packet32.h

截获以太网数据,附源代码(NT 控制台程序 )

/*
 *  NtSniff by Davide Libenzi ( To rebuild NtSniff You need Microsoft SDK & DDK )
 *  Copyright (C) 1999  Davide Libenzi
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 *  Davide Libenzi <[e-mail]>
 *
 */


#ifndef _PACKET32_H
#define _PACKET32_H


#define        DOSNAMEPREFIX   TEXT("Packet_")

#define        MAX_LINK_NAME_LENGTH   64


typedef struct _ADAPTER
{
    HANDLE          hFile;
    TCHAR           SymbolicLink[MAX_LINK_NAME_LENGTH];
}               ADAPTER, *LPADAPTER;


typedef struct _PACKET
{
    HANDLE          hEvent;
    OVERLAPPED      OverLapped;
    PVOID           Buffer;
    UINT            Length;
}               PACKET, *LPPACKET;



PVOID
PacketOpenAdapter(LPTSTR AdapterName);

BOOLEAN
PacketSendPacket(LPADAPTER AdapterObject, LPPACKET lpPacket, BOOLEAN Sync);

PVOID
PacketAllocatePacket(LPADAPTER AdapterObject);

VOID
PacketInitPacket(LPPACKET lpPacket, PVOID Buffer, UINT Length);

VOID
PacketFreePacket(LPPACKET lpPacket);

BOOLEAN
PacketResetAdapter(LPADAPTER AdapterObject);

BOOLEAN
PacketGetAddress(LPADAPTER AdapterObject, PUCHAR AddressBuffer, PUINT Length);

BOOLEAN
PacketWaitPacket(LPADAPTER AdapterObject, LPPACKET lpPacket, PULONG BytesReceived);
/*++

Routine Description:

    This routine waits for an overlapped IO on a packet to complete
    Called if the send or receive call specified FALSE for the Sync parmeter

Arguments:

    AdapterObject  - AdapterObject return by PacketOpenAdapter

    lpPacket       - Packet object returned by PacketAllocatePacket and initialized
                     by PacketInitPacket

Return Value:

    SUCCESS - TRUE if overlapped call succeeded
    FAILURE -

--*/


BOOLEAN
PacketReceivePacket(LPADAPTER AdapterObject, LPPACKET lpPacket, BOOLEAN Sync,
        PULONG BytesReceived);
/*++

Routine Description:

    This rotine issues a receive request from the adapter

Arguments:

    AdapterObject  - AdapterObject return by PacketOpenAdapter

    lpPacket       - Packet object returned by PacketAllocatePacket and initialized
                     by PacketInitPacket

    Sync           - TRUE if service should wait for packet to transmit


Return Value:

    SUCCESS - TRUE if succeeded and SYNC==TRUE
    FAILURE -

--*/


VOID
PacketCloseAdapter(LPADAPTER lpAdapter);


BOOLEAN
PacketSetFilter(LPADAPTER AdapterObject, ULONG Filter);
/*++

Routine Description:

    This rotine sets the adapters packet filter

Arguments:

    AdapterObject  - AdapterObject return by PacketOpenAdapter

    Filter         - filter to be set

Return Value:

    SUCCESS -
    FAILURE -

--*/


ULONG
PacketGetAdapterNames(PTSTR pStr, PULONG BufferSize);




#endif