personality.c

/*
 * Copyright (c) 2002, 2003, 2004 Niels Provos <provos@citi.umich.edu>
 * All rights reserved.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */

#include <sys/param.h>
#include <sys/types.h>

#include "config.h"

#ifdef HAVE_SYS_TIME_H
#include <sys/time.h>
#endif
#include <sys/stat.h>
#include <sys/tree.h>
#include <sys/queue.h>
#include <sys/wait.h>

#include <math.h>
#include <err.h>
#include <errno.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <syslog.h>
#include <unistd.h>
#include <dnet.h>
#include <ctype.h>

#undef timeout_pending
#undef timeout_initialized

#include <event.h>

#include "honeyd.h"
#include "personality.h"
#include "xprobe_assoc.h"
#include "template.h"
#include "debug.h"

/* ET - Moved SPLAY_HEAD to personality.h so xprobe_assoc.c could use it. */
int npersons;

/* ET - global from honeyd.c */
struct personate person_drop = {};
static struct timeval tv_periodic;

struct perstree personalities;
struct xp_fprint_tree xp_fprints;

SPLAY_GENERATE(perstree, personality, node, perscompare);

/* ET - For the Xprobe fingerprint tree */
SPLAY_GENERATE(xp_fprint_tree, xp_fingerprint, node, xp_fprint_compare);

static void
personality_time_evcb(int fd, short what, void *event)
{
	gettimeofday(&tv_periodic, NULL);
}

void
xprobe_personality_init(void)
{
  SPLAY_INIT(&xp_fprints);
}

void
personality_init(void)
{
	npersons = 0;
	SPLAY_INIT(&personalities);


	/* Start a timer that keeps track of the current system time */
	struct event *ev = event_new(libevent_base, -1, EV_PERSIST, personality_time_evcb, NULL);

	struct timeval tv;
	timerclear(&tv);
	tv.tv_usec = 100000;	/* every 100 ms */

	evtimer_add(ev, &tv);
}

struct personality *
personality_new(const char *name)
{
	struct personality *pers, tmp;

	tmp.name = (char *)name;
	if (SPLAY_FIND(perstree, &personalities, &tmp))
		return (NULL);

	if ((pers = calloc(1, sizeof(struct personality))) == NULL)
	{
		syslog(LOG_ERR, "%s: calloc", __func__);
		exit(EXIT_FAILURE);
	}

	if ((pers->name = strdup(name)) == NULL)
	{
		syslog(LOG_ERR, "%s: stdrup", __func__);
		exit(EXIT_FAILURE);
	}

	/* Initialize defaults */
	pers->tstamphz = -1;

	npersons++;
	SPLAY_INSERT(perstree, &personalities, pers);

	/* Find and add the Xprobe fingerprint, if it exists */
	correlate_nmap_with_xprobe(pers);

	return (pers);
}

struct personality *
personality_clone(const struct personality *person)
{
	struct personality *newperson;

	if ((newperson = malloc(sizeof(struct personality))) == NULL)
	{
		syslog(LOG_ERR, "%s: malloc", __func__);
		exit(EXIT_FAILURE);
	}

	memcpy(newperson, person, sizeof(struct personality));

	return (newperson);
}

/*
 * Frees the reference that a template has to a personality.
 */

void
personality_declone(struct personality *pers)
{
	free(pers);
}

void
personality_free(struct personality *pers)
{
	SPLAY_REMOVE(perstree, &personalities, pers);

	free(pers->name);
	free(pers);
}

struct personality *
personality_random(void)
{
	extern rand_t *honeyd_rand;
	struct personality *pers;
	int i;

	if (!npersons)
		return (NULL);

	i = rand_uint32(honeyd_rand) % npersons;
	pers = SPLAY_MIN(perstree, &personalities);
	while (i--) {
		pers = SPLAY_NEXT(perstree, &personalities, pers);
	}

	return (pers);
}

struct personality *
personality_find(const char *name)
{
	struct personality tmp;
	tmp.name = (char *)name;
	return (SPLAY_FIND(perstree, &personalities, &tmp));
}

/* Not much here, set up ip id accordingly */

void
ip_personality(struct template *tmpl, uint16_t *pid, enum ipid_protocol proto)
{
	extern rand_t *honeyd_rand;
	struct personality *person;

	if (tmpl == NULL)
		return;
	if ((person = tmpl->person) == NULL)
		return;

	uint16_t *ipid_cached, *ipid_cached_TCP, *ipid_cached_ICMP;

	//If it's a shared sequence...
	if( person->ipid_shared_sequence == 1 )
	{
		ipid_cached_TCP = &tmpl->ipid;
		ipid_cached_ICMP = &tmpl->ipid;
	}
	else
	{
		ipid_cached_TCP = &tmpl->IPID_last_TCP;
		ipid_cached_ICMP = &tmpl->IPID_last_ICMP;
	}

	enum ipidtype ourType;
	if( proto == TCP)
	{
		//TODO: What are we supposed to do with the CI test? It's unused. Also, we're assuming UDP
		//	should be handled the same as TCP.
		ourType = person->IPID_type_TI;
		ipid_cached = ipid_cached_TCP;
	}
	else if( proto == TCP_CLOSED)
	{
		ourType = person->IPID_type_CI;
		ipid_cached = ipid_cached_TCP;
	}
	else
	{
		ourType = person->IPID_type_II;
		ipid_cached = ipid_cached_ICMP;
	}

	if((proto == ICMP))
		while (!*ipid_cached)
			*ipid_cached = 32768 + rand_uint16(honeyd_rand)/2;
	else
		while (!*ipid_cached)
			*ipid_cached = rand_uint16(honeyd_rand) % 1024;

	switch(ourType)
	{
		case(ID_ZERO):
		{
			*pid = 0;
			break;
		}
		case(ID_RANDOM):
		{
			//Random not valid for II, set to 0 if called mistakenly
			if(proto != ICMP)
			{
				*pid = rand_uint16(honeyd_rand);
			}
			else
				*pid = 0;
			break;
		}
		case(ID_CONSTANT):
		{
			*pid = *ipid_cached;
			break;
		}
		case(ID_RPI):
		{
			// Id must increment by at least 1000
			uint16_t temp = 1025 + (rand_uint16(honeyd_rand) % 255);
			//cannot be divisible by 256 unless > 256,000 which is outside uint16_t so we just keep trying
			// by shifting right 2 we can quickly constrain the random to < 2^14 == 16384 to avoid
			// incrementing by 20,000 and having value of RD.
			if((temp % 256 == 0))
				temp = 1025 + (rand_uint16(honeyd_rand) % 255);

			*ipid_cached += temp;
			*pid = *ipid_cached;
			break;
		}
		//This means id is sent in host byte order, increment and return host to network
		case(ID_SEQUENTIAL_BROKEN):
		{
			*ipid_cached = ntohs(*ipid_cached) + 1;
			*ipid_cached =  htons(*ipid_cached);
			*pid = *ipid_cached;
			break;
		}
		//This means id increases by 1
		case(ID_SEQUENTIAL):
		{
			*ipid_cached = *ipid_cached + 1;
			*pid = *ipid_cached;
			break;
		}
		case(ID_NONE):
		{
			//need to know what to implement for this section
			break;
		}
		default:
		{
			break;
		}
	}
	//TODO this is a fringe case that can sometimes cause bad IP ID results particularly when TI = BI, II = BI and SS = O
	if((proto == ICMP) && !person->ipid_shared_sequence)
	{
		uint16_t temp = tmpl->IPID_last_TCP + 3*person->TCPID_Max_Increment;
		if(*ipid_cached < temp)
		{
			temp = (tmpl->IPID_last_TCP + 1 + 3*person->TCPID_Max_Increment);
			*ipid_cached = temp + (rand_uint16(honeyd_rand) % ((~(uint16_t)0) - temp));
			if(tmpl->IPID_last_TCP > 32768)
			{
				tmpl->IPID_last_TCP -= 32768;
			}
		}
	}
}

struct personate *
tcp_personality_test(const struct tcp_con *con, struct personality *person,
    uint8_t sndflags)
{
	uint8_t flags;

	/* ET - The T1 test of NMAP has the SYN and ECE TCP flags set.  The T5
         * test of NMAP has only the SYN TCP flag set.  The sequence number
         * test of NMAP has only the SYN TCP flag set.
	 * Niels: We reuse the T1 even if ECE is not set if the response seems
	 * sane.  This allows us to get TCP options right, too.
	 */
	flags = con->rcv_flags & (TH_FIN|TH_RST|TH_PUSH|TH_ACK|TH_URG|TH_SYN);
	if(con->rcv_flags == (TH_ECE|TH_CWR|TH_SYN))
	{
		switch (con->state)
		{
			case TCP_STATE_LISTEN:
			case TCP_STATE_SYN_RECEIVED:
				return (&person->ecn_test);
			default:
				return (NULL);
		}
	}
	else if (flags == TH_SYN)
	{
		int hasece = con->rcv_flags & TH_ECE;

		switch (con->state)
		{
			case TCP_STATE_LISTEN:
			case TCP_STATE_SYN_RECEIVED:
			{
				struct personate *test = &person->t_tests[0];
				if (sndflags & TH_RST)
					return (NULL);

				//This might be one of the 6 Nmap SEQ packets, reply appropriately
				//Apply WIN and OPS fields to the t_tests[0] test
				switch( con->recv_window )
				{
					case 1:
					{
						//SEQ Packet #1
						return (&person->seq_tests[0]);
					}
					case 63:
					{
						//SEQ Packet #2
						return (&person->seq_tests[1]);
					}
					case 4:
					{
						//In this case the last byte in the tcp header for seq_test[2]
						// is the last byte of the MSS value which is 640, the last byte is 128
						if(con->nmap_opt == 128)
						{
							//SEQ Packet #3
							return (&person->seq_tests[2]);
						}
						//The last byte in the tcp header(data-1) for seq_test[3] is 0, EOL
						else
						{
							//SEQ Packet #4
							return (&person->seq_tests[3]);
						}
						break;
					}
					case 16:
					{
						//SEQ Packet #5
						return (&person->seq_tests[4]);
					}
					case 512:
					{
						//SEQ Packet #6
						return (&person->seq_tests[5]);
					}
				}

				/* Check if we can use the ECE response for normal
				 * SYN, too.
				 */
				if (hasece || (test->flags == (TH_SYN|TH_ACK) &&
					test->forceack == ACK_KEEP))
					return (test);

				return (NULL);
			}
			case TCP_STATE_CLOSED:
				if (hasece)
					return (NULL);
				return (&person->t_tests[4]);
			default:
				return (NULL);
		}
	}
	else if (flags == 0)
	{
		switch (con->state)
		{
			case TCP_STATE_LISTEN:
				return (&person->t_tests[1]);
			default:
				return (NULL);
		}
	}
	else if (flags == (TH_SYN|TH_PUSH|TH_FIN|TH_URG))
	{
		switch (con->state)
		{
			case TCP_STATE_LISTEN:
			case TCP_STATE_SYN_RECEIVED:
				return (&person->t_tests[2]);
			default:
				return (NULL);
		}
	}
	else if (flags == TH_ACK)
	{
		switch (con->state)
		{
			case TCP_STATE_LISTEN:
			case TCP_STATE_SYN_RECEIVED:
				return (&person->t_tests[3]);
			case TCP_STATE_CLOSED:
				return (&person->t_tests[5]);
			default:
				return (NULL);
		}
	}
	else if (flags == (TH_FIN|TH_PUSH|TH_URG))
	{
		switch (con->state)
		{
			case TCP_STATE_CLOSED:
				return (&person->t_tests[6]);
			default:
				return (NULL);
		}
	}
	else if ((flags & TH_FIN) && (flags & (TH_SYN|TH_ACK)) == 0)
	{
		/*
		 * If we get a FIN flag and do not allow fin scanning, then
		 * we just let the regular state engine run its course.
		 * Otherwise, we silently drop the packet, which indicates
		 * that FIN scanning is allowed for TCP_STATE_LISTEN.
		 */
		if (person->disallow_finscan || con->state != TCP_STATE_LISTEN)
			return (NULL);
		return (&person_drop);
	}
	return (NULL);
}

double rand_normal(double mean, double stddev)
{
    static double n2 = 0.0;
    static int n2_cached = 0;
    if (!n2_cached) {
        double x, y, r;
	do {
	    x = 2.0*rand()/RAND_MAX - 1;
	    y = 2.0*rand()/RAND_MAX - 1;

	    r = x*x + y*y;
	} while (r == 0.0 || r > 1.0);

        {
        double d = sqrt(-2.0*log(r)/r);
	double n1 = x*d;
	n2 = y*d;

        double result = n1*stddev + mean;

        n2_cached = 1;
        return result;
        }
    } else {
        n2_cached = 0;
        return n2*stddev + mean;
    }
}

static uint32_t
get_next_isn(struct template *tmpl, const struct personality *person)
{
	double mean, max, min, std_dev, seconds_passed;
	extern rand_t *honeyd_rand;
	uint32_t GCD_delta, ISN_delta = 0;
	struct timeval time_now, time_diff;

	//Get the current timstamp, save it
	gettimeofday( &time_now, NULL);

	//If this is our first ISN, then just make one up.
	if( tmpl->seq == 0 )
	{
		tmpl->seq = rand_uint32(honeyd_rand);
		//Save the timeval into the template
		tmpl->tv_ISN = time_now;
		return tmpl->seq;
	}

	/* if SEQ is constant */
	if(person->TCP_ISR_max < 10)
	{
		//Do nothing
		return (tmpl->seq);
	}

	timersub(&time_now, &tmpl->tv_ISN, &time_diff);
	seconds_passed = time_diff.tv_sec + ((double)time_diff.tv_usec / 1000000.0);

	//Nmap saves the values as binary log times 8, so undo this.
	//	(Supposedly, Nmap does this to prevent floating point rounding during calculations)
	max = pow(2,((double)person->TCP_ISR_max /(double)8)) * seconds_passed;
	min = pow(2,((double)person->TCP_ISR_min /(double)8)) * seconds_passed;
	mean = pow(2,((double)person->TCP_ISR /(double)8)) * seconds_passed;
	std_dev = pow(2, ((double)person->TCP_SP/(double)8));
	max += (std_dev/8);
	min -= (std_dev/8);
	double temp = rand_normal(0, std_dev);

	ISN_delta = mean;
	if(person->TCP_ISN_gcd > 9)
	{
		temp *= person->TCP_ISN_gcd;
		max += (std_dev/8)*(person->TCP_ISN_gcd -1);
		min -= (std_dev/8)*(person->TCP_ISN_gcd -1);
	}
	while((max < (mean + temp)) || (min > (mean + temp)))
	{
		temp = rand_normal(0, std_dev);
		if(person->TCP_ISN_gcd > 9)
		{
			temp *= person->TCP_ISN_gcd;
		}
	}

	ISN_delta += temp;

	//Only worry about making things line up for the GCD if it's a significant value
	if(person->TCP_ISN_gcd > 9)
	{
		GCD_delta = (ISN_delta % person->TCP_ISN_gcd);

		//Round up
		if( GCD_delta > (person->TCP_ISN_gcd/2) )
		{
			ISN_delta += (person->TCP_ISN_gcd - GCD_delta);
		}
		//Round down
		else
		{
			ISN_delta -= GCD_delta;
		}
	}
	tmpl->tv_ISN = time_now;
	tmpl->seq += ISN_delta;
	return tmpl->seq;

}

#define TIME_CORRECT(x,y) do { \
	(y)->tv_sec = 0; \
	(y)->tv_usec = (y)->tv_usec % (x); \
	timersub(&tmpl->tv, y, &tmpl->tv); \
} while (0)

/* Get the correct time for this personality */

void
personality_time(struct template *tmpl, struct timeval *diff)
{
	uint32_t ms;

	timersub(&tv_periodic, &tmpl->tv_real, diff);
	tmpl->tv_real = tv_periodic;

	ms = diff->tv_sec * 10000 + (diff->tv_usec / 100);
	ms *= tmpl->drift;

	diff->tv_sec = ms / 10000;
	diff->tv_usec = (ms % 10000) * 100;

	timeradd(&tmpl->tv, diff, &tmpl->tv);
}

int
tcp_personality_time(struct template *tmpl, struct timeval *diff)
{
	extern rand_t *honeyd_rand;
	struct personality *person = tmpl->person;
	int slowhz;

	if (person == NULL)
		return (-1);

	gettimeofday(&tv_periodic, NULL);
	personality_time(tmpl, diff);

	if (person->tstamphz)
	{
		int tstamphz = person->tstamphz;
		int ticks;

		if (tstamphz == -1)
			tstamphz = 2;

		/* 
		 * Adjust so that the remaining subsecond ticks get
		 * counted next time.
		 */
		ticks = 1000000L / tstamphz;

		if(!ticks)
		{
			slowhz = diff->tv_sec * tstamphz + diff->tv_usec;
		}
		else
		{
			slowhz = diff->tv_sec * tstamphz + diff->tv_usec / ticks;
			TIME_CORRECT(ticks, diff);
		}


		tmpl->timestamp += slowhz;
	}
	else
	{
		/*
		 * This is not the default.  Some stacks don't have
		 * any notion of time.
		 */
		slowhz = 0;
		tmpl->timestamp = 0;
	}

	return (slowhz);
}

uint32_t
tcp_personality_seq(struct tcp_con * con, struct template *tmpl, struct personality *person)
{
	struct timeval tmp;
	extern rand_t *honeyd_rand;

	tmpl->seqcalls++;

	if (!timerisset(&tmpl->tv))
	{
		gettimeofday(&tv_periodic, NULL);
		tmpl->tv_real = tmpl->tv = tv_periodic;
		gettimeofday(&tv_periodic, NULL);

		if (tmpl->timestamp == 0)
		{
			tmpl->timestamp = rand_uint32(honeyd_rand) % 1728000;
		}
	}

	tcp_personality_time(tmpl, &tmp);

	/* 
	 * This is where new ISNs are generated.  The latest ISN is
	 * stored in tmpl->seq.  tmpl->seqcalls is the number of ISNs
	 * generated so far.
	 */

	if((con->state == TCP_STATE_LISTEN) && (con->rcv_flags == TH_SYN))
	{
		con->snd_una = get_next_isn(tmpl, person);
	}
	return (con->snd_una);

}

/* Default TCP options is timestamp, noop, noop */
static struct tcp_option default_opt_vals[3] = {
	{'T', 0, 0, 0},
	{'N', 0, 0, 0},
	{'N', 0, 0, 0}
};
static struct tcp_options default_opts =
{
	3,
	default_opt_vals,
};

int
tcp_personality_match(struct tcp_con *con, int flags)
{
	struct template *tmpl = con->tmpl;
	struct personality *person;

	/* Find template and corresponding personality */
	if (tmpl == NULL)
		return (0);
	person = tmpl->person;
	if (person == NULL)
		return (0);

	return (tcp_personality_test(con, person, flags) != NULL);
}

int
tcp_personality(struct tcp_con *con, uint8_t *pflags, int *pwindow, int *pdf,
    uint16_t *pid, struct tcp_options *poptions)
{
	struct template *tmpl = con->tmpl;
	struct personality *person;
	struct personate *pers;
	uint8_t flags = *pflags;

	/* XXX - We need to find some template to use here */

	/* Find template and corresponding personality */
	if (tmpl == NULL)
		return (-1);
	person = tmpl->person;
	if (person == NULL)
		return (-1);

	if ((pers = tcp_personality_test(con, person, flags)) == NULL)
	{
		/* Not a test case - but we still want to pretend */
		ip_personality(tmpl, pid, TCP);

		/* Set the sequence number only on SYN segments */
		if (flags & TH_SYN)
			con->snd_una = tcp_personality_seq(con, tmpl, person);

		/* If we support timestamps, always set them */
		if (person->tstamphz >= 0 && poptions != NULL)
			*poptions = default_opts;
		return (-1);
	}

	*pwindow = pers->window;
	*pflags = pers->flags;
	*pdf = pers->df;
	if (poptions != NULL)
		*poptions = pers->options;

	if(con->rcv_flags != (TH_ECE|TH_CWR|TH_SYN))
	{
		switch (pers->forceack)
		{
			case ACK_ZERO:
				con->rcv_next = 0;
				break;
			case ACK_DECREMENT:
				con->rcv_next--;
				break;
			case ACK_KEEP:
				break;
			case ACK_OTHER:
				con->rcv_next += 9;
				break;
		}
		switch (pers->forceseq)
		{
			case SEQ_ZERO:
				con->snd_una = 0;
				break;
			case SEQ_DECREMENT:
				con->snd_una--;
				break;
			case SEQ_KEEP:
				break;
			case SEQ_OTHER:
				con->snd_una += 9;
				break;
		}
	}

	if(con->state == TCP_STATE_CLOSED)
		ip_personality(tmpl, pid, TCP_CLOSED);
	else
		ip_personality(tmpl, pid, TCP);

	if ((pers->forceseq != SEQ_ZERO) && (con->state == TCP_STATE_LISTEN))
		con->snd_una = tcp_personality_seq(con, tmpl, person);

	return (0);
}

#define SET(y, x, w, l) do { \
	(x)->opt_type = w; \
	(x)->opt_len = l; \
	memcpy(y, x, l); \
} while (0)

/* 
 * Given a character string that describe TCP options, create the
 * corresponding packet data.
 */

void
tcp_personality_options(struct tcp_con *con, struct tcp_hdr *tcp,
	struct tcp_options *options)
{
	extern rand_t *honeyd_rand;
	u_char *p = (u_char *)tcp + TCP_HDR_LEN;
	struct template *tmpl = con->tmpl;
	struct tcp_opt opt;
	int optlen = 0, simple = 0;
	uint32_t timestamp;
	short mss = 1460;

	uint i = 0;
	for (; i < options->count; i++ )
	{
		opt.opt_len = 0;
		switch(options->options[i].opt_type)
		{
			case 'M':
				mss = options->options[i].value;
				if (con->flags & TCP_TARPIT)
				{
					mss = 64;
				}
				opt.opt_data.mss = htons(mss);
				SET(p, &opt, TCP_OPT_MSS, 4);
				break;
			case 'W':
				opt.opt_data.wscale = options->options[i].value;
				SET(p, &opt, TCP_OPT_WSCALE, 3);
				break;
			case 'T':
				if (tmpl != NULL)
				{
					//struct timeval tv;
					//tcp_personality_time(tmpl, &tv);
					//gettimeofday(&tv, NULL);
					//timestamp = tv.tv_sec;
					timestamp = htonl(tmpl->timestamp);
				}
				else
				{
					timestamp = rand_uint32(honeyd_rand);
				}

				//Assign timestamps on the basis of the Nmap T values
				//	IE: 0 means value is zero, 1 means anything else
				if( options->options[i].TSval == '1' )
				{
					opt.opt_data.timestamp[0] = timestamp;
				}
				else
				{
					opt.opt_data.timestamp[0] = 0;
				}
				if( options->options[i].TSecr == '1' )
				{
					opt.opt_data.timestamp[1] = timestamp;
				}
				else
				{
					opt.opt_data.timestamp[1] = 0;
				}

				/*if (con->sawtimestamp)
					opt.opt_data.timestamp[1] = con->echotimestamp;*/
				SET(p, &opt, TCP_OPT_TIMESTAMP, 2 + 4 + 4);
				break;
			case 'N':
				simple++;
				SET(p, &opt, TCP_OPT_NOP, 1);
				break;
			case 'L':
				SET(p, &opt, TCP_OPT_EOL, 1);
				break;
			case 'S':
				SET(p, &opt, 4, 2);
				break;
			default:
				opt.opt_len = 0;
				break;
		}
		optlen += opt.opt_len;
		p += opt.opt_len;
	}

	/* Check if we have only unreasonable options */
	if (simple == optlen)
		optlen = 0;

	if (optlen)
		tcp->th_off += (optlen + 3) / 4;
}

/* JVR - added '+1' in default case below for situations where IP checksum does not
   change after byte order conversion, e.g. IP checksum of 0x6565.
   Also added missing 'break' statement in RVAL_ZERO case  */
#define RVAL_DO(x, w) do { \
	switch (w) { \
	case RVAL_OKAY: break; \
	case RVAL_ZERO: (x) = 0; break; \
	default: (x) = ntohs(x+1); \
	} \
} while (0)

int
icmp_error_personality(struct template *tmpl,
    struct addr *dst, struct ip_hdr *ip, uint8_t *pdf,
    uint8_t *ptos, int *pquotelen, uint8_t *ttl)
{
	struct persudp *test;
	int iphdr_changed = 0;

	if (tmpl == NULL || tmpl->person == NULL)
		return (1);

	test = &tmpl->person->udptest;

	if (!test->response)
		return (0);

	extern rand_t* honeyd_rand;
	if((test->ttl == test->ttl_guess) && (test->ttl_max != test->ttl_min))
	{
		test->ttl = test->ttl_min + rand_uint32(honeyd_rand)%(test->ttl_max - test->ttl_min);
		test->ttl_guess = test->ttl+1;
	}

	*ttl = test->ttl;
	*pdf = test->df;
	*ptos = test->tos;
	*pquotelen = test->quotelen;
	if (test->riplen) {
		u_int len = ntohs(ip->ip_len);
		ip->ip_len = htons(len + test->riplen);
		iphdr_changed = 1;
	}

	if (test->rid != RVAL_OKAY)
	{
		iphdr_changed = 1;
		ip->ip_id = htons(test->ridVal);
	}

	/* We need to recompute the ip header checksum in some cases */
	if (test->ripck == RVAL_OKAY)
	{
		if (iphdr_changed)
			ip_checksum(ip, ip->ip_hl << 2);
	}
	else
		RVAL_DO(ip->ip_sum, test->ripck);

	if (ip->ip_p == IP_PROTO_UDP)
	{
		struct udp_hdr *udp = (struct udp_hdr *)((u_char *)ip + (ip->ip_hl << 2));
		u_char *p = (u_char *)(udp + 1);
		if(test->uck != RVAL_OKAY)
		{
			udp->uh_sum = htons(test->uckVal);
		}
		if (test->dat == RVAL_BAD)
			*p = 0;
	}
	
	return (1);
}

/* Parse nmap tests */

/*
 * Improve TCP ISN calculation by reading all possible
 * gcd values and selecting the smallest one.
 */

void
parse_seq_gcd(char *s, char *end, struct personality *pers)
{
	char *next, *endptr, *quantifier, *secondValue;
	unsigned int val, minval;
	int orexp;

	orexp = val = 0;
	endptr = quantifier = NULL;
	minval = UINT_MAX;

	/* Determine if the values are or'd or and'd */
	if (*s && strpbrk(s, "|") != NULL)
		orexp = 1;

	/* Go through all &'d and |'d values */
	while (s < end && s != NULL && *s) {
		/* Get the next and'd or or'd number */
		if ((next = strpbrk(s, "|&")) != NULL)
			*next++ = '\0';

		/* Determine if field is non-zero */
		if (*s == '+') {
			minval = 1;
			s = next;
			continue;
		}

		/* Determine value quantifier */
		if ((quantifier = strpbrk(s, "<>")) != NULL)
			s++;

		/* If this value is actually a range of values */
		//TODO: Maybe we should look harder when we find a range. But it seems
		//	like for all instances in the db file, a range means random ISN
		if( (secondValue = strpbrk(s, "-")) != NULL )
		{
			*secondValue++ = '\0';
			pers->TCP_ISN_gcd_min = strtol(s, &endptr, 16);
			pers->TCP_ISN_gcd_max = strtol(secondValue, &endptr, 16);
			//Choose value to be halfway between min and max
			//TODO: Should this be chosen randomly between min and max?
			pers->TCP_ISN_gcd = ((pers->TCP_ISN_gcd_max - pers->TCP_ISN_gcd_min)/2) + pers->TCP_ISN_gcd_min;
			return;
		}

		val = strtol(s, &endptr, 16);

		s = next;

		if (quantifier != NULL) {
			if (*quantifier != '>')
				continue;

			/* val is minval if | and val < minval or & */
			if (val < minval || !orexp)
				minval = val + 1;
			continue;
		}

		if (!orexp) {
			/* &,  minval is val */
			minval = val;
		} else if (orexp && val < minval) {
			/* |, val is minval if val < minval */
			minval = val;
		}
	}

	if (minval == 0 || minval == UINT_MAX)
		minval = 1;

	pers->TCP_ISN_gcd_min = minval;
	pers->TCP_ISN_gcd_max = minval;
	//Choose value to be halfway between min and max
	//TODO: Should this be chosen randomly between min and max?
	pers->TCP_ISN_gcd = ((pers->TCP_ISN_gcd_max - pers->TCP_ISN_gcd_min)/2) + pers->TCP_ISN_gcd_min;
}

int
parse_seq(struct personality *pers, int off, char *line)
{
	char *p = line, *p2 = line, *end;
	char *ss = NULL;
	int ti_opts[3];gettimeofday(&tv_periodic, NULL);
	pers->IPID_type_TI = ID_RANDOM;
	pers->IPID_type_CI = ID_NONE;
	pers->IPID_type_II = ID_NONE;
	pers->ipid_shared_sequence = 0;

	//First check for and prefer shared sequence
	if((ss = strstr(p2, "SS=")) != NULL)
	{
		if((strstr(ss,"|S") != NULL) || (*(ss+3) == 'S'))
			pers->ipid_shared_sequence = 1;
	}
	while (p != NULL && strlen(p))
	{
		p2 = strsep(&p, "%");
		end = p2;

		if (strncasecmp(p2, "SP=", 3) == 0)
		{
			p2 += 3;
			if (p == NULL)
				p = p2 + strlen(p2);
			char *endPtr;
			pers->TCP_SP_min = strtol(p2, &endPtr, 16);

			if( *endPtr == '-' )
			{
				p2 = endPtr + 1;
				pers->TCP_SP_max = strtol(p2, &endPtr, 16);
				//Chose value to be halfway between min and max
				//TODO: Should this be chosen randomly between min and max?
				pers->TCP_SP = ((pers->TCP_SP_max - pers->TCP_SP_min)/2) + pers->TCP_SP_min;
				if( *endPtr != '\0' )
				{
					return -1;
				}
			}
			else
			{
				pers->TCP_SP_max = pers->TCP_SP_min;
				pers->TCP_SP = pers->TCP_SP_min;
				if( *endPtr != '\0' )
				{
					return -1;
				}
			}
		}
		else if (strncasecmp(p2, "GCD=", 4) == 0)
		{
			p2 += 4;
			if (p == NULL)
				p = p2 + strlen(p2);
			parse_seq_gcd(p2, p, pers);
		}
		else if (strncasecmp(p2, "ISR=", 4) == 0)
		{
			p2 += 4;
			if (p == NULL)
				p = p2 + strlen(p2);
			char *endPtr;
			pers->TCP_ISR_min = strtol(p2, &endPtr, 16);

			if( *endPtr == '-' )
			{
				p2 = endPtr + 1;
				pers->TCP_ISR_max = strtol(p2, &endPtr, 16);
				//Chose value to be halfway between min and max
				//TODO: Should this be chosen randomly between min and max?
				pers->TCP_ISR = ((pers->TCP_ISR_max - pers->TCP_ISR_min)/2) + pers->TCP_ISR_min;
				if( *endPtr != '\0' )
				{
					return -1;
				}
			}
			else
			{
				pers->TCP_ISR = pers->TCP_ISR_min;
				pers->TCP_ISR_max = pers->TCP_ISR_min;
				if( *endPtr != '\0' )
				{
					return -1;
				}
			}

		}
		/* Improve IPID sequencing capability */
		else if(strncasecmp(p2, "TI=", 3) == 0)
		{
			int done = 0;

			end += 3;
			while (!done)
			{
				p2 = strsep(&end, "|");
				if(end == NULL)
					done = 1;
				if (strcasecmp(p2, "I") == 0)
				{
					pers->IPID_type_TI = ID_SEQUENTIAL;
					pers->TCPID_Max_Increment = 1;
					ti_opts[0] = 1;
				}
				else if (strcasecmp(p2, "BI") == 0)
				{
					pers->IPID_type_TI = ID_SEQUENTIAL_BROKEN;
					pers->TCPID_Max_Increment = 256;
					ti_opts[1] = 1;
				}
				else if (strcasecmp(p2, "Z") == 0)
				{
					pers->IPID_type_TI = ID_ZERO;
				}
				else if (strcasecmp(p2, "RD") == 0)
				{
					pers->IPID_type_TI = ID_RANDOM; 
				}
				else if (strcasecmp(p2, "RI") == 0)
				{
					pers->IPID_type_TI = ID_RPI;
					pers->TCPID_Max_Increment = 1279;
					ti_opts[2] = 1;
				}
				/* Assume p2 must be a hex value for constant IPID */
				else
				{
					char *temp;
					uint32_t IPID_constant = strtol(p2, &temp, 16);
					if ( (*temp == '\0') && (p2 != NULL) ) /* IE: Conversion was successful */
					{
						pers->IPID_type_TI = ID_CONSTANT;
						pers->IPID_constant_val_TI = IPID_constant;
					}
					else
					{
						return -1;
					}
				}
			}

		}
		else if (strncasecmp(p2, "CI=", 3) == 0)
		{
			int done = 0;

			end += 3;
			while (!done)
			{
				done = 1;
				p2 = strsep(&end, "|");
				if (strcasecmp(p2, "I") == 0)
				{
					pers->IPID_type_CI = ID_SEQUENTIAL;
				}
				else if (strcasecmp(p2, "BI") == 0)
				{
					pers->IPID_type_CI = ID_SEQUENTIAL_BROKEN;
				}
				else if (strcasecmp(p2, "Z") == 0)
				{
					if (end != NULL)
					{
						done = 0;
						continue;
					}
					pers->IPID_type_CI = ID_ZERO;
				}
				else if (strcasecmp(p2, "RD") == 0)
				{
					pers->IPID_type_CI = ID_RANDOM;
				}
				else if (strcasecmp(p2, "RI") == 0)
				{
					pers->IPID_type_CI = ID_RPI;
				}
				/* Assume p2 must be a hex value for constant IPID */
				else
				{
					char *temp;
					uint32_t IPID_constant = strtol(p2, &temp, 16);
					if ( (*temp == '\0') && (p2 != NULL) ) /* IE: Conversion was successful */
					{
						pers->IPID_type_CI = ID_CONSTANT;
						pers->IPID_constant_val_CI = IPID_constant;
					}
					else
					{
						return -1;
					}
				}
			}
		}
		else if(strncasecmp(p2, "II=", 3) == 0)
		{
			int done = 0;

			end += 3;
			while (!done)
			{
				done = 1;
				p2 = strsep(&end, "|");
				if (strcasecmp(p2, "I") == 0)
				{
					pers->IPID_type_II = ID_SEQUENTIAL;
				}
				else if (strcasecmp(p2, "BI") == 0)
				{
					pers->IPID_type_II = ID_SEQUENTIAL_BROKEN;
				}
				else if (strcasecmp(p2, "Z") == 0)
				{
					if (end != NULL)
					{
						done = 0;
						continue;
					}
					pers->IPID_type_II = ID_ZERO;
				}
				else if (strcasecmp(p2, "RD") == 0)
				{
					pers->IPID_type_II = ID_RANDOM;
				}
				else if (strcasecmp(p2, "RI") == 0)
				{
					pers->IPID_type_II = ID_RPI;
				}
				/* Assume p2 must be a hex value for constant IPID */
				else
				{
					char *temp;
					uint32_t IPID_constant = strtol(p2, &temp, 16);
					if ( (*temp == '\0') && (p2 != NULL) ) /* IE: Conversion was successful */
					{
						pers->IPID_type_II = ID_CONSTANT;
						pers->IPID_constant_val_II = IPID_constant;
					}
					else
					{
						return -1;
					}
				}
			}
		}
		else if (strncasecmp(p2, "TS=", 3) == 0)
		{
			/* TCP timestamp sequencing capability */
			p2 = strsep(&end, "|");
			p2 += 3;

			if (strcasecmp(p2, "0") == 0)
			{
				pers->tstamphz = 0;
				if(end != NULL)
				{
					p2 = end;
				}
			}

			//TODO: Handle the other values after the OR symbol. Choose one at random.
		  
			/* Hit some of the most common ones manually first */
			if (strcasecmp(p2, "1") == 0)
				pers->tstamphz = 2;
			else if (strcasecmp(p2, "7") == 0)
				pers->tstamphz = 100;
			else if (strcasecmp(p2, "8") == 0)
				pers->tstamphz = 200;
			else if (strcasecmp(p2, "A") == 0)
				pers->tstamphz = 1000;
			else if (strcasecmp(p2, "U") == 0)
				pers->tstamphz = -1;
			else
			{
				/* Try to convert to int */
				char *endpt;
				uint exponent = strtoul(p2, &endpt, 16);
				/* If conversion worked without fail */
				if(endpt != p2)
				{
					pers->tstamphz = pow(2, exponent);
					//TODO: Watch for integer overflow here
				}
				else
				{
					return (-1);
				}
			}
 		}
	}
	if(pers->ipid_shared_sequence == 1)
	{
		//If II has a valid seq type for SS=S and TI had that option
		if(((pers->IPID_type_II == ID_RPI) && ti_opts[2])
				|| ((pers->IPID_type_II == ID_SEQUENTIAL_BROKEN) && ti_opts[1])
				|| ((pers->IPID_type_II == ID_SEQUENTIAL) && ti_opts[0]))
		{
			//Force TI to have a valid seq increment policy
			if((pers->IPID_type_TI != ID_SEQUENTIAL) &&
					(pers->IPID_type_TI != ID_SEQUENTIAL_BROKEN) &&
					(pers->IPID_type_TI != ID_RPI))
				pers->IPID_type_TI = pers->IPID_type_II;
		}
		else
			pers->ipid_shared_sequence = 0;

	}
	if(pers->IPID_type_CI ==  ID_NONE)
		pers->IPID_type_CI = pers->IPID_type_TI;

	if (pers->TCP_ISN_gcd_min == 0)
		pers->TCP_ISN_gcd_min = 1;


	return (0);
}

int
parse_tl(struct personality *pers, int off, char *line)
{
	struct personate *test = &pers->t_tests[off];

	char *p = line, *p2 = line, *end = line;
	char c;
	test->ttl = 0;
	test->q = 0;


	//We can always expect an R = field
	if(!strncasecmp(line, "R=N", 3))
	{
		test->response = 0;
		test->flags = 0;
		return (0);
	}
	if(!strncasecmp(line, "R=Y", 3))
	{
		strsep(&p2, "%");
	}
	test->response = 1;
	while (p2 != NULL && strlen(p))
	{
		c = *p2;
		switch(c)
		{
			case 'A':
				strsep(&p2, "=");
				c = *p2;
				switch(c)
				{
					case 'S':
						if(*(p2+1) == '+')
							test->forceack = ACK_KEEP;
						else
							test->forceack = ACK_DECREMENT;
						break;
					case 'Z':
						test->forceack = ACK_ZERO;
						break;
					case 'O':
						test->forceack = ACK_OTHER;
						break;
					default:
						return -1;
				}
				if(strstr(p2, "S+") != NULL)
					test->forceack = ACK_KEEP;
				break;

			case 'D':
				//Only D should be DF= field
				if(!strncasecmp(p2,"DF=N", 4))
					test->df = 0;

				else if(!strncasecmp(p2,"DF=Y", 4))
					test->df = 1;

				else return -1;

				break;

			case 'F':
				strsep(&p2, "=");
				if(strstr(p2, "A|AS") != NULL)
				{
					test->flags |= TH_ACK;
					test->flags |= TH_SYN;
					break;
				}
				if(*p2 == 'E')
				{
					test->flags |= TH_ECE;
					p2++;
				}
				if(*p2 == 'U')
				{
					test->flags |= TH_URG;
					p2++;
				}
				if(*p2 == 'A')
				{
					test->flags |= TH_ACK;
					p2++;
				}
				if(*p2 == 'P')
				{
					test->flags |= TH_PUSH;
					p2++;
				}
				if(*p2 == 'R')
				{
					test->flags |= TH_RST;
					p2++;
				}
				if(*p2 == 'S')
				{
					test->flags |= TH_SYN;
					p2++;
				}
				if(*p2 == 'F')
				{
					test->flags |= TH_FIN;
					p2++;
				}
				if((*p2 != '%') && (*p2 != '|') && (*p2 != ')'))
					return -1;
				break;

			case 'T':
				//TTL Guess
				if(*(p2+1) == 'G')
				{
					strsep(&p2, "=");
					test->ttl_guess = strtoul(p2, &end, 16);
					if(test->ttl == 0)
						test->ttl = test->ttl_guess;
				}
				//Actual TTL
				else if(*(p2+1) == '=')
				{
					strsep(&p2, "=");
					test->ttl_min = strtoul(p2, &end, 16);
					//If the TTL has a range and is not a flat value
					if(*end == '-')
					{
						strsep(&p2, "-");
						int max = strtoul(p2, &end, 16);
						if (max > 255)
						{
							test->ttl_max = 255;
						}
						else
						{
							test->ttl_max = max;
						}
					}
					//If there isn't a second value the TTL is flat
					else
						test->ttl_max = test->ttl_min;
					//set ttl to the average
					//TODO we should be getting a random value in the range
					test->ttl = (test->ttl_max+test->ttl_min)/2;
				}
				else return -1;
				break;

			case 'W':
				strsep(&p2, "=");
				test->window = strtoul(p2, &end, 16);
				break;

			case 'O':
				//allocates the memory for char * ecn->options and copies the options into them
				strsep(&p2, "=");
				end = p2;
				//Ignore the | at front of options
				if(*p2 == '|')
					strsep(&p2, "|");

				end = strsep(&p2, "%");
				end = strsep(&end,"|");

				if(parse_option(&(test->options), end) == -1)
				{
					return -1;
				}

				break;

			case 'Q':
				strsep(&p2, "=");
				c = *p2;
				switch(c)
				{
					//Vals of corresponding enum:"" = 0 "R" = 1, "U" = 2, "RU" = 3
					//R must be first, if there is R, enum val is either 1 or 3.
					case 'R':
						test->q++;
						//The only other option U must occur after R if R is present
						if(*(p2+1) != 'U') //break it it is not
							break;
					case 'U':
						//If U is present the enum val is either 2 or 3
						test->q += 2;
					default:
						//break by default since Q is always present but may not have a value.
						break;
				}
				break;

			case 'R':
				strsep(&p2, "=");
				test->resetDatChkSum = strtoul(p2, &end, 16);
				break;
			case 'S':
				strsep(&p2, "=");
				c = *p2;
				switch(c)
				{
					case 'A':
						if(*(p2+1) == '+')
							test->forceseq = SEQ_KEEP;
						else
							test->forceseq = SEQ_DECREMENT;
						break;
					case 'Z':
						test->forceseq = SEQ_ZERO;
						break;
					case 'O':
						test->forceseq = SEQ_OTHER;
						break;
					default:
						return -1;
				}
				if(strstr(p2, "A+") != NULL)
					test->forceseq = SEQ_KEEP;
				break;

			default: //Anything other than these options after a '%' is unexpected
				return -1;
		}
		strsep(&p2, "%");
	}

	//If this is test T1
	if(off == 0)
	{
		//Set all the seq_tests to this personate
		//	Except for Window size and TCP options (which are set by the WIN and OPS lines)
		int i = 0;
		for(; i < 6; i++)
		{
			pers->seq_tests[i].flags = pers->t_tests[0].flags;
			pers->seq_tests[i].df = pers->t_tests[0].df;
			pers->seq_tests[i].ttl = pers->t_tests[0].ttl;
			pers->seq_tests[i].ttl_min = pers->t_tests[0].ttl_min;
			pers->seq_tests[i].ttl_max = pers->t_tests[0].ttl_max;
			pers->seq_tests[i].ttl_guess = pers->t_tests[0].ttl_guess;
			pers->seq_tests[i].forceack = pers->t_tests[0].forceack;
			pers->seq_tests[i].q = pers->t_tests[0].q;
			pers->seq_tests[i].forceseq = pers->t_tests[0].forceseq;
			pers->seq_tests[i].resetDatChkSum = pers->t_tests[0].resetDatChkSum;
		}
	}

	return 0;
}

#define RVAL_TRANS(x, p) do { \
	if (strcasecmp(p, "Z") == 0) \
		(x) = RVAL_ZERO; \
	else if (strcasecmp(p, "G") == 0) \
		(x) = RVAL_OKAY; \
	else if (strcasecmp(p, "I") == 0) \
		(x) = RVAL_BAD; \
	else if (*p == '\0') \
		(x) = RVAL_OKAY;	/* Fill in default */ \
	else \
		return (-1); \
} while (0)

int
parse_u1(struct personality *pers, int off, char *line)
{

	char *p = line, *p2 = line, *end;
	struct persudp * test = &pers->udptest;
	char c;
	test->ttl = 0;

	// If R is present it always seems to be N, doesn't seem present if test is used
	// we check for it anyway
	if(!strncasecmp(line, "R=N", 3))
	{
		test->response = 0;
		return (0);
	}
	if(!strncasecmp(line, "R=Y", 3))
	{
		strsep(&p2, "%");
	}
	test->response = 1;
	while (p2 != NULL && strlen(p))
	{
		c = *p2;
		switch(c)
		{
			case 'D':
				strsep(&p2, "=");
				if(*p2 == 'Y')
					test->df = 1;
				else if(*p2 == 'N')
					test->df = 0;
				else return -1;
				break;
			case 'U':
				strsep(&p2, "=");
				test->un = strtoul(p2, &end, 16);
				break;
			case 'T':
				//TTL Guess
				if(*(p2+1) == 'G')
				{
					strsep(&p2, "=");
					test->ttl_guess = strtoul(p2, &end, 16);
					if(test->ttl == 0)
						test->ttl = test->ttl_guess;
				}
				//Actual TTL
				else if(*(p2+1) == '=')
				{
					strsep(&p2, "=");
					test->ttl_min = strtoul(p2, &end, 16);
					//If the TTL has a range and is not a flat value
					if(*end == '-')
					{
						strsep(&p2, "-");
						int max = strtoul(p2, &end, 16);
						if (max > 255)
						{
							test->ttl_max = 255;
						}
						else
						{
							test->ttl_max = max;
						}
					}
					//If there isn't a second value the TTL is flat
					else
						test->ttl_max = test->ttl_min;
					//set ttl to the average
					//TODO we should be getting a random value in the range
					test->ttl = (test->ttl_max+test->ttl_min)/2;
				}
				else return -1;
				break;
			case 'I':
				strsep(&p2, "=");
				test->quotelen = strtoul(p2, &end, 16);
				test->quotelen -= IP_HDR_LEN + ICMP_HDR_LEN + 4;
				break;
			case 'R':
			{
				c = *(p2+2);
				switch(c)
				{
					case 'P':
						if(*(p2+3) == 'C')
						{
							strsep(&p2,"=");
							if(*p2 == 'Z')
								test->ripck = RVAL_ZERO;
							else if(*p2 == 'I')
								test->ripck = RVAL_BAD;
							else if(*p2 == 'G')
								test->ripck = RVAL_OKAY;
							else return -1;
							break;
						}

						else if(*(p2+3) == 'L')
						{
							strsep(&p2,"=");
							//A Value of G means that the correct value of 328 is returned which in honeyd
							// means the value of test->riplen == 0 as any other value they subtract 328 from
							// the number given
							if(*p2 == 'G')
								test->riplen = 0;
							else
								test->riplen = strtoul(p2, &end, 16) - 328;
							break;
						}
						else return -1;
						break;

					case 'C':
						//RUCK is the integrity of the udp checksum, I believe
						strsep(&p2,"=");
						if(*p2 == 'G')
						{
							test->uck = RVAL_OKAY;
						}
						else
						{
							//if the rid isn't 'G' it returns the value in RID
							test->uckVal = strtoul(p2,&end,16);
							//if the value is non zero flag as bad, otherwise flag as zero
							if(test->uckVal)
								test->uck = RVAL_BAD;
							else
								test->uck = RVAL_ZERO;
						}
						break;
					case 'D':
						if(*(p2+1) == 'I')
						{
							strsep(&p2,"=");
							if(*p2 == 'G')
							{
								test->rid = RVAL_OKAY;
							}
							else
							{
								//if the rid isn't 'G' it returns the value in RID
								test->ridVal = strtoul(p2,&end,16);
								//if the value is non zero flag as bad, otherwise flag as zero
								if(test->ridVal)
									test->rid = RVAL_BAD;
								else
									test->rid = RVAL_ZERO;
							}
							break;
						}

						else if(*(p2+1) == 'U')
						{
						//What is now called RUD, it is the integrity of the udp data
						//I believe this is the same as the dat field from the previous nmap version
							strsep(&p2,"=");
							if(*p2 == 'Z')
								test->dat = RVAL_ZERO;
							else if(*p2 == 'I')
								test->dat = RVAL_BAD;
							else if(*p2 == 'G')
								test->dat = RVAL_OKAY;
							else return -1;
							break;
						}
						else return -1;
						break;

					default:
						return -1;
				}
				break;
			}
			default: return -1;
		}
		strsep(&p2, "%");
	}
	return 0;
}

int
parse_ops(struct personality *pers, int off, char *line)
{
	char *p = line, *p2 = line, *end;

	while (p != NULL && strlen(p))
	{
		p2 = strsep(&p, "%");
		/* We ignore all other values, only take the first */
		end = p2;
		p2 = strsep(&end, "|");

		if (strncasecmp(p2, "O", 1) == 0)
		{
			p2++;
			uint testNumber = strtoul(p2, &end, 10);
			if( (testNumber >= 1) && (testNumber <= 6) )
			{
				testNumber--;
			}
			else
			{
				return -1;
			}

			//The number should have been just one digit
			if( end != p2+1 )
			{
				return -1;
			}
			p2 += 2;
			//Some OPS lines start with an OR for some reason... just ignore it.
			//	IS it trying to say that sometimes the options aren't present?
			if( *p2 == '|')
			{
				p2++;
			}

			if( parse_option(&(pers->seq_tests[testNumber].options), p2) == -1)
			{
				return -1;
			}
		}
	}

	return 0;
}

//Parses a single TCP options line, and stores it into a newly created array of tcp_option structs
// options is the address of the pointer to where the array will be stored
// line is the null terminated string to be parsed, such as:  WANM5B4T10S
int
parse_option(struct tcp_options *options, char *line)
{
	char *end;
	uint i = 0;

	//Allocate memory for the Options array
	uint numOptions = CountCharsInString(line, "LNSMWT");
	uint dataSize = sizeof(struct tcp_option) * numOptions;
	options->options = (struct tcp_option *)malloc(dataSize);
	options->count = numOptions;

	while( *line != '\0')
	{
		options->options[i].opt_type = *line;
		switch (*line)
		{
			case 'L':
			case 'N':
			case 'S':
			{
				line++;
				break;
			}
			case 'M':
			case 'W':
			{
				line++;
				options->options[i].value = strtoul(line, &end, 16);
				line = end;
				break;
			}
			case 'T':
			{
				options->options[i].TSval = *(line+1);
				options->options[i].TSecr = *(line+2);
				line += 3;
				break;
			}
			default:
			{
				//Error
				return -1;
			}
		}
		i++;
	}
	return 0;
}

//Helper function.
//Counts the number instances of the characters in *chars in the string *string
uint
CountCharsInString(char *string, char *chars)
{
	uint charsLength = strlen(chars);
	uint count = 0;
	uint i = 0;
	uint num = 0;
	while(*(string + i) != '\0')
	{
		uint j=0;
		for(; j < charsLength; j++)
		{
			num++;
			if( string[i] == chars[j] )
			{
				count++;
			}
		}
		i++;
	}

	return count;
}

int
parse_win(struct personality *pers, int off, char *line)
{
	//This line is very uniform, W1 through W6 followed by = then 1-4 hex digits denoting the value
	// Occasionally there are alternate values specified by '|' then 1-4 hex digits
	// Currently just choosing the first is sufficient to fool nmap
	char * p = line, *p2 = line, *end = line;
	int i = 0;
	//TODO Currently only takes first value in window line, does not account for OR'd values
	while(end != NULL && strlen(p) && i < 6)
	{
		strsep(&p2, "=");
		//If line is WIN(R=N)
		if(*p2 == 'N')
		{
			pers->seq_tests[i].window = 0;
			i++;
			pers->seq_tests[i].window = 0;
			i++;
			pers->seq_tests[i].window = 0;
			i++;
			pers->seq_tests[i].window = 0;
			i++;
			pers->seq_tests[i].window = 0;
			i++;
			pers->seq_tests[i].window = 0;
			i++;
		}
		else
		{
			pers->seq_tests[i].window = strtoul(p2, &end, 16);

			//should be between 1 and 4 digits
			if(((end-p2) > 4 ) || (end-p2) < 1)
				return -1;
			i++;
		}
	}
	return 0;
}

int
parse_ecn(struct personality *pers, int off, char *line)
{
	char *p = line, *p2 = line, *end;
	char c;
	//the personate_ecn struct is new and is specific to the ecn test only
	struct personate * ecn = &pers->ecn_test;
	ecn->ttl = 0;

	//Can always expect R= first
	//We can assume there are no white spaces and all letters are caps
	if(!strncasecmp(line, "R=N", 3))
	{
		ecn->response = 0;
		return (0);
	}
	else if(!strncasecmp(line, "R=Y", 3))
	{
		ecn->response = 1;
		strsep(&p2, "%");
		ecn->flags = (TH_SYN|TH_ACK);
		while (p2 != NULL && strlen(p))
		{
			c = *p2;
			switch(c)
			{
				case 'D':
					//Only D should be DF= field
					if(!strncasecmp(p2,"DF=N", 4))
						ecn->df = 0;

					else if(!strncasecmp(p2,"DF=Y", 4))
						ecn->df = 1;

					else return -1;

					break;

				case 'T':
					//TTL Guess
					if(*(p2+1) == 'G')
					{
						strsep(&p2, "=");
						ecn->ttl_guess = strtoul(p2, &end, 16);
						if(ecn->ttl == 0)
							ecn->ttl = ecn->ttl_guess;
					}
					//Actual TTL
					else if(*(p2+1) == '=')
					{
						strsep(&p2, "=");
						ecn->ttl_min = strtoul(p2, &end, 16);
						//If the TTL has a range and is not a flat value
						if(*end == '-')
						{
							strsep(&p2, "-");
							int max = strtoul(p2, &end, 16);
							if (max > 255)
							{
								ecn->ttl_max = 255;
							}
							else
							{
								ecn->ttl_max = max;
							}
						}
						//If there isn't a second value the TTL is flat
						else
							ecn->ttl_max = ecn->ttl_min;
						//set ttl to the average
						//TODO we should be getting a random value in the range
						ecn->ttl = (ecn->ttl_max+ecn->ttl_min)/2;
					}
					else return -1;
					break;

				case 'W':
					strsep(&p2, "=");
					ecn->window = strtoul(p2, &end, 16);
					break;

				case 'O':
					//allocates the memory for char * ecn->options and copies the options into them
					strsep(&p2, "=");
					end = p2;
					//Ignore the | at front of options
					if(*p2 == '|')
						strsep(&p2, "|");

					end = strsep(&p2, "%");
					end = strsep(&end,"|");
					if(parse_option(&(ecn->options), end) == -1)
					{
						return -1;
					}
					continue;
				case 'C':
					strsep(&p2, "=");
					c = *p2;
					switch(c)
					{
						case 'Y':
							ecn->flags |= TH_ECE;
							break;
						case 'N':
							break;
						case 'S':
							ecn->flags |= (TH_ECE|TH_CWR);
							break;
						case 'O':
							ecn->flags |= TH_CWR;
							break;
						default:
							return -1;
					}
					break;

				case 'Q':
					strsep(&p2, "=");
					c = *p2;
					ecn->q = 0;
					switch(c)
					{
						//Vals of corresponding enum:"" = 0 "R" = 1, "U" = 2, "RU" = 3
						//R must be first, if there is R, enum val is either 1 or 3.
						case 'R':
							ecn->q++;
							//The only other option U must occur after R if R is present
							if(*(p2+1) != 'U') //break it it is not
								break;
						case 'U':
							//If U is present the enum val is either 2 or 3
							ecn->q += 2;
						default:
							//break by default since Q is always present but may not have a value.
							break;
					}
					break;
				default: //Anything other than these options after a '%' is unexpected
					return -1;
			}
			strsep(&p2, "%");
		}
		return 0;
	}
	else return -1;
}

int
parse_ie(struct personality *pers, int off, char *line)
{
	char *p = line, *p2 = line, *end;
	struct personate_ie * ie = &pers->ie_test;
	char c;
	ie->ttl = 0;

	// If R is present it always seems to be N, doesn't seem present if test is used
	// we check for it anyway
	if(!strncasecmp(line, "R=N", 3))
	{
		ie->response = 0;
		return (0);
	}
	if(!strncasecmp(line, "R=Y", 3))
	{
		strsep(&p2, "%");
	}
	ie->response = 1;
	while (p2 != NULL && strlen(p))
	{
		c = *p2;
		switch(c)
		{
			case 'D': //DFI Test
				strsep(&p2, "=");
				c = *p2;
				switch(c)
				{	//As long as the character is any one of these 4 we can just use the char
					// there should only ever one char in this field
					case 'N':
					case 'S':
					case 'Y':
					case 'O':
						ie->dfi_test = c;
						break;
					default:
						return -1;
				}
				break;
			case 'T':
				//TTL Guess
				if(*(p2+1) == 'G')
				{
					strsep(&p2, "=");
					ie->ttl_guess = strtoul(p2, &end, 16);
					if(ie->ttl == 0)
						ie->ttl = ie->ttl_guess;
				}
				//Actual TTL
				else if(*(p2+1) == '=')
				{
					strsep(&p2, "=");
					ie->ttl_min = strtoul(p2, &end, 16);
					//If the TTL has a range and is not a flat value
					if(*end == '-')
					{
						strsep(&p2, "-");
						int max = strtoul(p2, &end, 16);
						if (max > 255)
						{
							ie->ttl_max = 255;
						}
						else
						{
							ie->ttl_max = max;
						}
					}
					//If there isn't a second value the TTL is flat
					else
						ie->ttl_max = ie->ttl_min;
					ie->ttl = (ie->ttl_max+ie->ttl_min)/2;
				}
				else return -1;
				break;
			case 'C': //CD Test (ICMP Echo code)
				strsep(&p2, "=");
				c = *p2;
				switch(c)
				{	//As long as the character is any one of these 3 we can just use the char
					// there should only be these three chars or a number
					case 'Z':
					case 'S':
					case 'O':
						ie->replyCode = c;
						ie->replyVal = 0;
						break;
					default:
						ie->replyCode = 'N';
						ie->replyVal = strtoul(p2, &end, 16);
						break;
				}
				break;
			default:
				return -1;
		}
		strsep(&p2,"%");
	}
	return 0;
}


struct parse_test {
	char *start;
	int offset;
	int (*parse_test)(struct personality *, int, char *);
} parse_tests[] = {
	{"SEQ", 0, parse_seq},
	{"OPS", 0, parse_ops},
	{"WIN", 0, parse_win},
	{"ECN", 0, parse_ecn},
	{"T1", 0, parse_tl},
	{"T2", 1, parse_tl},
	{"T3", 2, parse_tl},
	{"T4", 3, parse_tl},
	{"T5", 4, parse_tl},
	{"T6", 5, parse_tl},
	{"T7", 6, parse_tl},
	{"U1", 0, parse_u1},
	{"IE", 0, parse_ie},
	{NULL, 0, NULL}
};

int
personality_line(struct personality *pers, char *line)
{
	struct parse_test *pt = parse_tests;
	char *p, *p2;

	/* Ignore additional nmap output */
	if (strncasecmp(line, "Class", 5) == 0)
		return (0);
	
	if (strncasecmp(line, "CPE", 3) == 0)
		return (0);

	if (strncasecmp(line, "CPE", 3) == 0)
		return (0);

	p2 = line;
	p = strsep(&p2, "(");
	if (p2 == NULL)
		return (-1);
	p = strsep(&p2, ")");
	if (p2 == NULL)
		return (-1);
	for (; pt->start; pt++) {
		if (strncasecmp(line, pt->start, strlen(pt->start)) == 0)
			return (pt->parse_test(pers, pt->offset, p));
	}

	return (-1);
}

/* Creates a new personality and details on how to deal with duplicates */

struct personality *
personality_config_new(const char *name, int lineno)
{
	struct personality *pers;

	if ((pers = personality_new(name)) != NULL)
		return (pers);

	DFPRINTF(2, (stderr, "%d: Overwriting old fingerprint \"%s\"\n",
		lineno, name));

	/* Find the old personality, and remove it */
	pers = personality_find(name);
	personality_free(pers);

	return (personality_new(name));
}

/* Parsing Functions */

int
personality_parse(FILE *fin)
{
	char bl[1024], line[1024], *p, *p2;
	int errors = 0, lineno = 0, ignore = 0;
	struct personality *pers = NULL;

	while ((p = fgets(line, sizeof(line), fin)) != NULL) {
		strlcpy(bl, line, sizeof(bl));

		lineno++;
		p += strspn(p, WHITESPACE);

		if (*p == '\0' || *p == '#') {
			pers = NULL;
			continue;
		}

		/* Remove trailing comments */
		p2 = p;
		strsep(&p2, "#\r\n");

		if (CMP(p, MATCHPOINTS) == 0) {
			pers = NULL;
			ignore = 1;
			continue;
		}

		if (CMP(p, FINGERPRINT) == 0) {
			p += sizeof(FINGERPRINT) - 1;
			p += strspn(p, ": \t");
			if (!isalnum(*p)) {
				fprintf(stderr, "%d: bad name \"%s\"\n",
				    lineno, p);
				return (-1);
			}
			for (p2 = p + strlen(p) - 1; isblank(*p2); p2--)
				*p2 = '\0';

			if ((pers = personality_config_new(p, lineno)) == NULL)
				ignore = 1;
			else
				ignore = 0;
			continue;
		}

		if (pers == NULL) {
			if (ignore)
				continue;

			fprintf(stderr, "%d: No personality for \"%s\"\n",
			    lineno, p);
			return (-1);
		}

		if (personality_line(pers, p) == -1) {
			fprintf(stderr, "%d: parse error: %s", lineno, bl);
			errors++;
		}
	}

	return (errors ? -1 : 0);
}

//-------------------------------------------------------------------
/* ET - Moved student xprobe parse functions from xprobe_parse.c */
/* CK - These are pretty much self-explanitory. Some are not very good.*/
/* ET - Actually none are very good since they don't return an error if
 *      an unexpected value was found.  In all cases, they look for
 *      all but one of the possible values, and if none of those values
 *      are found, the one value not searched for is returned.  Uggghhhh!
 *      This implementation should change.  At least there should be some
 *      enums or macros for the values instead of magic numbers.  */

static int
get_zero_notzero(char *input)
{                               /* returns 1 if zero, 0 otherwise */
	return (strncmp (input, "!0", 2) == 0);
}

/* ET - Added this one since the df bit is 0 or 1 */
static int
get_zero_one(char *input)
{                               /* returns 1 if zero, 0 otherwise */
	return (input[0] == '1');
}

static int
get_yes_no(char *input)
{                               /*returns 0 if y, 0 otherwise */
	return ((strncasecmp (input, "Y", 1) == 0));
}

static int
get_zero_ok_bad(char *input)
{
	if (input[0] == '0')
		return (1);
	else if (strncmp (input, "OK", 2) == 0)
		return (2);
	else if (strncmp (input, "BAD", 3) == 0)
		return (4);

	return (0);
}

static int
get_ok_flipped(char *input)
{
	if (strncmp (input, "OK", 2) == 0)
		return (1);
	else if (strncmp (input, "FLIPPED", 7) == 0)
		return (2);

	return 0;
}

static int
get_echoed_total_len(char *input)
{
	if (strcmp (input, ">20") == 0)
		return (1);
	else if (strcmp (input, "OK") == 0)
		return (2);
	else if (strcmp (input, "<20") == 0)
		return (4);

	return 0;
}

static int
get_echoed_dtsize (char *input)
{
	if (input[0] == '8')
		return (1);
	else if (strncmp (input, "64", 2) == 0)
		return (2);
	else if (strncmp (input, ">64", 3) == 0)
		return (4);

	return (0);
}

static struct ttl_pair
parse_and_load_ttl_pair(char *p)
{
	/* CK- Parse TTL pairs*/
	struct ttl_pair to_load;
	char *tmp_p = p;

	to_load.gt_lt = 0;
	if (p[0] == '>') {
		to_load.gt_lt = 1;
		strsep (&tmp_p, ">");
	} else if (p[0] == '<') {
		to_load.gt_lt = 2;
		strsep (&tmp_p, "<");
	}
	to_load.ttl_val = atoi (tmp_p);

	return (to_load);
}

/* ET - Called by get_fprint() only */
static int
set_xp_struct(struct xp_fingerprint *pers, char *line)
{
	/* CK- Parse xprobe lines. */
	char *p, *p2;
	int osname_len;
	int foo;

	p = p2 = line;
	if ((foo = strncasecmp (p2, "OS_ID", 5)) == 0) {
		/* Copy OS Name into structure:
		 * Gets the OS name into p2, assuming line has
		 * 'OS_ID = "OS"'
		 */
		strsep (&p2, "=");
		strsep (&p2, " ");
		strsep (&p2, "\"");
		p = strsep (&p2, "\"");
		if (p == NULL || p2 == NULL)
			return (0);
		osname_len = strcspn (p, "\0");
		if (osname_len <= 0)
			return (0);
		pers->os_id = strdup(p);
	} else {
		/* Copy other icmp values into structure:
		 * Assumes the the format is: 'icmp_... = val'
		 */
		if (strsep (&p2, "=") == NULL || p2 == NULL)
			return (0);
		p2 += strspn(p2, WHITESPACE);

		if (strncmp (p, "icmp_echo_code", 14) == 0) {
			pers->flags.icmp_echo_code = get_zero_notzero (p2);
		} else if (strncmp (p, "icmp_echo_ip_id", 15) == 0) {
			pers->flags.icmp_echo_ip_id = get_zero_notzero (p2);
		} else if (strncmp (p, "icmp_echo_tos_bits", 18) == 0) {
			pers->flags.icmp_echo_tos_bits = get_zero_notzero (p2);
		} else if (strncmp (p, "icmp_echo_df_bit", 16) == 0) {
			pers->flags.icmp_echo_df_bit = get_zero_one (p2);
		} else if (strncmp (p, "icmp_echo_reply_ttl", 19) == 0) {
			pers->ttl_vals.icmp_echo_reply_ttl = parse_and_load_ttl_pair (p2);
		} else if (strncmp (p, "icmp_timestamp_reply_ttl", 24) == 0) {
			pers->ttl_vals.icmp_timestamp_reply_ttl =
			    parse_and_load_ttl_pair (p2);
		} else if (strncmp (p, "icmp_timestamp_reply", 20) == 0) {
			pers->flags.icmp_timestamp_reply = get_yes_no (p2);
		} else if (strncmp (p, "icmp_addrmask_reply_ttl", 23) == 0) {
			pers->ttl_vals.icmp_addrmask_reply_ttl =
			    parse_and_load_ttl_pair (p2);
		} else if (strncmp (p, "icmp_addrmask_reply", 19) == 0) {
			pers->flags.icmp_addrmask_reply = get_yes_no (p2);
		} else if (strncmp (p, "icmp_info_reply_ttl", 19) == 0) {
			pers->ttl_vals.icmp_info_reply_ttl = parse_and_load_ttl_pair (p2);
		} else if (strncmp (p, "icmp_info_reply", 15) == 0) {
			pers->flags.icmp_info_reply = get_yes_no (p2);
		} else if (strncmp (p, "icmp_unreach_echoed_dtsize", 26) == 0){
			pers->flags.icmp_unreach_echoed_dtsize = get_echoed_dtsize (p2);
		} else if (strncmp (p, "icmp_unreach_reply_ttl", 22) == 0) {
			pers->ttl_vals.icmp_unreach_reply_ttl =
			    parse_and_load_ttl_pair (p2);
		} else if (strncmp (p, "icmp_unreach_precedence_bits", 28) == 0) {
			pers->flags.icmp_unreach_precedence_bits = strtol (p2, NULL, 16);
		} else if (strncmp (p, "icmp_unreach_df_bit", 19) == 0) {
			pers->flags.icmp_unreach_df_bit = get_zero_one (p2);
		} else if (strncmp (p, "icmp_unreach_echoed_udp_cksum", 29) == 0) {
			pers->flags.icmp_unreach_echoed_udp_cksum = get_zero_ok_bad (p2);
		} else if (strncmp (p, "icmp_unreach_echoed_ip_cksum", 28) == 0) {
			pers->flags.icmp_unreach_echoed_ip_cksum = get_zero_ok_bad (p2);
		} else if (strncmp (p, "icmp_unreach_echoed_ip_id", 25) == 0) {
			pers->flags.icmp_unreach_echoed_ip_id = get_ok_flipped (p2);
		} else if (strncmp (p, "icmp_unreach_echoed_total_len", 29) == 0) {
			pers->flags.icmp_unreach_echoed_total_len =
			    get_echoed_total_len (p2);
		} else if (strncmp (p, "icmp_unreach_echoed_3bit_flags", 30) == 0) {
			pers->flags.icmp_unreach_echoed_3bit_flags = get_ok_flipped (p2);
		} else {
			/* Hmmm, got an unrecognized line.  You FAIL */
			return (0);
		}
	}

	return (1);
}

/* ET - Called by xprobe_personality_parse() only to parse a single FP */
/* CK - Parses one finger print at a time, returns a pointer */
static struct xp_fingerprint *
get_fprint(FILE * fp_in)
{
	char line[1024], *p, *p2;
	struct xp_fingerprint *pers = NULL;
	int generic = 0;

	pers = (struct xp_fingerprint *) calloc (1,sizeof (struct xp_fingerprint));
	if (pers == NULL) {
		warn("%s: Could not allocate\n", __func__);
		return (NULL);
	}

	/* Get a single line */
	while ((p = fgets (line, sizeof (line), fp_in)) != NULL) {
		/* Skip leading whitespace */
		p += strspn (p, WHITESPACE);
		/* Eliminate blank lines and comments */
		if (*p == '\0' || *p == '#')
			continue;

		/* Remove trailing comments */
		p2 = p;
		strsep (&p2, "#\r\n");

		/* Remove trailing whitespace  */
		for (p2 -= 2; (p2 >= p) && isspace (*p2); p2--)
			*p2 = '\0';

		/* Ignore the "fingperint {" line */
		if (CMP (p, XPRINT) == 0)
			continue;

		/* xprobe2.conf has a generic section.
		 * This skips that section */
		if (CMP (p, "generic") == 0)
			generic = 1;
		if (*p == '}') {
			if (!generic) {
				/* This closing brace signifies the end of
				 * a fingerprint. */
				return pers;
			}

			/* Unskip the generic section */
			generic = 0;
			continue;
		}

		/* Skip the generic section */
		if (generic)
			continue;
		/* This line is not a comment, blank line, or start of a fingerprint.
		 * So it must be a icmp_* or OS_ID line, right? :) */
		if (!set_xp_struct (pers, p)) {
			fprintf (stderr, "Errors setting struct\n");
			free(pers);
			return (NULL);
		}
	}

	/* If we return here, then we didn't get a complete fingerprint.
	 * Therefore we must free the alloced fingerprint and return NULL. */
	free(pers);

	return (NULL);
}

/* !!!DEBUG FUNCTION!!! */

static void __attribute__ ((unused))
print_xprobe_struct(struct xp_fingerprint *pers)
{
	printf ("OS_ID:                             %s\n", pers->os_id);
	printf ("-- Module A --\n");
	printf ("icmp_echo_code:                    %d\n",
            pers->flags.icmp_echo_code);
	printf ("icmp_echo_ip_id:                   %d\n",
            pers->flags.icmp_echo_ip_id);
	printf ("icmp_echo_tos_bits:                %d\n",
            pers->flags.icmp_echo_tos_bits);
	printf ("icmp_echo_df_bit:                  %d\n",
            pers->flags.icmp_echo_df_bit);
	printf ("icmp_reply_ttl.gt_lt:              %d\n",
            pers->ttl_vals.icmp_echo_reply_ttl.gt_lt);
	printf ("icmp_reply_ttl.ttl_vals:           %d\n",
            pers->ttl_vals.icmp_echo_reply_ttl.ttl_val);
	printf ("-- Module B --\n");
	printf ("icmp_timestamp_reply:              %d\n",
            pers->flags.icmp_timestamp_reply);
	printf ("icmp_timestamp_reply_ttl.gt_lt:    %d\n",
            pers->ttl_vals.icmp_timestamp_reply_ttl.gt_lt);
	printf ("icmp_timestamp_reply_ttl.ttl_vals: %d\n",
            pers->ttl_vals.icmp_timestamp_reply_ttl.ttl_val);
	printf ("-- Module C --\n");
	printf ("icmp_addrmask_reply:               %d\n",
            pers->flags.icmp_addrmask_reply);
	printf ("icmp_addrmask_reply_ttl.gt_lt:     %d\n",
            pers->ttl_vals.icmp_addrmask_reply_ttl.gt_lt);
	printf ("icmp_addrmask_reply_ttl.ttl_vals:  %d\n",
            pers->ttl_vals.icmp_addrmask_reply_ttl.ttl_val);
	printf ("-- Module D --\n");
	printf ("icmp_info_reply:                   %d\n",
            pers->flags.icmp_info_reply);
	printf ("icmp_info_reply_ttl.gt_lt:         %d\n",
            pers->ttl_vals.icmp_info_reply_ttl.gt_lt);
	printf ("icmp_info_reply_ttl.ttl_vals:      %d\n",
            pers->ttl_vals.icmp_info_reply_ttl.ttl_val);
	printf ("-- Module E --\n");
	printf ("icmp_unreach_echoed_dtsize:        %d\n",
            pers->flags.icmp_unreach_echoed_dtsize);
	printf ("icmp_u_reply_ttl.gt_lt:            %d\n",
            pers->ttl_vals.icmp_unreach_reply_ttl.gt_lt);
	printf ("icmp_u_reply_ttl.ttl_vals:         %d\n",
            pers->ttl_vals.icmp_unreach_reply_ttl.ttl_val);
	printf ("icmp_unreach_precedence_bits:      0x%x\n",
            pers->flags.icmp_unreach_precedence_bits);
	printf ("icmp_unreach_df_bit:               %d\n",
            pers->flags.icmp_unreach_df_bit);
	printf ("icmp_unreach_echoed_udp_cksum:     %d\n",
            pers->flags.icmp_unreach_echoed_udp_cksum);
	printf ("icmp_unreach_echoed_ip_cksum:      %d\n",
            pers->flags.icmp_unreach_echoed_ip_cksum);
	printf ("icmp_unreach_echoed_ip_id:         %d\n",
            pers->flags.icmp_unreach_echoed_ip_id);
	printf ("icmp_unreach_echoed_total_len:     %d\n",
            pers->flags.icmp_unreach_echoed_total_len);
	printf ("icmp_unreach_echoed_3bit_flags:    %d\n",
            pers->flags.icmp_unreach_echoed_3bit_flags);
}

void
print_perstree(void)
{
	struct personality * pers;
	int i = 0;
	SPLAY_FOREACH(pers, perstree, &personalities) {
		if (pers->xp_fprint != NULL)
			printf("\tXP %d: %s\n", ++i, pers->xp_fprint->os_id);
	}
}

/**
 * Loads the xprobe fingerprint file and stores the fingerprints in the
 * correct personality based upon the association table
 *
 * @param fp The pre-fopen'd file to load
 * @return -1 on failure, 0 on success
 */

int
xprobe_personality_parse(FILE *fp)
{
	struct xp_fingerprint *new_print = NULL;

	if (fp == NULL) {
		fprintf (stderr, "Could not parse fingerprint file!");
		return (-1);
	}

	while (!feof (fp)) {
		/* Get a single fingerprint */
		new_print = get_fprint (fp); 
		if (new_print != NULL) {
			/* print_xprobe_struct (new_print); */
			SPLAY_INSERT(xp_fprint_tree, &xp_fprints, new_print);
			new_print = NULL;
		}
	}

	return (0);
}