public void ScanAttack(CaptureEventArgs e, string Interface, string ip)
{
var mypacket = Packet.ParsePacket(e.Packet.LinkLayerType, e.Packet.Data);
var arp = (ARPPacket)mypacket.Extract(typeof(ARPPacket));
if (arp != null)
{
var Operation = arp.Operation.ToString();
if (arp.SenderProtocolAddress.ToString() == ip)
{
if (arp.Operation == ARPOperation.Response)
{
var dec = arp.SenderHardwareAddress.ToString();
var decip = arp.SenderProtocolAddress.ToString();
ado a = new ado();
DataTable dt = a.selectname("Router", Interface);
if (dt.Rows.Count > 0)
{
// Attack = false;
foreach (DataRow item in dt.Rows)
{
string mac = item["mac_ad"].ToString();
if (dec == mac)
{
Attack = false;
}
else
{
Attack = true;
Attack_data[0] = "arp spofing";
Attack_data[1] = decip.ToString();
Attack_data[2] = dec.ToString();
Attack_data[3] = DateTime.Now.ToShortTimeString();
Attacker_mac = dec;
// true data
Attack_data[4] = mac;
Attack_data[5] = item["ip"].ToString();
Attack_data[6] = item["date"].ToString();
Attack_data[7] = item["name"].ToString();
}
}
}
else
{
// Attack = false;
}
// Attack = true;
}
}
}
}
