您是否想了解特定NIC的更多信息?如果您试图从单个界面中隔离流量,请首先找出它是哪一个。下面的代码将帮助您枚举可用接口:
var nics = from NetworkInterface a
in NetworkInterface.GetAllNetworkInterfaces()
where a.NetworkInterfaceType == NetworkInterfaceType.Ethernet &&
a.Supports(NetworkInterfaceComponent.IPv4)
select a;
if (nics.Any())
{
var nic = nics.First();
adapter = new NetworkAdapter();
adapter.Name = nic.Name;
adapter.Description = nic.Description;
adapter.Id = nic.Id;
var props = nic.GetIPProperties();
var ipAddresses = from UnicastIPAddressInformation info
in props.UnicastAddresses
where info.PrefixOrigin == PrefixOrigin.Manual
select info;
adapter.GatewayAddressList = nic.GetIPProperties().GatewayAddresses;
adapter.Available = (nic.OperationalStatus == OperationalStatus.Up);
}
此外,如果您正试图嗅出你将不得不看的DNS数据包的URL。 DNS有助于将URL转换为IP。退房DNS。 DNS搜索将在任何连接之前进行。
编辑:这是我用枚举适配器ID的实用方法:
DLL int GetAvailableAdapters()
{
pcap_if_t *alldevs;
pcap_if_t *devs;
char msgBuffer[LOG_SIZE];
int index = 0;
char* fullname;
int namePtr;
char* shortname;
struct in_addr ip;
// Retrieve the device list on the local machine
if (-1 == pcap_findalldevs_ex(PCAP_SRC_IF_STRING, NULL, &alldevs, msgBuffer))
{
//error
return 0;
}
// Cycle List, and make sure adapters are available/visable
for(devs = alldevs; devs != NULL; devs = devs->next)
{
++index;
//
// Print adapter description
//
sprintf(msgBuffer, " [%d]: %s", index, devs->description);
gblLog(INFO, msgBuffer);
//
// Parse and Print adapters network info in dot-decimal notation
//
/*ip = ((struct sockaddr_in *)(devs->addresses->addr))->sin_addr;
sprintf(msgBuffer, " IPAddr: %s ", inet_ntoa(ip));
gblLog(INFO, msgBuffer);
*/
//
// Print the Registry Key Value from the substring of adapter name
//
fullname = devs->name;
namePtr = strlen(fullname);
shortname = fullname + namePtr;
while(0 < namePtr && fullname[--namePtr] != '_');
if(fullname[namePtr] == '_')
{
// Key is the string after "_" char, get the substring starting at that index.
shortname = fullname + namePtr + 1;
fullname[namePtr] = '\0';
sprintf(msgBuffer, " KeyVal: %s\n", shortname);
gblLog(INFO, msgBuffer);
}
else
{
// Print full name if the "_" char was not found (odd formating...)
sprintf(msgBuffer, " KeyVal: %s\n", fullname);
gblLog(INFO, msgBuffer);
}
}
if(index == 0)
{
gblLog(INFO, "FindAllDevs() returned null devices. No network adapters found!");
}
return index; // Total num of adapters enum
}
使用这种方法,用的NetworkInterface一起,你应该能够与索引适配器通过其REG关联键。一旦找到正确的适配器,使用该索引打开您的pcap设备:
if (pcap_findalldevs_ex(PCAP_SRC_IF_STRING, NULL, &alldevs, errbuf) == -1)
{
return -1; // error
}
// Cycle the devs until we reach the appropriate index
for(d = alldevs, i = 0; (i < (index- 1)); d = d->next, i++);
// Open the device
if ((adhandle= pcap_open(d->name, // HW name of the network device.
65536, // Portion of the packet to capture. 65536 max packet
adapterFlags, // See adapterFlags above
1000, // 1sec timeout on idle. (We check for exit at this interval)
NULL, // No authentication,
errbuf // Error buffer
)) == NULL)
{
//error opening
pcap_freealldevs(alldevs); // Free the device list
return -1;
}
我必须参考NetworkAdapter? –
@ m.qayyum通常是适配器的注册表项。我相信也是适配器的“给定”名称......如果您打印出所有NetworkAdapter类信息(对于上面代码中的每个NIC),您会发现一些信息将它连接回您正在寻找的适配器使用。由于可能存在许多网络配置,因此我无法提供直接的参考。祝你好运!如果您需要更多帮助,请为您提供广泛的网络信息以获得更专业的答案。 –
@ m.qayyum见编辑答案。我提供了一些有用的方法,希望能指引您朝着正确的方向发展......您可能不需要代码中的所有漂亮打印内容,但是它的可见性要求。 –