sniffer源代码.doc

//Author?:?Prasshhant?Pugalia //prashant.pugalia@ //Simple?Sniffer?in?winsock? //Sniffs?only?incoming?packets// #include?\stdio.h\?????????? #include?\winsock2.h\ #define?SIO_RCVALL?_WSAIOW(IOC_VENDOR,1)????//this?removes?the?need?of?mstcpip.h void?StartSniffing???(SOCKET?Sock);?????????????//This?will?sniff?here?and?there void?ProcessPacket(unsigned?char*?Buffer,?int?Size);????//This?will?decide?how?to?digest void?PrintIpHeader?(unsigned?char*,?int); void?PrintIcmpPacket?(unsigned?char*?,?int); void?PrintUdpPacket??(unsigned?char*?,?int); void?PrintTcpPacket??(unsigned?char*?,?int); void?ConvertToHex????(unsigned?char*?,?unsigned?int); void?PrintData???????(unsigned?char*?,?int); typedef?struct?ip_hdr { ????unsigned?char??ip_header_len:4;??//?4-bit?header?length?(in?32-bit?words)?normally=5?(Means?20?Bytes?may?be?24?also) ????unsigned?char??ip_version???:4;??//?4-bit?IPv4?version ????unsigned?char??ip_tos;???????????//?IP?type?of?service ????unsigned?short?ip_total_length;??//?Total?length ????unsigned?short?ip_id;????????????//?Unique?identifier? ???? ?unsigned?char??ip_frag_offset???:5;????????//?Fragment?offset?field ? ?unsigned?char??ip_more_fragment?:1; ?unsigned?char??ip_dont_fragment?:1; ?unsigned?char??ip_reserved_zero?:1; ? ????unsigned?char??ip_frag_offset1;????//fragment?offset [Page]? ?unsigned?char??ip_ttl;???????????//?Time?to?live ????unsigned?char??ip_protocol;??????//?Protocol(TCP,UDP?etc) ????unsigned?short?ip_checksum;??????//?IP?checksum ????unsigned?int???ip_srcaddr;???????//?Source?address ????unsigned?int???ip_destaddr;??????//?Source?address }???IPV4_HDR; typedef?struct?udp_hdr { ????unsigned?short?source_port;?????//?Source?port?no. ????unsigned?short?dest_port;???????//?Dest.?port?no. ????unsigned?short?udp_length;??????//?Udp?packet?length ????unsigned?short?udp_checksum;????//?Udp?checksum?(optional) }???UDP_HDR; //?TCP?header typedef?struct?tcp_header? {? ?unsigned?short?source_port;??//?