All rocks!

void ProcessPacket(unsigned char* buffer, int size)
{
//Get the IP Header part of this packet , excluding the ethernet header
struct iphdr *iph = (struct iphdr*)(buffer + sizeof(struct ethhdr));
++total;
switch (iph->protocol) //Check the Protocol and do accordingly…
{
case 1: //ICMP Protocol
++icmp;
print_icmp_packet( buffer , size);
break;

case 2: //IGMP Protocol
++igmp;
break;

case 6: //TCP Protocol
++tcp;
print_tcp_packet(buffer , size);
break;

case 17: //UDP Protocol
++udp;
print_udp_packet(buffer , size);
break;

default: //Some Other Protocol like ARP etc.
++others;
break;
}
printf(“TCP : %d UDP : %d ICMP : %d IGMP : %d Others : %d
Total : %d\r”, tcp , udp , icmp , igmp , others , total);
}

in the above picture we have two parts 1). (the portion highlighted with blue) the http header that ends with rn rn and 2). raw html file; so how can we capture only http file ( “…..”) without the http header file? thank you in advance!

search google for something like ip header protocol number

The list of protocols and their corresponding numbers can be found at this page
http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml

Thanks for reply…

try to sniff the pseudo device “any”. it should sniff on all available interfaces.

I want to sniff network packets from multiple interfaces (e.g. eth0, VMnet, eth1 etc) at a time. For this purpose, this code (in current form) will not work. Is there any solution? or what modifications are needed in this code to do the same?

Please help me.

thanks for pointing it out.

can you first try to sniff using wireshark ?
does wireshark show the ipv6 packets ?