tcpdump使用指南

使用libpcap开源库

简单的抓包程序

int main ()  {

int i = 0, count = 0;

pcap_t *descr = NULL;

char errbuf[PCAP_ERRBUF_SIZE], *device = NULL;

memset(errbuf, 0, PCAP_ERRBUF_SIZE);

/* Get the name of the first device suitable for capture */

device = pcap_lookupdev(errbuf);

printf(“Opening device %s\n”, device);

/* Open device in promiscuous mode */

descr = pcap_open_live(device, MAXBYTES2CAPTURE, 1, 512, errbuf);

/* Loop forever & call processPacket() for every received packet */

pcap_loop(descr, -1, processPacket, (u_char *)&count);

return 0;

}

参考资料