We help IT Professionals succeed at work.
Get Started

VC++ Winpcap library - not getting any packets, Win7

lunanat
lunanat asked
on
419 Views
Last Modified: 2012-05-11
So, I'm writing an application that will sit on my network (a span port on one of my core switches, actually) and monitor the traffic going across the fabric... specifically, I am looking to generate assoications between applications.  Which servers talk to which other servers, etc.

Will be very informative and interesting.

The first step is of course to drop the NIC into promiscuous mode, and read the packets.

I've got the pcap.h file, and the libraries working... I can access the functions within the library, and I can both list and open adapters.  However, following the documented examples provided, I'm not getting any packets dumped out.

 
//open the adapter
	adapterhandle=pcap_open(adapter->name,65536,PCAP_OPENFLAG_PROMISCUOUS,1000,NULL,errorBuffer);
	if (adapterhandle==NULL){
		cout<<"Unable to open adapter "<<adapter->name<<"\n";
		pcap_freealldevs(allAdapters);
		return;
	}
	cout<<"Capture process started on adapter "<<adapter->name<<"\n";

	//recieve packets, this part does not work.
	while ((retValue=pcap_next_ex(adapterhandle,&packetHeader,&packetData))>=0){
		if (retValue==0)
			continue;
		cout<<"Packet Length: "<<packetHeader->len<<"Received at :"<<packetHeader->ts.tv_sec<<"\n\n";
	}
	//clean up
	pcap_freealldevs(allAdapters);
	cout<<"Finished\n\n";

Open in new window


Basically, my screen just sits blank and empty... I did generate traffic by browsing webpages (though there's a lot of background traffic that it should pick up anyways, ARP if nothing else) while the app was open and running.
Comment
Watch Question
Commented:
This problem has been solved!
Unlock 1 Answer and 4 Comments.
See Answer
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE