network ip sniffer

From -- http://blog.csdn.net/zhangnn5/article/details/6810347 Reading this articleArticleBefore that, I suppose you already know the TCP/IP protocol, ARP protocol, What Is sniffer, and other basic network knowledge.In a General Lan, there are usually two access methods, one is hub access (The Hub here refers to the general hub ), one is direct access from a vsw

the network. On the Tools menu, locate the Address Book option and run, and in the Left tool menu in Address Book, you can find a magnifier icon, which is the "Auto Search" button. After you run the Auto Search feature, enter the start IP address and end address of the network in the IP address segment, and the system

small Frame unit on the network. frames are composed of several parts, and different parts perform different functions. (For example, the first 12 bytes of Ethernet are the Source and Destination addresses, which tell the network the source and destination of the data. Other parts of the Ethernet frame store the actual user data, TCP/IP packet header, or IPX pac

Sniffer tool in Win2kSource codeDetailed information Sniffer source in Win2kCode. [Code nature] complete VC applicationProgramCode[Code author] ZW[File size] 130 KB[Updated on] 19:47:00[Downloads] 6015Http://www.vckbase.com/code/downcode.asp? Id = 1692 IP packet listener (for 9x) source code details IP packet

Network, system management, or security technicians always encounter one or more problems during network management and maintenance. For example, why does the network transmission performance suddenly decrease? Why can't I open the webpage, but QQ can be launched? Why are some hosts suddenly disconnected? Such network

actual programming, you also need to use a Data Structure to represent the IP address data segment header. The following describes the definition of this data structure: Typedef struct _ IP {Union {BYTE Version; // VersionBYTE HdrLen; // IHL};BYTE ServiceType; // service typeWORD TotalLen; // total lengthWord id; // IDUnion {WORD Flags; // flagWORD FragOff; // segment offset};BYTE TimeToLive; // Life Cycle

Sniffer is a technology that uses computer network interfaces to intercept data packets destined for other computers. This technology is widely used in network maintenance and management. It works like a passive sonar, silently receiving various information from the network. Through the analysis of this data, the

network;(2), get the IP address and MAC address of all active hosts on the network;(3), can be specified to work in a static or passive mode;(4), filter rules can be added from the specified filter rules file;(5), with packet filtering function, in the case of large data flow, so that you can easily get the information needed.(6), can be used to collect the

, the main interface 1 is displayed. The current running status of some machine lists and Sniffer software is displayed. The software menu is displayed, and some shortcut menu is provided below, there is a row of shortcut buttons on the left. The Chinese version of the software is used, so the Chinese version of some words is not too accurate. 1. Obtain the machine list in the Network After the

Use ARP to detect hybrid nodes in the Network Author: refdomEmail: refdom@263.netHomepage: www.opengram.com Due to the harm of Sniffer, it is also important to check whether there is sniffer in the network. Anti-sniff is generated accordingly to detect the networkSniffer In. There are many ways to detect

short arp_pro; Unsigned char arp_hln; Unsigned char arp_pln; Unsigned short arp_opt; Unsigned char arp_sha [6]; Unsigned long arp_spa; Unsigned char arp_tha [6]; Unsigned long arp_tpa; } Arp_header; The above is the structure of the ARP packet transmitted in the network. As for the specific meaning of each field in the structure and how to initialize, beyond the scope of this article, you are interested to see the TCP-

arp_pro;Unsigned char arp_hln;Unsigned char arp_pln;Unsigned short arp_opt;Unsigned char arp_sha [6];Unsigned long arp_spa;Unsigned char arp_tha [6];Unsigned long arp_tpa;} Arp_header;　　The above is the structure of the ARP packet transmitted in the network. As for the specific meaning of each field in the structure and how to initialize, beyond the scope of this article, you are interested to see the TCP-IP