mysnifferdlg.cpp

windos下网络监视器嗅觉器（sniffer）例子程序

						 					iLen , pIpHeader->ttl , get_proto_name( pIpHeader->proto ) ) ;
							else
								strIP.Format("%s -> %s len = %d ttl=%d proto=%s" , szSource , szDest ,
											iLen , pIpHeader->ttl , get_proto_name( pIpHeader->proto ) ) ;
*/							

							strProto = get_proto_name( pIpHeader->proto );
							
							/*-------------------zhuwei add(2002.11.9)-----------------------------*/
							HdrLen = pIpHeader->header_len&0xf;
							HdrLen *= 4;
							totallen = ntohs(pIpHeader->total_len);
							totallen-=HdrLen;
							switch(pIpHeader->proto)
							{
							case IPPROTO_ICMP:
								{
									pICMPHead=(struct ICMPPacketHead *)(buf+HdrLen);
									//strL4.Format(" type:%d code:%d\n",pICMPHead->Type,pICMPHead->Code);
									strSourPort = "-";
									strDestPort = "-";
									pdata=((BYTE *)pICMPHead)+ICMP_HEAD_LEN;
									totallen -= ICMP_HEAD_LEN;
									break;
								}
							case IPPROTO_TCP:
								{
									pTCPHead=(struct TCPPacketHead *)(buf+HdrLen);
									sourport = ntohs(pTCPHead->SourPort);
									destport = ntohs(pTCPHead->DestPort);
									//strL4.Format(" sour port:%d,dest port:%d",sourport,destport);
									strSourPort.Format("%d",sourport);
									strDestPort.Format("%d",destport);
									HdrLen = (pTCPHead->HLen)>>4;  //in fact only 4 bits
									HdrLen *= 4;
									pdata=((BYTE *)pTCPHead)+HdrLen;
									totallen -= HdrLen;
									break;
								}
							case IPPROTO_UDP:
								{
									pUDPHead=(struct UDPPacketHead *)(buf+HdrLen);
									sourport = ntohs(pUDPHead->SourPort);
									destport = ntohs(pUDPHead->DestPort);
									//strL4.Format(" sour port:%d,dest port:%d",sourport,destport);
									strSourPort.Format("%d",sourport);
									strDestPort.Format("%d",destport);
									pdata=((BYTE *)pUDPHead)+UDP_HEAD_LEN;
									totallen -= UDP_HEAD_LEN;
									break;
								}
							}

							if(pIpHeader->proto == IPPROTO_ICMP)
								strData.Format("type:%d code:%d data:%s",pICMPHead->Type,pICMPHead->Code,pdata);
							else strData.Format("  %s",pdata);

							strSize.Format("%d",totallen);

							//str = strIP+strL4+strData;
							pDlg->AddData(strProto,szSource,strSourPort,szDest,strDestPort,strSize,strData);
							/*---------------------------------------------------------------------*/
				  			//pDlg->m_list.AddString( str ) ;  /* zhuwei add(2002.11.9) comment */
							//pDlg->m_list.InsertString(0,str);  /* zhuwei add(2002.11.9) */

							// Sleep stabilize work of list , otherwise  sometimes pressing on scroll
							// cased close of program

							//Sleep(50) ; /* zhuwei add(2002.11.9) comment */
						}
						if( iLen < iRet )
						{
							iRet -= iLen ;
							bufwork  += iLen ;
        					pIpHeader = (IPHEADER *)bufwork ;
						}
						else
							break ; // pIpHeader->total_len == iRet and go out
					}
					else
					{ // read last part of buf. I wrote it , but always recv() read exactly 
                      // the lenght of the packet
						int iLast = iLen - iRet ;
						pLastBuf = new char [ iLen ] ;
						int iReaden = iRet ;
						memcpy( pLastBuf , bufwork , iReaden ) ;
						iRet = 	recv( pDlg->m_s , pLastBuf + iReaden , iLast , 0 ) ;
						if( iRet == SOCKET_ERROR )
						{
							dwErr = WSAGetLastError() ;
							sprintf( szErr , "Error recv() = %ld " , dwErr ) ;
							break ;
						}
						else
						{
							bufwork = pLastBuf ;	
       						pIpHeader = (IPHEADER *)bufwork ;
							if( iRet == iLast )
								iRet = iLen ;
							else
							{ // read all last data
								iReaden += iRet ;
								iLast -= iRet ;
								while( TRUE )
								{
									iRet = recv( pDlg->m_s , pLastBuf +iReaden , iLast , 0 ) ;
									if( iRet == SOCKET_ERROR )
									{
										dwErr = WSAGetLastError() ;
										sprintf( szErr , "Error recv() = %ld " , dwErr ) ;
										break ;
									}
									else
									{
								        iReaden += iRet ;
								        iLast -= iRet ;
									    if( iLast <= 0 ) 
										    break ;
									}	
								} // while
							}
						}
					}	
				}   // while
				if( pLastBuf )
					delete [ ] pLastBuf ;
			}
			else
			{
				AfxMessageBox( "No data on network" ) ;
				continue ;
			}
		//Sleep( 100 ) ; //  Polling each 100 millisecond /* zhuwei add(2002.11.9) comment */
	}

	return TRUE ;
}

void CMySnifferDlg::OnSysCommand(UINT nID, LPARAM lParam)
{
	if ((nID & 0xFFF0) == IDM_ABOUTBOX)
	{
		CAboutDlg dlgAbout;
		dlgAbout.DoModal();
	}
	else
	{
		CDialog::OnSysCommand(nID, lParam);
	}
}

// If you add a minimize button to your dialog, you will need the code below
//  to draw the icon.  For MFC applications using the document/view model,
//  this is automatically done for you by the framework.

void CMySnifferDlg::OnPaint() 
{
	if (IsIconic())
	{
		CPaintDC dc(this); // device context for painting

		SendMessage(WM_ICONERASEBKGND, (WPARAM) dc.GetSafeHdc(), 0);

		// Center icon in client rectangle
		int cxIcon = GetSystemMetrics(SM_CXICON);
		int cyIcon = GetSystemMetrics(SM_CYICON);
		CRect rect;
		GetClientRect(&rect);
		int x = (rect.Width() - cxIcon + 1) / 2;
		int y = (rect.Height() - cyIcon + 1) / 2;

		// Draw the icon
		dc.DrawIcon(x, y, m_hIcon);
	}
	else
	{
		CDialog::OnPaint();
	}
}

// The system calls this to obtain the cursor to display while the user drags
//  the minimized window.
HCURSOR CMySnifferDlg::OnQueryDragIcon()
{
	return (HCURSOR) m_hIcon;
}

void CMySnifferDlg::OnButton1() 
{
	// TODO: Add your control notification handler code here
	char			szErr[50], szHostName[MAX_PATH];
	DWORD			dwErr;
	SOCKADDR_IN		sa;

	gethostname(szHostName, sizeof(szHostName));

	m_iphostsource = m_ipsource;

	//m_ipcheckedhost = ntohl(m_iphost);
	
	CString str;
	if(m_threadID == 0)
	{
		str.LoadString(IDS_STOP);
		m_Start.SetWindowText(str);
	}
	else
	{
		if(m_threadID)
		{
			PostThreadMessage(m_threadID, WM_CLOSE, 0, 0);
			str.LoadString(IDS_START);
			m_Start.SetWindowText(str);
			m_Start.EnableWindow(FALSE);
		}
		return;
	}
	DWORD dwBufferLen[10];
	DWORD dwBufferInLen = 1;
	DWORD dwBytesReturned = 0;

	m_s = socket(AF_INET, SOCK_RAW, IPPROTO_IP);
	if(m_s == INVALID_SOCKET)
	{
		dwErr = WSAGetLastError();
		sprintf(szErr, "Error Socket() = %d", dwErr);
		AfxMessageBox(szErr);
		closesocket(m_s);
		return;
	}
	sa.sin_family = AF_INET;
	sa.sin_port = htons(7000);
	sa.sin_addr.s_addr = m_iphostsource;

	if(bind(m_s, (PSOCKADDR)&sa, sizeof(sa)) == SOCKET_ERROR)
	{
		dwErr = WSAGetLastError();
		sprintf(szErr, "Error bind() = %d", dwErr);
		AfxMessageBox(szErr);
		closesocket(m_s);
		return;
	}
	if(SOCKET_ERROR != WSAIoctl(m_s, SIO_RCVALL, &dwBufferInLen, sizeof(dwBufferInLen),
								&dwBufferLen, sizeof(dwBufferLen),
								&dwBytesReturned, NULL, NULL))
		AfxBeginThread(threadFunc, (LPVOID)this);
	else
	{
		dwErr = WSAGetLastError();
		sprintf(szErr, "Error WSAIoctl = %ld", dwErr);
		AfxMessageBox(szErr);
		closesocket(m_s);
		return;
	}
}

void CMySnifferDlg::AddData(CString s0, CString s1, CString s2, CString s3, CString s4, CString s5, CString s6)
{
	int index;
	//if(s0 == "TCP")
	if((s0 == "TCP") && (s4 == "80"))
	{
	index = m_ListCtrl.InsertItem(0,s0);
	m_ListCtrl.SetItem(index,1,LVIF_TEXT,s1, 0, 0, 0,0);
	m_ListCtrl.SetItem(index,2,LVIF_TEXT,s2, 0, 0, 0,0);
	m_ListCtrl.SetItem(index,3,LVIF_TEXT,s3, 0, 0, 0,0);
	m_ListCtrl.SetItem(index,4,LVIF_TEXT,s4, 0, 0, 0,0);
	m_ListCtrl.SetItem(index,5,LVIF_TEXT,s5, 0, 0, 0,0);
	m_ListCtrl.SetItem(index,6,LVIF_TEXT,s6, 0, 0, 0,0);
	}
	//m_ctrList.SetItem(index,1,LVIF_TEXT,s2, 0, 0, 0,0);

}

void CMySnifferDlg::OnBnClickedButton2()
{
	// TODO: 在此添加控件通知处理程序代码
}