[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

IP packet sniffer in C++ with Windows NT??? Any hints, source code???

Posted on 2001-08-09
4
Medium Priority
?
1,290 Views
Last Modified: 2013-12-03
Hi,

I would like to build a simple IP packet sniffer (like those under Solaris --snoop) in C++.
So far I have seen this done only with W2K...

Does any one of you know of a place where I can get sample source code to start my
coding? I'd simply would like to sort by IP address To the From ;-)

So I need to be able to
1) sense the "wire"
2) read from it
3) open a packet
4) retrieve the from and to ip address

how can this be done using NT api???
0
Comment
Question by:aquila98
  • 2
  • 2
4 Comments
 
LVL 32

Expert Comment

by:jhance
ID: 6369834
0
 
LVL 2

Author Comment

by:aquila98
ID: 6372085
Interesting this rawether!

But I was really hoping to learn HOW to do it myself as opposed to just buying a
software...

Yet, this means that there IS a way to do it in NT, so that's good ;-) There is hope!!!

0
 
LVL 32

Accepted Solution

by:
jhance earned 600 total points
ID: 6372190
1) Read the information on www.rawether.net.  There is a lot of background information.

2) Get the DDK.  There is a sample NDIS intermediate driver there.  It's poorly done and poorly documented but it's all there is.

3) If you ONLY are interested in TCPIP, there is the WINSOCK 2 instrumented library.  It's not re-distributable but it does give you packet level access to the protocol.

4) Windows XP has full support for RAW adapter access.  It's somewhat controversial (See: http://grc.com/dos/xplaughter.htm) but my opinion is that those who want to wreak havoc can ALREADY do so.  Any capabilities in XP will be insignificant!!
0
 
LVL 2

Author Comment

by:aquila98
ID: 6379589
It seems to work...

Thanks
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to make a Windows 7 gadget that accepts files dropped from the Windows Explorer.  It also illustrates how to give your gadget a non-rectangular shape and how to add some nifty visual effects to text displayed in a your gadget.…
For most people, the WrapPanel seems like a magic when they switch from WinForms to WPF. Most of us will think that the code that is used to write a control like that would be difficult. However, most of the work is done by the WPF engine, and the W…
This is Part 3 in a 3-part series on Experts Exchange to discuss error handling in VBA code written for Excel. Part 1 of this series discussed basic error handling code using VBA. http://www.experts-exchange.com/videos/1478/Excel-Error-Handlin…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question