1 class CSniffer
 2 {
 3 public:
 4     static DWORD WINAPI SnifferThread(LPVOID lpData);//线程函数
 5 public:
 6     CSniffer(HostArray * pOutPut);//构造函数，数据输出指针
 7     ~CSniffer(void);//析构函数，负责终止线程
 8     DWORD IsSucceed();//判断构造函数是否成功，我代码中没用上，就是单纯的返回dwSucceed
 9 private://Method
10     int IPHeadAnylasis(const char * pRecvBuf, const int nLen);//将IP数据存放到对应数据结构中。
11     unsigned short q_ntohs(const unsigned short nVal);//之前的遗留代码，没用上
12     const char * TypeTell(unsigned char type);//同上
13     unsigned short CheckSum(const void * pData, int size);//校验和函数，可以用一下，但是我没检验
14     void AddToInfoVector(PPortArray pInfoVector, ip_hdr * pIp, int nLen);//添加新的端口信息
15 private://Data
16     PHostArray pSnifferPool;//指向输出数据，全部的信息都存在其指向
17     HANDLE hThread;//线程句柄
18     DWORD dwSucceed;//标示参数
19 };

 1 DWORD WINAPI CSniffer::SnifferThread(LPVOID lpData)
 2 {
 3     CSniffer * pSniffer = (CSniffer *)lpData;
 4
 5     SOCKET hSnifferSock = socket(AF_INET, SOCK_RAW, IPPROTO_IP);
 6     DWORD dwSetVal = 1;
 7     char szhostname[32];
 8     char RecvBuff[65536];
 9     hostent * phost;
10     SOCKADDR_IN LocalIP;
11     //先进行绑定,绑定前先获取本地地址
12     LocalIP.sin_family = AF_INET;
13     LocalIP.sin_port = htons(0);
14     gethostname(szhostname, 32);
15     phost = gethostbyname(szhostname);
16     memcpy(&LocalIP.sin_addr.S_un.S_addr, phost->h_addr_list[0], phost->h_length);
17     //cout << "LocalIP" << inet_ntoa(LocalIP.sin_addr) << endl;
18     if(SOCKET_ERROR == bind(hSnifferSock, (sockaddr *)&LocalIP, sizeof(sockaddr)))
19     {
20         ;//cout << "bind error" << endl;
21     }
22     //设置套接字选项
23     ioctlsocket(hSnifferSock, SIO_RCVALL, &dwSetVal);
24     //cout << q_ntohs(0x3100) << endl;
25     //std::vector<ConnectBetweenTwoHost> SnifferPool;
26
27     while(1)
28     {
29         int nRecvLen = recv(hSnifferSock, RecvBuff, 65536, 0);
30         if(nRecvLen != SOCKET_ERROR)
31         {
32             //cout << "Get Message" << endl;
33             pSniffer->IPHeadAnylasis(RecvBuff, 65536);
34         }
35         else
36         {
37             continue;//cout << "Nothing Valid" << endl;
38         }
39     }
40
41     return 0;
42 }