C# 基於SharpPcap的局域網數據包捕獲 之二 監聽代碼
1.配置好sharpPcap引用和安裝好winPcap後,添加引用
using PacketDotNet;
using SharpPcap;
using SharpPcap.AirPcap;
using SharpPcap.LibPcap;
using SharpPcap.WinPcap;
2.獲取網卡,至於爲什麼會有兩個註釋掉的獲取網卡方法。三種都可以獲取到網卡,然而LibPcapLiveDeviceList獲取網卡可以直觀的看到它的名字,三種方法並沒有多大區別(主要是忘記了實際區別)
private void getAdapter()//獲取網卡
{
var devices = LibPcapLiveDeviceList.Instance;
//var devices = WinPcapDeviceList.Instance;
//var devices = CaptureDeviceList.Instance;
if (devices.Count < 1)
MessageBox.Show("此設備上沒有網卡");
else
foreach (var dev in devices)
{
selectAdp.Items.Add(dev.Interface.FriendlyName);
selectAdp.SelectedIndex = 0;
}
}
3.開始監聽,device_OnPackArrival是一個監聽事件(方法),會在下面貼出。device.Open(DeviceMode.Promiscuous, 1000);是選擇混淆模式監聽
private void monitor()//監聽
{
var devices = LibPcapLiveDeviceList.Instance;
//var devices = CaptureDeviceList.Instance;
foreach(PcapDevice dev in devices)
{
if (dev.Interface.FriendlyName.ToString() == selectedAdp)
{
//MessageBox.Show("pair");
PcapDevice device = dev;
device.OnPacketArrival += new PacketArrivalEventHandler(device_OnPackArrival);
device.Open(DeviceMode.Promiscuous, 1000);
//device.Capture(20);
device.StartCapture();
}
}
}
4.device_OnPackArrival方法
private void device_OnPackArrival(object sender,CaptureEventArgs e)//接收到包的處理
{
var packet = PacketDotNet.Packet.ParsePacket(e.Packet.LinkLayerType, e.Packet.Data);//解析出基本包
var dlpacket = PacketDotNet.DataLinkPacket.ParsePacket(e.Packet.LinkLayerType, e.Packet.Data);//協議類別
var ipPacket = PacketDotNet.IpPacket.GetEncapsulated(packet);//IP數據包
var udpPacket = PacketDotNet.UdpPacket.GetEncapsulated(packet);//UDP數據包
var tcpPacket = PacketDotNet.TcpPacket.GetEncapsulated(packet);//TCP數據包
//MessageBox.Show("????/");
if (IP.Checked)
//MessageBox.Show("tp");
showIPPacket(ipPacket);
else if (UDP.Checked)
// MessageBox.Show("UPD");
showUDPPacket(udpPacket);
else if (TCP.Checked)
showTCPPacket(tcpPacket);
}
5.packet包屬性,部分屬性如下
int srcPort = p.SourcePort;
int destPort = p.DestinationPort;
string details = p.ToString();
上面就是完整的選擇網卡--開始監聽--監聽到包 的一個流程
---------------------
作者:wuma0q1an
來源:CSDN
原文:https://blog.csdn.net/wuma0q1an/article/details/50943235
版權聲明:本文爲博主原創文章,轉載請附上博文鏈接!