通过原始套接字截取本地网卡的所有数据

#include "stdafx.h"
#include <iostream>
#include <string>
#include <WinSock2.h>
#include <WS2tcpip.h>
#pragma comment(lib, "Ws2_32")

using namespace std;

#define SIO_RCVALL _WSAIOW(IOC_VENDOR,1)

//TCP数据段头
#pragma pack(1)
typedef struct _TCP
{
WORD SrcPort; // 源端口
WORD DstPort; // 目的端口
DWORD SeqNum; // 顺序号
DWORD AckNum; // 确认号
BYTE DataOff; // TCP头长
BYTE Flags; // 标志（URG、ACK等）
WORD Window; // 窗口大小
WORD Chksum; // 校验和
WORD UrgPtr; // 紧急指针
} TCP;
/////////////////////////////////////////////#pragma pack

typedef TCP *LPTCP;
typedef TCP UNALIGNED * ULPTCP;

//IP数据段头
#pragma pack(1)
typedef struct _IP{
union
{
BYTE Version; // 版本
BYTE HdrLen; // IHL
};

BYTE ServiceType; // 服务类型
WORD TotalLen; // 总长
WORD ID; // 标识

union
{
WORD Flags; // 标志
WORD FragOff; // 分段偏移
};

BYTE TimeToLive; // 生命期
BYTE Protocol; // 协议
WORD HdrChksum; // 头校验和
DWORD SrcAddr; // 源地址
DWORD DstAddr; // 目的地址
BYTE Options; // 选项
} IP;
///////////////////////////////////////////////#pragma pack

typedef IP * LPIP;
typedef IP UNALIGNED * ULPIP;

string GetProtocolType(int Protocol)
{
switch (Protocol)
{
case IPPROTO_ICMP : //1 /* control message protocol */
return "ICMP";
case IPPROTO_TCP : //6 /* tcp */
return "TCP";
case IPPROTO_UDP : //17 /* user datagram protocol */
return "UDP";
default:
return "UNKNOW_TYPE";
}
}

int _tmain(int argc, _TCHAR* argv[])
{
WSADATA wsaData;
unsigned int iValue = 1;
int iRet = WSAStartup(MAKEWORD(2,2), &wsaData);
SOCKET sock = socket(AF_INET, SOCK_RAW, IPPROTO_IP);
iRet = setsockopt(sock, IPPROTO_IP, IP_HDRINCL, (char*) &iValue, sizeof(iValue));
sockaddr_in addr;
memset((void*) &addr, 0, sizeof(addr));
addr.sin_family = AF_INET;
addr.sin_addr.S_un.S_addr = inet_addr("192.168.6.141");
addr.sin_port = htons(0);
iRet = bind(sock, (struct sockaddr*) &addr, sizeof(addr));

BOOL bSniff = TRUE;
unsigned long ulBytes;
iRet = WSAIoctl(sock,SIO_RCVALL,&bSniff, sizeof(bSniff), NULL, 0, &ulBytes, NULL, NULL);
char *buf = new char[65535];
while (true)
{
memset((void*) buf, 0, 65535);
sockaddr_in sockAddr;
memset((void*) &sockAddr, 0, sizeof(sockAddr));
int iLen = sizeof(sockAddr);
iRet = recvfrom(sock, buf, 65535, 0, (struct sockaddr*) &sockAddr, &iLen);
// 对数据包进行分析，并输出分析结果
IP ip = *(IP*)buf;
TCP tcp = *(TCP*)(buf + ip.HdrLen);
string strProtocol = GetProtocolType(ip.Protocol);
cout<<"protocol: "<<strProtocol<<endl;
cout<<"IP src address: "<<inet_ntoa(*(in_addr*)&ip.SrcAddr)<<endl;
cout<<"IP tag address: "<<inet_ntoa(*(in_addr*)&ip.DstAddr)<<endl;
cout<<"TCP src port: "<<tcp.SrcPort<<endl;
cout<<"TCP tag port: "<<tcp.DstPort<<endl;
cout<<"Buf Len: "<<ntohs(ip.TotalLen)<<endl;
cout<<"-------------------------------------------------------------"<<endl;
}
delete [] buf;
closesocket(sock);
WSACleanup();
return 0;
}