今天用了下这个 libpcap 感觉和 windows 下的 winpcap还是有点差别的。。下面的这个小程序演示如何打开网卡 捕获数据包
#include#include //for struct in_addr#include #include #include #include #include #include "proto.h"#define BUFSIZE 65535int main(int argc, char *argv[]){ char *dev, errbuf[PCAP_ERRBUF_SIZE]; dev= pcap_lookupdev(errbuf); if(dev == NULL) { fprintf(stderr,"Couldn't find default device: %s\n", errbuf); return(2); } printf("Device:%s\n", dev); pcap_t *handle; pcap_pkthdr *pk; const u_char *pkt_data; handle = pcap_open_live(dev, BUFSIZE, 1, 1000, errbuf); if (handle == NULL) { fprintf(stderr, "Couldn't open device %s: %s\n", dev, errbuf); return(2); } while(pcap_next_ex(handle,&pk,&pkt_data)>=0) { static unsigned int c = 0; sniff_ip *ip = (sniff_ip *)(pkt_data+14); printf("%s->%s\n",inet_ntoa(ip->ip_src),inet_ntoa(ip->ip_dst)); // printf("%u len:%u\r",c++,pk->caplen); } pcap_close(handle); return(0);}