/* private static int packetIndex = 0; * private void Program_OnPacketArrivalAsync(object sender, CaptureEventArgs e) * { * if (e.Packet.LinkLayerType == PacketDotNet.LinkLayers.Ethernet) * { * var packet = PacketDotNet.Packet.ParsePacket(e.Packet.LinkLayerType, e.Packet.Data); * var ethernetPacket = (PacketDotNet.EthernetPacket)packet; * * _dispatcher.BeginInvoke(new ThreadStart(delegate * { * * _ShowTextBox += (packetIndex + * e.Packet.Timeval.Date.ToString() + * e.Packet.Timeval.Date.Millisecond + * ethernetPacket.SourceHardwareAddress + * ethernetPacket.DestinationHardwareAddress + "\n"); * packetIndex++; * })); * PropertyChanged?.Invoke(this, new PropertyChangedEventArgs(nameof(ShowTextBox))); * } * }*/ void Program_OnPacketArrivalAsync(object sender, CaptureEventArgs e) { Task.Run(() => { captureFileWriter.Write(e.Packet); }); // парсинг всего пакета Packet packet = Packet.ParsePacket(e.Packet.LinkLayerType, e.Packet.Data); // получение только TCP пакета из всего фрейма TcpPacket tcpPacket = (TcpPacket)packet.Extract <TcpPacket>(); // получение только IP пакета из всего фрейма //IpPacket ipPacket = (IpPacket)packet.Extract(typeof(IpPacket)); // получение только UDP пакета из всего фрейма UdpPacket udpPacket = (UdpPacket)packet.Extract <UdpPacket>(); ArpPacket arpPacket = (ArpPacket)packet.Extract <ArpPacket>(); //LinuxSLLPacket sllPacket = (LinuxSLLPacket)packet.Extract(typeof(LinuxSLLPacket)); IcmpV4Packet icmpPacket = (IcmpV4Packet)packet.Extract <IcmpV4Packet>(); IgmpV2Packet igmpPacket = (IgmpV2Packet)packet.Extract <IgmpV2Packet>(); DateTime time = e.Packet.Timeval.Date.ToLocalTime(); string StrTime = time.Hour + ":" + time.Minute + ":" + time.Second + ":" + time.Millisecond; int len = e.Packet.Data.Length; // Stream myStream; // using (myStream = File.Open(Path.GetTempPath() + "SnifferLogs.pcapng", FileMode.Append, FileAccess.Write)) // { //StreamWriter myWriter = new StreamWriter(myStream); //myWriter.WriteLine(e.Packet); //var thread = new Thread(() => /* Task.Run(() => * { * //captureFileWriter = new CaptureFileWriterDevice(Path.GetTempPath() + "SnifferLogs.pcapng"); * captureFileWriter.Write(e.Packet); * //Thread.Sleep(50); * });*/ // } // using (myStream = File.Open(Path.GetTempPath() + "SnifferLogs.pcapng", FileMode.OpenOrCreate, FileAccess.Read)) // { // StreamReader myReader = new StreamReader(myStream); // Console.Write(myReader.ReadToEnd()); //captureFileReader = new CaptureFileReaderDevice(Path.GetTempPath() + "SnifferLogs.pcapng"); //captureFileReader = new CaptureFileReaderDevice(Path.GetTempPath() + "SnifferLogs.pcapng"); _ShowTextBox += (num + e.Packet.Timeval.Date.ToString() + e.Packet.Timeval.Date.Millisecond + "\n"); PropertyChanged?.Invoke(this, new PropertyChangedEventArgs(nameof(ShowTextBox))); //_ShowTextBox += myReader.ReadToEnd(); // } /* using (myStream = File.Open(Path.GetTempPath() + "SnifferLogs.pcapng", FileMode.OpenOrCreate, FileAccess.ReadWrite, FileShare.ReadWrite)) * { * StreamWriter myWriter = new StreamWriter(myStream); * StreamReader myReader = new StreamReader(myStream); * //_MainCodeBehind.ShowMessage(e.Packet.ToString()); * myWriter.WriteLine(e.Packet.ToString()); * _ShowTextBox += myReader.ReadLine(); * _MainCodeBehind.ShowMessage(myReader.ReadLine()); * //captureFileWriter = new CaptureFileWriterDevice(Path.GetTempPath() + "SnifferLogs.pcapng"); * //captureFileWriter.Write(e.Packet); * }*/ /* _dispatcher.BeginInvoke(new ThreadStart(delegate * { * * captureFileWriter.Write(e.Packet); * File.Copy(Path.GetTempPath() + "SnifferLogs.pcapng", Path.GetTempPath() + "SnifferLogs2.pcapng"); * })); * _dispatcher.BeginInvoke(new ThreadStart(delegate * { * * _ShowTextBox += (num + * e.Packet.Timeval.Date.ToString() + * e.Packet.Timeval.Date.Millisecond + "\n"); * }));*/ if (tcpPacket != null) { IPPacket ipPacket = (IPPacket)tcpPacket.ParentPacket; Tcp tpck; // порт отправителя tpck.srcPort = tcpPacket.SourcePort; // порт получателя tpck.dstPort = tcpPacket.DestinationPort; tpck.seqNumber = tcpPacket.SequenceNumber; /*значения в десятеричной форме*/ tpck.ackNumber = tcpPacket.AcknowledgmentNumber; tpck.offset = tcpPacket.DataOffset; tpck.flags = tcpPacket.Flags; tpck.CWR = tcpPacket.CongestionWindowReduced; tpck.ECE = tcpPacket.ExplicitCongestionNotificationEcho; tpck.URG = tcpPacket.Urgent; tpck.ACK = tcpPacket.Acknowledgment; tpck.PSH = tcpPacket.Push; tpck.RST = tcpPacket.Reset; tpck.SYN = tcpPacket.Synchronize; tpck.FIN = tcpPacket.Finished; tpck.winSize = tcpPacket.WindowSize; tpck.chksum = tcpPacket.Checksum; tpck.urgpoint = tcpPacket.UrgentPointer; tpck.tdata = Hexdata(tcpPacket); string data = HexToAscii(tcpPacket); _dispatcher.BeginInvoke(new ThreadStart(delegate { Col.Add(new MyTable { Number = num, Time = StrTime, Src = ipPacket.SourceAddress.ToString(), Dst = ipPacket.DestinationAddress.ToString(), Protocol = "TCP", Length = len, Info = Convert.ToString(data) }); tpck.pos = num; TcpCol.Add(tpck); num++; })); } if (udpPacket != null) { IPPacket ipPacket = (IPPacket)udpPacket.ParentPacket; Udp udpk; udpk.srcPort = udpPacket.SourcePort; udpk.dstPort = udpPacket.DestinationPort; udpk.len = udpPacket.Length; udpk.chksum = udpPacket.Checksum; udpk.udata = Hexdata(udpPacket); // данные пакета string data = HexToAscii(udpPacket); _dispatcher.BeginInvoke(new ThreadStart(delegate { Col.Add(new MyTable { Number = num, Time = StrTime, Src = ipPacket.SourceAddress.ToString(), Dst = ipPacket.DestinationAddress.ToString(), Protocol = "UDP", Length = len, Info = Convert.ToString(data) }); udpk.pos = num; UdpCol.Add(udpk); num++; })); } if (arpPacket != null) { Arp arpk; arpk.hwtype = arpPacket.HardwareAddressType.ToString(); arpk.prtype = arpPacket.ProtocolAddressType.ToString(); arpk.hwsize = arpPacket.HardwareAddressLength; arpk.prtsize = arpPacket.ProtocolAddressLength; arpk.opcode = Convert.ToInt16(arpPacket.Operation); arpk.sender_mac = arpPacket.SenderHardwareAddress; arpk.sender_ip = arpPacket.SenderProtocolAddress; arpk.target_mac = arpPacket.TargetHardwareAddress; arpk.target_ip = arpPacket.TargetProtocolAddress; arpk.adata = Hexdata(arpPacket); // данные пакета string data = HexToAscii(arpPacket); _dispatcher.BeginInvoke(new ThreadStart(delegate { Col.Add(new MyTable { Number = num, Time = StrTime, Src = arpk.sender_ip.ToString(), Dst = arpk.target_ip.ToString(), Protocol = "ARP", Length = len, Info = Convert.ToString(data) }); arpk.pos = num; ArpCol.Add(arpk); num++; })); } if (icmpPacket != null) { IPPacket ipPacket = (IPPacket)icmpPacket.ParentPacket; Icmp icmpk; icmpk.type = icmpPacket.TypeCode.ToString(); icmpk.chksum = icmpPacket.Checksum; icmpk.seq = icmpPacket.Sequence; icmpk.icdata = Hexdata(icmpPacket); // данные пакета string data = ""; for (int i = 0; i < icmpPacket.Data.Count(); i++) { data += icmpPacket.Data[i]; } _dispatcher.BeginInvoke(new ThreadStart(delegate { Col.Add(new MyTable { Number = num, Time = StrTime, Src = ipPacket.SourceAddress.ToString(), Dst = ipPacket.DestinationAddress.ToString(), Protocol = "ICMPv4", Length = len, Info = Convert.ToString(data) }); icmpk.pos = num; IcmpCol.Add(icmpk); num++; })); } if (igmpPacket != null) { IPPacket ipPacket = (IPPacket)igmpPacket.ParentPacket; Igmp igmpk; igmpk.type = igmpPacket.Type.ToString(); igmpk.max_resp_time = igmpPacket.MaxResponseTime.ToString(); igmpk.chksum = igmpPacket.Checksum; igmpk.group_addr = igmpPacket.GroupAddress.ToString(); igmpk.igdata = Hexdata(igmpPacket); // данные пакета string data = HexToAscii(igmpPacket); _dispatcher.BeginInvoke(new ThreadStart(delegate { Col.Add(new MyTable { Number = num, Time = StrTime, Src = ipPacket.SourceAddress.ToString(), Dst = ipPacket.DestinationAddress.ToString(), Protocol = "IGMPv2", Length = len, Info = Convert.ToString(data) }); igmpk.pos = num; IgmpCol.Add(igmpk); num++; })); } }