阅读:1197回复:2
能抓到包,怎么看不到内容!
:(
各位大虾: ntsniff在2k下了的这段程序中 while (!iStopSniff) { PacketInitPacket((struct _PACKET *)pPacket, Adapter.PacketBuffer, Adapter.BufferSize); // LPADAPTER AdapterObject,LPPACKET lpPacket,BOOLEAN Sync PacketReceivePacket((struct _ADAPTER *)Adapter.hFile,(struct _PACKET *) pPacket, TRUE);//, &Adapter.PacketLength); // PacketReceiveNPacket(struct _ADAPTER *)Adapter.hFile,(struct _PACKET *) pPacket,UINT n,UINT length,BYTE* buffer,BOOLEAN Sync); ++iPacketCount; if (Adapter.PacketLength/*pPacket->Length*/ > (sizeof(ETH_HEADER) + sizeof(IP_HEADER) + sizeof(TCP_HEADER))) { int i_IPH_Size = pIpHdr->ihl * 4; TCP_HEADER *pTcpHdr = (TCP_HEADER *) ((char *) pIpHdr + i_IPH_Size); int i_TCPH_Size = pTcpHdr->doff * 4; VICTIM *pVictim = FilterPacket(pIpHdr, pTcpHdr, Victim, COUNTOF(Victim)); if (pVictim != NULL) { int iDataSize = ((int) ntohs(pIpHdr->tot_len) - i_IPH_Size - i_TCPH_Size); BYTE *pPktData = (BYTE *) pTcpHdr + i_TCPH_Size; ++iPacketSniffed; StoreData(iDataSize, (char *) pPktData, pVictim); } if ((lMaxSniffedData > 0) && (lSniffedData > lMaxSniffedData)) break; } } PacketReceivePacket((struct _ADAPTER *)Adapter.hFile,(struct _PACKET *) pPacket, TRUE) 这个函数,每次执行正确返回值是true,也就是调用正确 可是Adapter.PacketLength就是0 怎么回事情! 大侠,帮帮忙! |
|
|
沙发#
发布于:2002-04-09 07:38
为什么没人回答啊,
高手都去哪了啊 |
|
板凳#
发布于:2002-04-07 19:05
关注
|
|