Give a NetDump program, caught the package. If it is improved, I hope to post (taken from the chinaunix-> Forum Home -> CC

Chinaunix.net

Home | Forum | Essence | Blog | Talent | Salon | Search

Hello, XXbView, welcome to enter the Chinaunix Forum, my blog | Favorites | Personal Collection Personal Information | You don't have new station letters | Login

Advanced Search Flute Mail System - Due to Linux and Wonderful JSP PHP Virtual Hosts, Free Bind Domain Name, Multiple Save Directory

Give a NetDump program, caught the package. If it is improved, I hope to post the page 1, 2, 3 next page

ChinaUnix.Net Home-> Forum Home -> C / C Add to My Favorites

Read the previous topic :: Read the next theme author Message Siddi Moderator - Angel Registration Time: 2003-08-25 Last Login: 2005-01-10 Total number: 1165 Essence Post: 1 Original Essence: 0 From: Dongcheng Online status: ... confidential ...

Published in: 2005-01-07 15:01 Published theme: Give a NetDump program, caught the package. If it is improved, I hope to post it

The most basic, on Linux i386

Code: //netdump.c #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include void Die (char * why, int N) {PERROR (why); exit (n);} INT Do_Promisc (CHAR * NIF, INT SOCK) {struct ifReq IFR; STRNCPY (IFR.IFR_NAME, NIF, STRLEN (NIF) 1); IF ((IOCK, Siocgifflags, & IFR) == -1)) {DIE ("IOCTL", 2);} ifr.ifr_flags | = IFF_Promisc; IF (IOCK, Siocsifflags, & IFR) == -1) {Die ("IOCTL", 3);}} char buf [2 * 32767] Main () {struct sockaddr_in addr; struct iPhdr * IP; struct tcphdr * TCP; int SOCK, R, LEN; Char * Data; CHAR SS [32], DD [32]; IF ((Sock = Socket (AF_INET, SOCK_RAW, IPPROTO_TCP) == -1) Die ("Socket", 1); Do_Promisc ("Eth0", SOCK); for (;;) {len = sizeof (addr); r = recvfrom (sock, (char *) BUF, SIZEOF (BUF), 0, (Struct SockAddr *) & addr, & len; buf [r] = 0; IP = (struct iPhdr *) BUF; TCP = (Struct TCPHDR *) (BUF SIZEOF (Struct iPhdr); Printf ("Pktsize:% D iPlen% D Prot% D% S:% D ->% S:% D% D / N", R, IP-> Tot_Len, IP-> Protocol, Strcpy ( SS, INET_NTOA (* (Struct In_ADDR *) & (IP-> Saddr)), NTOHS (TCP-> Source), STRCPY (DD, INETOA (* (Struct In_Addr *) & (IP-> DADDR)), NTOHS (TCP-> DEST), TCP-> DOFF); DATA = (char *) TCP 4 * TCP-> Doff; Printf ("DATA =

% S / N ", DATA);}} ________________ provides QMAIL system technical support. Build a more perfect mail system. Email: cindy_f_ye@yahoo.com.cn Back to top Beijing Netcom IDC host hosting, cu member discount!

WIN_HATE Moderator - Big Angel Registration Time: 2003-05-14 Last Listing: 2005-01-10 Total number: 1813 Essence Post: 1 Original Essence: 1 From: Guangzhou BLOG Homepage: Enter online status: ... confidential. .

Published in: 2005-01-07 15:01 Publish the topic:

________________ Clutch ... occasionally bubble ... you have more. In Computing, Turning The Obvious Into The Useful Is Living Definition of The Word "frustration". Http://my.chinaunix.net/win_HATE / || http://www.gzisi.com/ Back to top

Beijing Netcom IDC host hosted, cu member discount!

Si Zhike Moderator - Angel Registration Time: 2003-08-25 Last Login: 2005-01-10 Total number: 1165 Essence Post: 1 Original Essence: 0 From: Dongcheng Online Status: ... Confidential ...

Published in: 2005-01-07 15:01 Publish the topic:

Is that symbol, is it flutter, or criticized? _________________ provides QMAIL system technical support. Build a more perfect Mail system. Email: cindy_f_ye@yahoo.com.cn Back to top

Beijing Netcom IDC host hosted, cu member discount!

WIN_HATE Moderator - Big Angel Registration Time: 2003-05-14 Last Listing: 2005-01-10 Total number: 1813 Essence Post: 1 Original Essence: 1 From: Guangzhou BLOG Homepage: Enter online status: ... confidential. .

Published in: 2005-01-07 15:01 Publish the topic:

Yes: I will only use libpcap, ________________ Closed off ... occasionally bubbling ... you will have more. In Computing, Turning The Obvious Into The Useful Is Living Definition of The Word "frustration". Http://my.chinaunix.net/win_Hate/ || http://www.gzisi.com/ Finally, Edited is Win_Hate on 2005-01-07 15:01, the total first editing return to top

Beijing Netcom IDC host hosted, cu member discount!

Superdoctor Fengyun Messenger Registration Time: 2003-01-10 Total number: 474 Essence Post: 0 Original Essence: 0 From: Beijing CityBlog Home: Enter Online Status: ... Offline ...

Published in: 2005-01-07 15:01 Publish the topic:

Not only praise! It is already essential, there is no sound in this time _________________please click this link for detail: www.supermail.cn don't touch me! Back to top

Beijing Netcom IDC host hosted, cu member discount!

Si Zhike Moderator - Angel Registration Time: 2003-08-25 Last Login: 2005-01-10 Total number: 1165 Essence Post: 1 Original Essence: 0 From: Dongcheng Online Status: ... Confidential ...

Published in: 2005-01-07 15:01 Publish the topic:

What is the essence? I will do one, because I have a message that I have a question in these days. Did not put back is because it is afraid to disappear _________________ provides QMAIL system technical support. Build a more perfect Mail system. Email: cindy_f_ye@yahoo.com.cn Back to top Beijing Netcom IDC host hosted, cu member discount!

Huangshan Song Paladin Registration Time: 2004-09-16 Last Login: 2005-01-10 Total number of posts: 92 Essence Posts: 0 Original Essence: 0 Online Status: ... Offline ...

Published in: 2005-01-07 20:01 Published theme:

Not bad, huh, huh, you are too weak. I will help you change. You can only receive the data of the IP layer, and you can only have targeted receipt, now you can accept the link layer is also Net bag and is a size of each type, huh, huh

Code: #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include void Die (char * why, int N) {PERROR (why); exit (n);} int DO_Promisc (CHAR * NIF, INT Sock) {struct ifReq IFR; STRNCPY (IFR.IFR_NAME, NIF, STRLEN (NIF) 1) ; IOCTL (Sock, Siocgifflags, & IFR) == -1)) {DIE ("IOCTL", 2);} ifr.ifr_flags | = IFF_Promisc; IF (IOCK, Siocsifflags, & IFR) == -1 ) {DIE ("IOCTL", 3);}} char buf [2 * 32767]; main () {structure sockaddr_in addr; struct ethhhdr * peth; struct iphdr * pip; struct tcphdr * ptcp; struct udphdr * Pudp; / * add more protocol head here .... * / int suck, r, len; char * data; char * ptemp; char ss [32], dd [32]; int i; if ((sock = Socket) (AF_PACKET, SOCK_RAW, HTONS (Eth_P_all))) == -1) DIE ("Socket", 1); Do_Promisc ("Eth0", SOCK); for (;;) {len = sizeof (addr); r = recvfrom (SOCK, SIZEOF (BUF), 0, (Struct SockAddr *) & Addr, & Len); BUF [R] = 0; PTEMP = BUF;

/ * Which can get source mac address and destnation address, and which network packet, here is osi-2, link layer * / peth = (struct ethhhdr *) PTEMP; PTEMP = SizeOf (Struct Ethhdr); / * Which Get IP layer informations, includes which transport protocol, source and destnation IP address ... * / pip = (struct iphdr *) ptemp; / * * which can get transport layer informations, such as: transport socket port, transport layer includes * TCP, UDP, ICMP, IGMP ..., Can Get Which Transport Protocol from ip Header * / Ptemp = SizeOf (Struct iPhdr); Switch (Pip-> Protocol) {CASE IPPROTO_TCP: PTCP = (Struct TCPHDR *) PTEMP PRINTF ("TCP PKT: / N"); / * * And Your Service Code .... * / Break; Case ipproto_udp: pudp = (struct udphdr *) PTEMP; Printf ("UDP PKT: / N len:% D PayLoad LEN:% D from% s:% D to% S:% D / N ", R, NTOHS (PUDP-> LEN), STRCPY (SS, INET_NTOA (* (Struct In_Addr *) & (PIP-> Saddr)), NTOHS (Pudp-> Source), STRCPY (DD, INET_NTOA (* (Struct In_Addr *) & (pip-> daddr))), NTOHS (PUDP-> DEST)); / * * AND Your service code .... * / break; case ipproto_icmp: printf ("ICMP PKT: / N"); Break; Case Ipproto_igmp: Printf ("IGMP PKT: / N"); Break;

/ *..... 01-10 13:01, the total first editing Back to top Beijing Netcom IDC host hosted, CU member discount!

Huangshan Song Paladin Registration Time: 2004-09-16 Last Login: 2005-01-10 Total number of posts: 92 Essence Posts: 0 Original Essence: 0 Online Status: ... Offline ...

Published in: 2005-01-07 20:01 Published theme:

By the way, I think the essence should be more essential! Can't be the moderator, the essence, return to top

Beijing Netcom IDC host hosted, cu member discount!

WIN_HATE Moderator - Big Angel Registration Time: 2003-05-14 Last Listing: 2005-01-10 Total number: 1813 Essence Post: 1 Original Essence: 1 From: Guangzhou BLOG Homepage: Enter online status: ... confidential. .

Published in: 2005-01-07 22:01 Posted the topic:

Huangshan Song wrote: By the way, I feel that the essence should be more essential! It can't be the moderator, the suggestion is good, but we have

Quote: Is it the case of the moderator? ________________ Clutch ... occasionally bubble ... you have more. In Computing, Turning The Obvious Into The Useful Is Living Definition of The Word "frustration". Http://my.chinaunix.net/win_HATE / || http://www.gzisi.com/ Back to top

Beijing Netcom IDC host hosted, cu member discount!

Huangshan Song Paladin Registration Time: 2004-09-16 Last Login: 2005-01-10 Total number of posts: 92 Essence Posts: 0 Original Essence: 0 Online Status: ... Offline ...

Published in: 2005-01-08 10:01 Posted the topic:

WIN_HATE Write: Is the situation? If you change it, it is not necessary to add :) Nothing else, just want the C / C version better, this offer landlord is the moderator? Back to top

Beijing Netcom IDC host hosted, cu member discount!

Assiss Summit Messenger Registration Time: 2003-11-12 Last Login: 2005-01-10 Total number: 504 Essence Post: 0 Original Essence: 0BLOG Home: Enter Online Status: Offline ...

Published in: 2005-01-08 10:01 Posted the topic:

Huangshan Song wrote: there is a change, it is not true :) Nothing else, just want the C / C version better, this offer landlord is the moderator? It is no wonder that Huangshan Song brothers will misunderstand. The title of CU is really big. There are more posts, is the moderator? Still a version of the moderator? Anyway, I didn't understand. Back to top

Beijing Netcom IDC host hosted, cu member discount!

WIN_HATE Moderator - Big Angel Registration Time: 2003-05-14 Last Listing: 2005-01-10 Total number: 1813 Essence Post: 1 Original Essence: 1 From: Guangzhou BLOG Homepage: Enter online status: ... confidential. .

Published in: 2005-01-08 10:01 Posted the topic:

In my eyes, thinking is a happy technology master, I didn't notice that he was bamboo. Moreover, not a C version. If you feel that this essence is not right, you can say the reason, I will negotiate with other spikes. The reason I give the essence is as follows: Ask the people who have a problem, there is no reply that can be used directly. The general answer is "Look at XXX code", or "use libpcap" (my reply). And the reply of Siyi can be used directly. Si Zhike gives a minimal example, demonstrates how to use IOCTL to set the network device to a mixed mode. Small scale, simple, is easy to understand and can be extended, such as your later example. ________________ Clutch ... occasionally bubble ... you have more. IN computing, turning the obvious inTo the useful is living definition of the word "frustration". Http://my.chinaunix.net/win_Hate/ || http://www.gzisi.com/ Back to top Beijing Netcom IDC host Hosting, Cu member discount!

HONKILY KRE registration time: 2004-09-12 Last login: 2005-01-08 Total number: 19 Essence Post: 0 Original Essence: 0 From: Shanghai Online Status: ... Offline ...

Published in: 2005-01-08 17:01 Publish the topic:

It is really easy to use! Collection ~ Back to top

Beijing Netcom IDC host hosted, cu member discount!

Arcsiny Palains Registration Time: 2003-04-17 Last Login: 2005-01-10 Total number: 92 Essence Posts: 1 Original Essence: 0BLOG Home: Enter Online Status: ... Offline ...

Published in: 2005-01-10 09:01 Published topic:

Oh, an objective story of the landlord is really simple. If you give the essence, I think that Huangshan Pine is better. I think Huangshan Song is also a kind, including me. _________________ once used to drunken whip horse, fear of love, more beauty returning to top

Beijing Netcom IDC host hosted, cu member discount!

Si Zhike Moderator - Angel Registration Time: 2003-08-25 Last Login: 2005-01-10 Total number: 1165 Essence Post: 1 Original Essence: 0 From: Dongcheng Online Status: ... Confidential ...

Published in: 2005-01-10 09:01 Published topic:

Thanks for your comments. I have been doing that thing in WIN, there is a very full program, showing almost all protocols, and is displayed in DOS DEBUG's D command format. I am deliberately cutting, the purpose is to use teaching, in order to be the essence of it.

Arcsiny wrote: huh, the objective story of the landlord is really simple. If you give the essence, I think that Huangshan Pine is better. I think Huangshan Song is also a kind, including me. _________________ provides QMAIL system technical support. Build a more perfect Mail system. Email: cindy_f_ye@yahoo.com.cn Back to top

Beijing Netcom IDC host hosted, cu member discount!

ChinaUnix.Net Home-> Forum Home -> C / C Forum Time to Beijing Time Travel To Page 1, 2, 3 Next Page 1 / Total 3 Page

Subscribe to this topic

You can post a new topic You can reply to this forum You can edit your own post in this forum. You can't delete your own post in this forum. You can post vote on this forum You can upload images or files in this layout. Layout download file

This forum is purely personal opinion, and it has nothing to do with ChinaUnix.net stand.