Struct iphdr *iph = ( struct iphdr *)(Buffer + sizeof( struct ethhdr) ) ДЇprintf(logfile, ' |-IP Version : %d ',( unsigned int)iph-> version) ДЇprintf(logfile, ' |-IP Header Length : %d DWORDS or %d Bytes ',( unsigned int)iph-> ihl,(( unsigned int)(iph-> ihl))* 4) ДЇprintf(logfile, ' |-Type Of Service : %d ',( unsigned int)iph-> tos) ДЇprintf(logfile, ' |-IP Total Length : %d Bytes(Size of Packet) ', ntohs(iph-> tot_len)) ДЇprintf(logfile, ' |-Identification : %d ', ntohs(iph-> id)) Void print_ip_header( const u_char * Buffer, int Size)

Struct ethhdr *eth = ( struct ethhdr *)Buffer ДЇprintf(logfile, 'Ethernet Header ') ДЇprintf(logfile, ' |-Destination Address : %.2X- %.2X- %.2X- %.2X- %.2X- %.2X ', eth-> h_dest, eth-> h_dest, eth-> h_dest, eth-> h_dest, eth-> h_dest, eth-> h_dest ) ДЇprintf(logfile, ' |-Source Address : %.2X- %.2X- %.2X- %.2X- %.2X- %.2X ', eth-> h_source, eth-> h_source, eth-> h_source, eth-> h_source, eth-> h_source, eth-> h_source ) ДЇprintf(logfile, ' |-Protocol : %u ',( unsigned short)eth-> h_proto) Void print_ethernet_header( const u_char *Buffer, int Size) Printf( 'TCP : %d UDP : %d ICMP : %d IGMP : %d Others : %d Total : %d ', tcp, udp, icmp, igmp, others, total) Switch (iph-> protocol) //Check the Protocol and do accordingly.Дefault: //Some Other Protocol like ARP etc. Struct iphdr *iph = ( struct iphdr*)(buffer + sizeof( struct ethhdr)) Get the IP Header part of this packet, excluding the ethernet header Void process_packet( u_char *args, const struct pcap_pkthdr *header, const u_char *buffer) Pcap_loop(handle, - 1, process_packet, NULL) Handle = pcap_open_live( devname, 65536, 1, 0, errbuf) ДЇprintf(stderr, 'Couldn't open device %s : %s ', devname, errbuf) Printf( 'Enter the number of the device you want to sniff : ') %s - %s ', count, device-> name, device-> description) Printf( ' Available Devices are : ') ДЇor(device = alldevsp device != NULL device = device-> next) Printf( 'Error finding devices : %s ', errbuf) If( pcap_findalldevs( &alldevsp, errbuf) ) First get the list of available devices Pcap_t *handle //Handle of the device that shall be sniffedД¬har errbuf, * devname, devs Void print_icmp_packet( const u_char *, int ) Void print_udp_packet( const u_char *, int) Void print_tcp_packet( const u_char *, int ) Void print_ip_packet( const u_char *, int) Void process_ip_packet( const u_char *, int) Void process_packet( u_char *, const struct pcap_pkthdr *, const u_char *) # include //Provides declarations for ip header # include //Provides declarations for tcp header # include //Provides declarations for udp header # include //Provides declarations for icmp header

Http sniffer linux