上機1：基于WinPcap的網(wǎng)絡嗅探器設計與實現(xiàn)

上機1：基于WinPcap的網(wǎng)絡嗅探器設計與實現(xiàn)上機1：基于WinPcap的網(wǎng)絡嗅探器設計1、目的與要求掌握基于WinPcap的網(wǎng)絡編程模式。理解并能應用WinPcap設計并實現(xiàn)網(wǎng)絡數(shù)據(jù)包的捕獲與解析。2、設備與上機環(huán)境連網(wǎng)PC機（至少一臺）。計算機硬件要求：IntelPentium5處理器、256MB以上內存，Ethernet網(wǎng)卡，網(wǎng)線若干。計算機軟件要求：MSWindows9x/2000/XP操作系統(tǒng)，TCP/IP協(xié)議，WinPcap430，Visualc++6.0/.net系統(tǒng)。3、上機內容與步驟：在程序設計之前，請參照提供的軟件安裝WinPcap。之后，按照如下步驟操作：步驟1：在VC++6.0下創(chuàng)建一個DOS命令行程序，工程名：自己的學號-PacketDump intres; structpcap_pkthdr*header; constu_char*pkt_data; printf("pktdump_ex:printsthepacketsofthenetworkusingWinPcap.\n"); printf("Usage:pktdump_ex[-ssource]\n\n" "Examples:\n" "pktdump_ex-sfile.acp\n" "pktdump_ex-s\\Device\\NPF_{C8736017-F3C3-4373-94AC-9A if(argc<3) { printf("\nNoadapterselected:printingthedevicelist:\n"); /*Theuserdidn'tprovideapacketsource:Retrievethelocaldevicelist*/ if(pcap_findalldevs(&alldevs,errbuf)==-1) { fprintf(stderr,"Errorinpcap_findalldevs_ex:%s\n",errbuf); exit(1); } /*Printthelist*/ for(d=alldevs;d;d=d->next) { printf("%d.%s\n",++i,d->name); if(d->description) printf("(%s)\n",d->description); else printf("(Nodescriptionavailable)\n"); } if(i==0) { printf("\nNointerfacesfound!MakesureWinPcapisinstalled.\n"); return-1; } printf("Entertheinterfacenumber(1-%d):",i); scanf("%d",&inum); if(inum<1||inum>i) { printf("\nInterfacenumberoutofrange.\n"); /*Freethedevicelist*/ pcap_freealldevs(alldevs); return-1; } /*Jumptotheselectedadapter*/ for(d=alldevs,i=0;i<inum-1;d=d->next,i++); /*Opentheadapter*/ if((fp=pcap_open_live(d->name, //nameofthedevice 65536, //portionofthepackettocapture. //65536grantsthatthewholepacketwillbecapturedonalltheMACs. 1, //promiscuousmode(nonzeromeanspromiscuous) 1000, //readtimeout errbuf //errorbuffer ))==NULL) { fprintf(stderr,"\nErroropeningadapter\n"); return-1; } } else { /*Donotcheckfortheswitchtype('-s')*/ if((fp=pcap_open_live(argv[2], //nameofthedevice 65536, //portionofthepackettocapture. //65536grantsthatthewholepacketwillbecapturedonalltheMACs. 1, //promiscuousmode(nonzeromeanspromiscuous) 1000, //readtimeout errbuf //errorbuffer ))==NULL) { fprintf(stderr,"\nErroropeningadapter\n"); return-1; } } /*Readthepackets*/ while((res=pcap_next_ex(fp,&header,&pkt_data))>=0) { if(res==0) /*Timeoutelapsed*/ continue; /*printpkttimestampandpktlen*/ printf("%ld:%ld(%ld)\n",header->ts.tv_sec,header->ts.tv_usec,header->len); /*Printthepacket*/ for(i=1;(i<header->caplen+1);i++) { printf("%.2x",pkt_data[i-1]); if((i%LINE_LEN)==0)printf("\n"); } printf("\n\n"); } if(res==-1) { printf("Errorreadingthepackets:%s\n",pcap_geterr(fp)); return-1; } pcap_close(fp); return0;步驟3：為編譯器指定包含文件和庫文件搜索目錄。假定WinPcap開發(fā)包WpdPack_4_0_2.zip被解壓縮到C盤，如下圖：為編譯器指定包含文件和庫文件搜索目錄的方法如下：在VC++6.0下，打開Tools菜單，選擇Options，然后選擇Directories選項卡，指定WinPcap包含文件和庫文件目錄，如下圖所示。步驟4：指定鏈接的庫文件。方法：打開Project菜單，