ËÓùýpf_packet£¿
°²È«·½ÃæµÄÍøÂç±à³ÌÓ¦¸Ã¶¼»áÓõ½PF_PACKETÕâ¸ö¶«Î÷ÄÄΪ¸ßÊÖ¿ÉÒÔ½âÊÍÒ»ÏÂÕâ¸öÎÊÌ⣺
Ê×ÏÈ
socket£¨PF_PACKET,SOCK_RAW,htons(ETH_P_ALL))
È»ºó
read£¨...)
ÎÒ¿ÉÒÔ¶Áµ½·¢ÍùÍø¿¨eth0µÄËùÓаü
¶øµ±ÎÒÔÚÉÏÊösocketµ÷ÓÃÖ®ºó£¬µ÷ÓÃbindÓëeth0°ó¶¨£¨°ó¶¨µÄ½á¹¹µ±È»ÊÇsockaddr_ll)ºóÔÙread£¬ÎÒ²»½öÄܶÁµ½ËùÓз¢Íùeth0µÄ°ü£¬¶øÇÒÄܶÁµ½ËùÓдÓeth0·¢³öÈ¥µÄ°ü
Ϊʲô¼ÓÁËÒ»¸öbindÖ®ºó¾ÍÓɵ¥Ïò±ä³ÉË«ÏòµÄÁË£¿ ±¾À´¾ÍÊÇË«Ïò£¬Ö»ÒªÊÇÕâÍø¿¨½ø³öµÄ°ü¶¼ÄÜ×¥
linuxnupt¿É²»¿ÉÒÔ°ÑÄãÓÃpf_packet()дµÄ³ÌÐò·¢¸øÎÒÒ»¸ö°¡
ÎÒÊǸöÐÂÊÖ,ÕýÒªÓÃÕâ¸öPF_PACKET()д¸öС³ÌÐò,¿Éϧ»¨ºÜ³¤Ê±¼ä»¹Ã»¸ã¶¨°¡,¿ÉÒÔ²»¿ÉÒÔ¸øÎÒ·¢¸öÄãдµÄ°¡ [email="tfty7804@yahoo.com.cn"]tfty7804@yahoo.com.cn[/email]Ò³:
[1]