkt[IPv6].src)/ICMPv6ND_RA(routerlifetime=0) )

 u = pkt.sprintf("rogue %Ether.src% %IPv6.src% > %IPv6.dst% %ICMPv6ND_RA.routerlifetime%")

 s = time.asctime()

 t = "\t"

 return s + t + u

sniff(prn=ra_monitor_callback, filter="dst host ff02::1", store=0, iface="wlan0")
# Released under GNU General Public License 3 by celeste:crystalfaery 2011-02-07 00:33:18+00:00
# http://www.crystalfaeries.net/linux/bin/rafixd