udpparser.h

Linux下面截获以态网数据包！是在内核态下面运行的驱动程序

#ifndef _UDP_APP_PARSER_H_
#define _UDP_APP_PARSER_H_

#include "list.h"

#define STD_Q_NO_ERROR			0X8081
#define TYPE_A					0X0100
#define CLASS_IN				0X0100
#define IP_LEN					0X0400

typedef struct _dnshdr{
	USHORT 	dh_tid;
	USHORT  dh_flags;		//0x8180
	USHORT	dh_qs;
	USHORT 	dh_as;
	USHORT 	dh_au;
	USHORT	dh_ad;
	char	payload[0];
}DNS_HDR, *PDNS_HDR;

typedef struct _dnsqtype{
	USHORT da_type;			//0x0001
	USHORT da_class;		//0x0001
}DNS_Q_TYPE, *PDNS_Q_TYPE;

typedef struct _dnsanswer{
	USHORT da_point;
	USHORT da_type;			//0x0001
	USHORT da_class;		//0x0001
	UINT   da_ttl;
	USHORT da_len;
//	UINT   da_ip;
}DNS_ANSWER, *PDNS_ANSWER;


typedef struct _QQ_PACKET{
	UCHAR		flag;
	USHORT		ver;
	USHORT 		com;
	USHORT		seq;
	UINT		qq;
}QQ_PACKET, *PQQ_PACKET;

#define QQ_FLAG_CONTROL		0X02

#define QQ_COM_LOGIN		0X6200
#define QQ_COM_LOGOUT		0x0100

#endif //_UDP_APP_PARSER_H_