Libnids TCP Data Flow reorganization, programs that show the TCP connection process are unable to capture packet resolution:

Law one: Specify the available network cards: nids_params.device= "Lo"; Law two: there is a paragraph in nids.h:

struct NIDS_CHKSUM_CTL {
U_int netaddr;
U_int Mask;
U_int Action;
U_int reserved;
};
extern void Nids_register_chksum_ctl (struct nids_chksum_ctl *,int);

This paragraph is related to the calculation of the checksum, compared to the new NIC driver will automatically calculate the checksum, we have to do is to turn it off, by:

At the beginning of the main () function, add such a piece of code:

struct NIDS_CHKSUM_CTL temp;
temp.netaddr = 0;
Temp.mask = 0;
Temp.action = 1;
Nids_register_chksum_ctl (&temp,1);

This turns off the calculation of the checksum, and recompiling the running program will catch the packet.

Libnids TCP Data Flow reorganization, programs that show the TCP connection process are unable to capture packet resolution: