SharpPcap开发全攻略(英文版).docVIP

CONTENTS TOC \o 1-3 \h \z \u Introduction 2 Background 2 About SharpPcap 3 Packet.Net architecture and usage 4 SharpPcap tutorial: A step by step guide to using SharpPcap 6 Obtaining the device list (Example 1 in the source package) 6 Opening an adapter and capturing packets (Example 3 in the source package) 8 Capturing packets without the event handler (Example 4 in the source package) 10 Filtering the traffic (Example 5 in the source package) 11 Interpreting the packets (Example 6 in the source package) 12 Handling offline dump files (Example 8 in the source package) 14 Sending packets (Example 9 in the source package) 17 Gathering statistics on the network traffic - WinPcap only (Example 11 in the source package) 21 References 23 History 23 Eg: 24 [A .NET sniffer application written with SharpPcap] Introduction Packet capturing (or packet sniffing) is the process of collecting all packets of data that pass through a given network interface. Capturing network packets in our applications is a powerful capability which lets us write network monitoring, packet analyzers and security tools. The libpcap library for UNIX based systems and WinPcap for Windows are the most widely used packet capture drivers that provide API for low-level network monitoring. Among the applications that use libpcap/WinPcap as its packet capture subsystem are the famous tcpdump and Wireshark. In this article, we will introduce the SharpPcap .NET assembly (library) for interfacing with libpcap or winpcap from your .NET application and will give you a detailed programming tutorial on how to use it. Background Tamir Gal started the SharpPcap project around 2004. He wanted to use WinPcap in a .NET application while working on his final project for university. The project involved analyzing and decoding VoIP traffic and he wanted to keep coding simple with C# which has time saving features like garbage collection. Accessing the WinPc