linux 下 libpcap 简单使用

　　　今天用了下这个　ｌｉｂｐｃａｐ　感觉和　ｗｉｎｄｏｗｓ　下的　ｗｉｎｐｃａｐ还是有点差别的。。下面的这个小程序演示如何打开网卡　捕获数据包　

#include <stdio.h>
#include <netinet/in.h> //for struct in_addr
#include <sys/socket.h>
#include <sys/types.h>
#include <sys/param.h>
#include <arpa/inet.h>
#include <pcap.h>
#include "proto.h"
#define BUFSIZE 65535

int main(int argc, char *argv[])
{
        char *dev, errbuf[PCAP_ERRBUF_SIZE];
        dev= pcap_lookupdev(errbuf);
        if(dev == NULL)
        {
                fprintf(stderr,"Couldn't find default device: %s\n", errbuf);
                return(2);
        }
        printf("Device:%s\n", dev);

        pcap_t *handle;
        pcap_pkthdr *pk;
        const u_char *pkt_data;
        handle = pcap_open_live(dev, BUFSIZE, 1, 1000, errbuf);

        if (handle == NULL)
        {
                fprintf(stderr, "Couldn't open device %s: %s\n", dev, errbuf);
                return(2);
        }

        while(pcap_next_ex(handle,&pk,&pkt_data)>=0)
        {
                static unsigned int c = 0;
                sniff_ip *ip = (sniff_ip *)(pkt_data+14);
                printf("%s->%s\n",inet_ntoa(ip->ip_src),inet_ntoa(ip->ip_dst));
               // printf("%u len:%u\r",c++,pk->caplen);
        }
        pcap_close(handle);
        return(0);
}