pcap基础(1)

来源：互联网发布：数据安全防护建设方案编辑：程序博客网时间：2024/05/16 17:49

#include <pcap.h>
#include <stdio.h>
#include <stdlib.h>

void packet_handler(u_char *param, const struct pcap_pkthdr *header, const u_char *pkt_data);

int main()
{
pcap_t *pH;
char errbuf[PCAP_ERRBUF_SIZE];
// FILE * hand = fopen("./dump.txt", "w+");
pcap_dumper_t * dumpF = NULL;
char *fileName = "./dump.txt";
if((pH = pcap_open_live("eth0", 65536, 0, 1000, NULL)) == NULL){
printf("\nUnable to open the adapter.%s is not supported by WinPcap\n", "eth0");
return -1;
}

printf("create the dump file %s...\n", fileName);
dumpF = pcap_dump_open(pH, fileName);
if(NULL == dumpF){
// printf("Error: %s\n", pH->errbuf);
return 255;
}
printf("start to listen %s... \n", "eth0");
pcap_loop(pH, 10, packet_handler, (u_char*)dumpF);
printf("end listening...\n");
pcap_dump_close(dumpF);
return 0;
}

void packet_handler(u_char *param, const struct pcap_pkthdr *header, const u_char *pkt_data)
{
pcap_dump(param, header, pkt_data);
return;

}

====================================================================================================================================

gcc /usr/lib/pcap.o -lpcap a.c

====================================================================================================================================