18,363
社区成员




#include "pcap.h"
#include "remote-ext.h"
#pragma pack(1)//设置内存边界对齐方式
#pragma comment(lib,"wpcap.lib")
#pragma comment (lib,"ws2_32.lib")
//28字节ARP帧结构
struct arp_head
{
unsigned short hardware_type; //硬件类型
unsigned short protocol_type; //协议类型
unsigned char hardware_add_len; //硬件地址长度
unsigned char protocol_add_len; //协议地址长度
unsigned short operation_field; //操作字段
unsigned char source_mac_add[6]; //源mac地址
unsigned long source_ip_add; //源ip地址
unsigned char dest_mac_add[6]; //目的mac地址
unsigned long dest_ip_add; //目的ip地址
};
//18字节以太网帧结构
struct ethernet_head
{
unsigned char dest_mac_add[6]; //目的mac地址
unsigned char source_mac_add[6]; //源mac地址
unsigned short type; //帧类型
};
//arp最终包结构
struct arp_packet
{
ethernet_head ed;
arp_head ah;
char padding[18];
};
DWORD WINAPI ThreadProc(LPVOID lp);
//构造arp请求包
unsigned char* BuildArpRequestPacket(unsigned char* dest_mac_add, unsigned long source_ip_add, unsigned long dest_ip_add);
//获得本机mac地址,通过某一ip地址向本机发送arp请求
void GetSelfMac(pcap_t* pAdaptHandle,unsigned char* selfmac,unsigned long localIP,unsigned long fakeIp,unsigned char *fakeMac);
int main()
{
pcap_if_t *alldevs;
pcap_if_t *d;
int inum;
int i=0;
pcap_t *adhandle;
char errbuf[PCAP_ERRBUF_SIZE];
unsigned char selfmac[6];
unsigned char fakeMac[6]={0,0x12,0x34,0,0,0x78};
/* 获取本机设备列表 */
if (pcap_findalldevs_ex(PCAP_SRC_IF_STRING, NULL, &alldevs, errbuf) == -1)
{
fprintf(stderr,"Error in pcap_findalldevs: %s\n", errbuf);
exit(1);
}
/* 打印列表 */
for(d=alldevs; d; d=d->next)
{
printf("%d. %s", ++i, d->name);
if (d->description)
printf(" (%s)\n", d->description);
else
printf(" (No description available)\n");
}
if(i==0)
{
printf("\nNo interfaces found! Make sure WinPcap is installed.\n");
return -1;
}
printf("Enter the interface number (1-%d):",i);
scanf("%d", &inum);
if(inum < 1 || inum > i)
{
printf("\nInterface number out of range.\n");
/* 释放设备列表 */
pcap_freealldevs(alldevs);
return -1;
}
/* 跳转到选中的适配器 */
for(d=alldevs, i=0; i < inum-1 ;d=d->next, i++);
/* 打开设备 */
if ( (adhandle= pcap_open(d->name, // 设备名
65536, // 65535保证能捕获到不同数据链路层上的每个数据包的全部内容
PCAP_OPENFLAG_PROMISCUOUS, // 混杂模式
1000, // 读取超时时间
NULL, // 远程机器验证
errbuf // 错误缓冲池
) ) == NULL)
{
fprintf(stderr,"\nUnable to open the adapter. %s is not supported by WinPcap\n", d->name);
/* 释放设备列表 */
pcap_freealldevs(alldevs);
return -1;
}
HANDLE hThread = CreateThread(NULL, 0, ThreadProc, adhandle, 0, NULL);
GetSelfMac(adhandle,selfmac, inet_addr("10.0.0.252"),inet_addr("10.0.0.254"),fakeMac);
WaitForSingleObject(hThread, INFINITE);
return 0;
}
unsigned char* BuildArpRequestPacket(unsigned char* source_mac_add, unsigned long source_ip_add, unsigned long dest_ip_add)
{
static arp_packet ap;
memcpy(ap.ah.source_mac_add,source_mac_add,6); //填充以太网源mac地址
memcpy(ap.ed.source_mac_add,source_mac_add,6); //填充arp帧结构源mac地址
memset(&ap.ed.dest_mac_add,0xff,6);
ap.ah.source_ip_add = source_ip_add; //填充arp源ip地址
ap.ah.dest_ip_add = dest_ip_add; //填充arp目的ip地址
ap.ed.type = htons(0x0806); //htons将主机的无符号短整形数转换成网络字节顺序,
//两个字节长的以太网帧类型表示后面数据的类型。对于ARP请求或应答来说,该字段的值为0X0806.
//硬件地址长度和协议地址长度分别指出硬件地址和协议地址的长度,
//以字节为单位。对于以太网上IP地址的ARP请求或应答来说,它们的值分别为6和4。
ap.ah.hardware_add_len = 6;
ap.ah.protocol_add_len = 4;
ap.ah.hardware_type = htons(0x0001); //硬件地址为0x0001表示以太网地址
ap.ah.operation_field = htons(1); //ARP请求值为1,ARP应答值为2,RARP请求值为3,RARP应答值为4
ap.ah.protocol_type = htons(0X0800); //表示要映射的协议地址类型,IP为0X0800
return (unsigned char *)≈
}
void GetSelfMac(pcap_t* pAdaptHandle,unsigned char* selfmac,unsigned long localIP,unsigned long fakeIp,unsigned char *fakeMac)
{
unsigned char *arp_packet_self; //准备网自己机子发送的arp包
int i;
arp_packet_self = BuildArpRequestPacket(fakeMac,fakeIp,localIP);
if(pcap_sendpacket(pAdaptHandle, arp_packet_self, 60)==0)//整个arp包的大小为42字节
{
printf( " PacketSend succeed\n\n " );
}
else
{
printf( " PacketSendPacket in GetSelfMac Error: %d\n " ,GetLastError());
}
}
DWORD WINAPI ThreadProc(LPVOID lp)
{
int res;
struct pcap_pkthdr *header; //包头部
const u_char *pkt_data; //包数据部
unsigned char selfmac[6];
while((res = pcap_next_ex( (pcap_t*)lp, &header, &pkt_data)) >= 0)
{
if(res == 0) //超时
{
continue;
}
if (*(unsigned short *)(pkt_data+12) == htons(0x0806) &&
*(unsigned short*)(pkt_data+20) == htons(0x0002) &&
*(unsigned long*)(pkt_data+38) == inet_addr("10.0.0.254"))
{
//调试了以后就是这个if语句没有进来,不知道if条件中哪里错了
for (int i = 0 ;i < 6 ;i++ )
{
selfmac[i]=*(unsigned char * )(pkt_data+22+i);
printf("%02x",selfmac[i]);
}
break;
}
}
return 0;
}