<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Packet Sniffer Code in C using Winsock</title>
	<atom:link href="http://www.binarytides.com/blog/packet-sniffer-code-in-c-using-winsock/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.binarytides.com/blog/packet-sniffer-code-in-c-using-winsock/</link>
	<description></description>
	<lastBuildDate>Wed, 18 Aug 2010 07:42:15 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Its me</title>
		<link>http://www.binarytides.com/blog/packet-sniffer-code-in-c-using-winsock/comment-page-1/#comment-130</link>
		<dc:creator>Its me</dc:creator>
		<pubDate>Thu, 23 Apr 2009 13:23:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.binarytides.com/blog/?p=6#comment-130</guid>
		<description>To sniff the ethernet header and its fields a packet sniffing library like winpcap can be used.</description>
		<content:encoded><![CDATA[<p>To sniff the ethernet header and its fields a packet sniffing library like winpcap can be used.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: matoust</title>
		<link>http://www.binarytides.com/blog/packet-sniffer-code-in-c-using-winsock/comment-page-1/#comment-118</link>
		<dc:creator>matoust</dc:creator>
		<pubDate>Fri, 27 Feb 2009 22:56:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.binarytides.com/blog/?p=6#comment-118</guid>
		<description>I have tested the code and it works great. I would also like to be able to display the whole packet including the Ethernet frame (preamble, MAC dest. , MAC source and soon).&lt;br/&gt;&lt;br/&gt;Do you know ho to configure the port to get the whole package?&lt;br/&gt;&lt;br/&gt;Thanks&lt;br/&gt;Tomas Matousek</description>
		<content:encoded><![CDATA[<p>I have tested the code and it works great. I would also like to be able to display the whole packet including the Ethernet frame (preamble, MAC dest. , MAC source and soon).</p>
<p>Do you know ho to configure the port to get the whole package?</p>
<p>Thanks<br />Tomas Matousek</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bool</title>
		<link>http://www.binarytides.com/blog/packet-sniffer-code-in-c-using-winsock/comment-page-1/#comment-39</link>
		<dc:creator>Bool</dc:creator>
		<pubDate>Tue, 15 Apr 2008 10:33:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.binarytides.com/blog/?p=6#comment-39</guid>
		<description>hi there, this article was of great help :D, i&#039;m just playing around with Ragnarok Online (an MMORPG) and thanks to this I made a custom message logger, but I have got a problem.&lt;br/&gt;&lt;br/&gt;Today I tried to open the program in a Windows Vista machine, and it didn&#039;t logged anything, I recompiled it with some printfs in several parts of the code just to know where the program was not working and I noticed it was not reaching this if&lt;br/&gt;&lt;br/&gt;void ProcessPacket(unsigned char* Buffer, int Size)&lt;br/&gt;{&lt;br/&gt; iphdr = (IPV4_HDR *)Buffer;&lt;br/&gt; if(iphdr-&gt;ip_protocol==6){&lt;br/&gt;  InterceptPacket(Buffer,Size);&lt;br/&gt; }&lt;br/&gt; &lt;br/&gt;}&lt;br/&gt;&lt;br/&gt;it only checks if it is tcp because those are the packets I&#039;m interested on, but I think the problem is that the machine could probably be using ipv6, so, my question is, how different are ipv6 headers and how can I distinguish ipv6 from ipv4? &lt;br/&gt;&lt;br/&gt;thanks for yout time</description>
		<content:encoded><![CDATA[<p>hi there, this article was of great help <img src='http://www.binarytides.com/blog/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> , i&#8217;m just playing around with Ragnarok Online (an MMORPG) and thanks to this I made a custom message logger, but I have got a problem.</p>
<p>Today I tried to open the program in a Windows Vista machine, and it didn&#8217;t logged anything, I recompiled it with some printfs in several parts of the code just to know where the program was not working and I noticed it was not reaching this if</p>
<p>void ProcessPacket(unsigned char* Buffer, int Size)<br />{<br /> iphdr = (IPV4_HDR *)Buffer;<br /> if(iphdr->ip_protocol==6){<br />  InterceptPacket(Buffer,Size);<br /> }</p>
<p>}</p>
<p>it only checks if it is tcp because those are the packets I&#8217;m interested on, but I think the problem is that the machine could probably be using ipv6, so, my question is, how different are ipv6 headers and how can I distinguish ipv6 from ipv4? </p>
<p>thanks for yout time</p>
]]></content:encoded>
	</item>
</channel>
</rss>
