?
Solved

IP packet sniffer in C++ with Windows NT??? Any hints, source code???

Posted on 2001-08-09
4
Medium Priority
?
1,275 Views
Last Modified: 2013-12-03
Hi,

I would like to build a simple IP packet sniffer (like those under Solaris --snoop) in C++.
So far I have seen this done only with W2K...

Does any one of you know of a place where I can get sample source code to start my
coding? I'd simply would like to sort by IP address To the From ;-)

So I need to be able to
1) sense the "wire"
2) read from it
3) open a packet
4) retrieve the from and to ip address

how can this be done using NT api???
0
Comment
Question by:aquila98
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 32

Expert Comment

by:jhance
ID: 6369834
0
 
LVL 2

Author Comment

by:aquila98
ID: 6372085
Interesting this rawether!

But I was really hoping to learn HOW to do it myself as opposed to just buying a
software...

Yet, this means that there IS a way to do it in NT, so that's good ;-) There is hope!!!

0
 
LVL 32

Accepted Solution

by:
jhance earned 600 total points
ID: 6372190
1) Read the information on www.rawether.net.  There is a lot of background information.

2) Get the DDK.  There is a sample NDIS intermediate driver there.  It's poorly done and poorly documented but it's all there is.

3) If you ONLY are interested in TCPIP, there is the WINSOCK 2 instrumented library.  It's not re-distributable but it does give you packet level access to the protocol.

4) Windows XP has full support for RAW adapter access.  It's somewhat controversial (See: http://grc.com/dos/xplaughter.htm) but my opinion is that those who want to wreak havoc can ALREADY do so.  Any capabilities in XP will be insignificant!!
0
 
LVL 2

Author Comment

by:aquila98
ID: 6379589
It seems to work...

Thanks
0

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to make a Windows 7 gadget that accepts files dropped from the Windows Explorer.  It also illustrates how to give your gadget a non-rectangular shape and how to add some nifty visual effects to text displayed in a your gadget.…
For a while now I'v been searching for a circular progress control, much like the one you get when first starting your Silverlight application. I found a couple that were written in WPF and there were a few written in Silverlight, but all appeared o…
This is Part 3 in a 3-part series on Experts Exchange to discuss error handling in VBA code written for Excel. Part 1 of this series discussed basic error handling code using VBA. http://www.experts-exchange.com/videos/1478/Excel-Error-Handlin…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question