{
　　AfxMessageBox("Unable to set the adapter to promiscuous mode");
　　return - 1;
　}

　if (PacketSetBuff(lpadapter, 500 *1024) == FALSE)
　{
　　AfxMessageBox("PacketSetBuff Error");
　　return - 1;
　}

　if (PacketSetReadTimeout(lpadapter, 0) == FALSE)
　{
　　AfxMessageBox("Unable to set the timeout");
　　return - 1;
　}

　if ((lppacketr = PacketAllocatePacket()) == FALSE)
　{
　　AfxMessageBox("PacketAllocatePacket receive Error");
　　return - 1;
　}

　PacketInitPacket(lppacketr, (char*)recvbuf, sizeof(recvbuf));

　while (1)
　{
　　if (PacketReceivePacket(lpadapter, lppacketr, TRUE) == FALSE)
　　{
　　　return - 1;
　　}
　　GetData(lppacketr);
　}
　return 0;
}

　　其中调用的函数GetData()用于解析由PacketReceivePacket()函数收到的报文，关于分析ARP_REPLY报文以便获得局域网主机列表的代码如下：

void GetData(LPPACKET lp)
{
　ULONG ulbytesreceived, off;
　ETHDR *eth;
　ARPHDR *arp;
　PIPHDR ip;
　char *buf, *pChar, *base;
　struct bpf_hdr *hdr;

　ulbytesreceived = lp->ulBytesReceived;
　buf = (char*)lp->Buffer;

　off = 0;
　while (off < ulbytesreceived)
　{
　　hdr = (struct bpf_hdr*)(buf + off);
　　off += hdr->bh_hdrlen;

　　pChar = (char*)(buf + off);
　　base = pChar;
　　off = Packet_WORDALIGN(off + hdr->bh_caplen);

　　eth = (PETHDR)pChar;
　　arp = (PARPHDR)(pChar + sizeof(ETHDR));

　　if (eth->eh_type == htons(ETH_IP))
　　{
　　　ip = (PIPHDR)(pChar + sizeof(ETHDR));
　　　for (int i = 0; i < oldHstIndex; i++)
　　　{
　　　　if ((oldHostList[i].ip == ip->sourceip || oldHostList[i].ip == ip->destip) && oldHostList[i].sniffer == 1)
　　　　{
　　　　　packetList[currentPktIndex].srcIp = ip->sourceip;
　　　　　packetList[currentPktIndex].desIp = ip->destip;
　　　　　packetList[currentPktIndex].protocol = ip->proto;

　　　　　switch (ip->proto)
　　　　　{
　　　　　　case IPPROTO_TCP:

推荐文章 ·洪水攻击原理及代码实现全攻略( ·原始套接字透析之实现IP地址欺骗 ·原始套接字透析之ARP欺骗 ·原始套接字透析之实现包分析 ·原始套接字透析之实现sniffer ·原始套接字透析之实现路由欺骗 ·原始套接字透析之ICMP拒绝服务攻 ·原始套接字透析之实现Ping ·原始套接字透析之Raw Socket基础 ·黑客之旅 -- 原始套接字透析之前