UmVfX1BvaW50's Blog
0%

pcap

分类于
  • pcap
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
#include <iostream>
#include <pcap.h>
#include <netinet/ip.h>
#include <netinet/tcp.h>
#include <cstring>
using namespace std;
#include <iostream>
#include <pcap.h>
#include <netinet/ip.h>
#include <netinet/tcp.h>
#include <cstring>
using namespace std;

pcap_t* handle;

// 回调函数：处理接收到的数据包
void packetHandler(u_char* userData, const struct pcap_pkthdr* pkthdr, const u_char* packet) {
    // 提取IP头部
    const struct ip* ipHeader = reinterpret_cast<const struct ip*>(packet + 14); // 偏移14字节跳过以太网头部

    // 提取TCP头部
    const struct tcphdr* tcpHeader = reinterpret_cast<const struct tcphdr*>(packet + 14 + ipHeader->ip_hl * 4); // 偏移14字节加上IP头部长度

    // 检查是否为HTTP流量（目标端口为80）
    if (ntohs(tcpHeader->th_dport) == 80) {
        // 提取TCP数据部分（HTTP payload）
        const u_char* payload = packet + 14 + ipHeader->ip_hl * 4 + tcpHeader->th_off * 4;

        // 检查HTTP请求方法是否为GET
        if (memcmp(payload, "GET ", 4) == 0) {
        }
    }
}

int main() {
    char errbuf[PCAP_ERRBUF_SIZE];

    pcap_if_t* devices;
    pcap_if_t* device;

    // 获取默认网络接口设备
    if (pcap_findalldevs(&devices, errbuf) == -1) {
        fprintf(stderr, "Error finding devices: %s\n", errbuf);
        return 1;
    }

    if (devices == NULL) {
        fprintf(stderr, "No devices found.\n");
        return 1;
    }

    device = devices;
    cout <<(device->name) <<endl;
    // 打开网络接口设备
    handle = pcap_open_live(device->name, BUFSIZ, 1, 1000, errbuf);
    if (handle == NULL) {
        fprintf(stderr, "Error opening device %s: %s\n", device->name, errbuf);
        return 1;
    }

    // 开始捕获数据包，传递回调函数进行处理
    if (pcap_loop(handle, -1, packetHandler, NULL) == -1) {
        fprintf(stderr, "Error capturing packets: %s\n", pcap_geterr(handle));
        return 1;
    }

    // 关闭网络接口设备
    pcap_close(handle);

    return 0;
}