阅读:3447回复:4
关于winpcap修改本机数据包的问题!
我使用winpcap已经能够截获本机所发出的数据包,但是测试了几次对所截获的数据包进行修改都会有错误,所以现在想请问有这方面经验的大侠,基于Winpcap能否对本机所发出的数据进行修改,请给个答案,谢谢!!!
|
|
沙发#
发布于:2007-01-10 10:49
winpcap只能监听, 不能修改.
|
|
板凳#
发布于:2007-01-10 11:16
但是在基于ARP欺骗的中间人攻击环境中,winpcap已能够对流经本机的网络数据包进行修改,难道直接对本机发出的数据就不行了吗,请高手指教!!!
|
|
地板#
发布于:2007-01-11 15:22
谢谢 discovery的回答,终于找到答案了,现写在这里,希望像我一样对该问题徘徊的人迷途知返。
引自:http://www.winpcap.org/docs/docs31/html/main.html What WinPcap can't do WinPcap receives and sends the packets independently from the host protocols, like TCP-IP. This means that it isn't able to block, filter or manipulate the traffic generated by other programs on the same machine: it simply "sniffs" the packets that transit on the wire. Therefore, it does not provide the appropriate support for applications like traffic shapers, QoS schedulers and personal firewalls. |
|
地下室#
发布于:2007-01-11 23:15
winpcap中的抓包是通过协议驱动实现的,当然不能修改,也不能实现过滤
|
|