WinCap 使用心得

最近需要设计网络抓包方面的软件，WinCap在这方面还是挺有名气的，于是下载了一个WinCap 4.02做了点研究由于本人一直在用MFC做一些设计，所以这里就MFC下使用WinCap4.02写点心得，主要目的是总结和帮助新手们更快地入门。
一、配置
第一步：下载官方主页上的WinCap安装包和开发包(Develop)
第二步：为方便使用把开发包里面的include文件下的.h文件添加入VC6的include文件夹下面，把lib文件夹下面的.lib文件添加入vc6的lib文件夹下面。
好了现在在开发MFC项目的使用要使用wincap只需要在项目文档中加入应用#include "pcap.h"，在编译器选项当中增加连接库wcap.lib 和wsock32.lib两个，然和就可以使用wincap提供的函数了。
二、基本的程序
使用wincap最简单的应用是抓包，抓tcp/ip数据包。其他的就先不看了，直接运行开发包里面给的examples，看看文件：pktdump.h
/*
* Copyright (c) 1999 - 2005 NetGroup, Politecnico di Torino (Italy)
* Copyright (c) 2005 - 2006 CACE Technologies, Davis (California)
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. Neither the name of the Politecnico di Torino, CACE Technologies
* nor the names of its contributors may be used to endorse or promote
* products derived from this software without specific prior written
* permission.
*
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
* OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*
*/

#include <stdlib.h>
#include <stdio.h>

#include <pcap.h>

#define LINE_LEN 16

int main(int argc, char **argv)
{
pcap_if_t *alldevs, *d;
pcap_t *fp;
u_int inum, i=0;
char errbuf[PCAP_ERRBUF_SIZE];
int res;
struct pcap_pkthdr *header;
const u_char *pkt_data;

printf("pktdump_ex: prints the packets of the network using WinPcap./n");
printf("   Usage: pktdump_ex [-s source]/n/n"
  "   Examples:/n"
  "      pktdump_ex -s file.acp/n"
  "      pktdump_ex -s //Device//NPF_{C8736017-F3C3-4373-94AC-9A34B7DAD998}/n/n");

if(argc < 3)
{
  printf("/nNo adapter selected: printing the device list:/n");
  /* The user didn't provide a packet source: Retrieve the local device list */
  if(pcap_findalldevs(&alldevs, errbuf) == -1)
  {
   fprintf(stderr,"Error in pcap_findalldevs_ex: %s/n", errbuf);
   exit(1);
  }

  /* Print the list */
  for(d=alldevs; d; d=d->next)
  {
   printf("%d. %s/n    ", ++i, d->name);

if (d->description)
    printf(" (%s)/n", d->description);
   else
    printf(" (No description available)/n");
  }

  if (i==0)
  {
   printf("/nNo interfaces found! Make sure WinPcap is installed./n");
   return -1;
  }

  printf("Enter the interface number (1-%d):",i);
  scanf("%d", &inum);

  if (inum < 1 || inum > i)
  {
   printf("/nInterface number out of range./n");

/* Free the device list */
   pcap_freealldevs(alldevs);
   return -1;
  }

  /* Jump to the selected adapter */
  for (d=alldevs, i=0; i< inum-1 ;d=d->next, i++);

  /* Open the adapter */
  if ((fp = pcap_open_live(d->name, // name of the device
   65536,       // portion of the packet to capture.
           // 65536 grants that the whole packet will be captured on all the MACs.
   1,        // promiscuous mode (nonzero means promiscuous)
   1000,       // read timeout
   errbuf       // error buffer
   )) == NULL)
  {
   fprintf(stderr,"/nError opening adapter/n");
   return -1;
  }
}
else
{
  /* Do not check for the switch type ('-s') */
  if ((fp = pcap_open_live(argv[2], // name of the device
   65536,       // portion of the packet to capture.
           // 65536 grants that the whole packet will be captured on all the MACs.
   1,        // promiscuous mode (nonzero means promiscuous)
   1000,       // read timeout
   errbuf       // error buffer
   )) == NULL)
  {
   fprintf(stderr,"/nError opening adapter/n");
   return -1;
  }
}

/* Read the packets */
while((res = pcap_next_ex( fp, &header, &pkt_data)) >= 0)
{

if(res == 0)
/* Timeout elapsed */
continue;

/* print pkt timestamp and pkt len */
  printf("%ld:%ld (%ld)/n", header->ts.tv_sec, header->ts.tv_usec, header->len);

  /* Print the packet */
  for (i=1; (i < header->caplen + 1 ) ; i++)
  {
   printf("%.2x ", pkt_data[i-1]);
   if ( (i % LINE_LEN) == 0) printf("/n");
  }

  printf("/n/n");
}

if(res == -1)
{
printf("Error reading the packets: %s/n", pcap_geterr(fp));
return -1;
}

pcap_close(fp);
return 0;
}

WinCap 使用心得相关推荐

Java EE学习心得
–Java EE学习心得 1. 称为编程专家的秘诀是: 思考-----编程--------思考------编程--.. 编程不能一步到位,不能一上来就编,必须先思考如何写,怎样写?然后再编程 ...
测试心得：微图书销售小程序
测试心得:微图书销售小程序前言这个学期差不多也将近结束,经过大半个学期,从项目需求的确认和项目文档的编写,到一步步的设计与实现,现在终于到了测试阶段,但是我们在测试阶段也暴露出了很多bug,但是每 ...
java.lang.OutOfMemoryError：GC overhead limit exceeded填坑心得
该文章出自:http://www.cnblogs.com/hucn/p/3572384.html 分析工具:http://www.blogjava.net/jjshcc/archive/2014/03 ...
计算机财务应用实验心得,计算机会计实习心得-20210628124643.doc-原创力文档
计算机会计实习心得计算机会计实习心得1 毕业实践环节是大学生在完成全部课程后.走向社会之前最真实的一个模拟实验,对于我们财会专业的学生,平时注意注重理论学习,缺乏实践锻炼,因此实习显得尤为重要.在本 ...
html5考试总结300字,期中考心得300字5
为了检验学生半个学期所学的知识而进行的一次考试,有利于学生比较正式地检验自己平时的学习水平,根据这个成绩,学生可以及时的调整学习心态和方法,更有效率地进行下一阶段的学习,期中考试主要考察学生前半学期的 ...
Assembly学习心得
http://blog.csdn.net/etmonitor/ Assembly学习心得说明: 最近开始准备把学到的.NET知识重新整理一遍,眼过千遍不如手过一遍,所以我准备记下我的学习心得,已备参 ...
什么叫安装文件索引服务器,搜出精彩玩转Windows 2008系统心得
[IT168 专稿]不少朋友已经在不经意间与Windows Server 2008系统进行了亲密接触,在一段时间的接触之后,不知大家对该系统的文件搜索功能会有什么样的体会?其实,Windows Ser ...
mysql主从数据库含义_(转)Mysql数据库主从心得整理
管理mysql主从有2年多了,管理过200多组mysql主从,几乎涉及到各个版本的主从,本博文属于总结性的,有一部分是摘自网络,大部分是根据自己管理的心得和经验所写,整理了一下,分享给各位同行,希望对 ...
工作中InnoDB引擎数据库主从复制同步心得
近期将公司的MySQL架构升级了,由原先的一主多从换成了DRBD+Heartbeat双主多从,正好手上有一个电子商务网站新项目也要上线了,用的是DRBD+Heartbeat双主一从,由于此过程还是有别 ...

WinCap 使用心得

WinCap 使用心得相关推荐

最新文章

热门文章