Display packet's detail using libpcap like Wireshark -
in wireshark, it's able display packet's details ip.src, ip.port, info etc. when on click packet, packet's details shown in (middle) bottom part. 
is there anyway show details (known pdml in tshark), i.e. frame, ethernet, shown in wireshark using libpcap? understood able source, destination address using struct pcap_pkthdr, plan build application resembles wireshark , hence need details displayed wireshark. expert here share websites or source i'm able relate to? thanks.
but plan build application resembles wireshark , hence need details displayed wireshark.
then need duplicate or of work done wireshark developers.
ohloh's page on wireshark says wireshark "has had 52,184 commits made 119 contributors representing 2,849,177 lines of code" , "took estimated 840 years of effort (cocomo model) starting first commit in september, 1998 ending recent commit 13 hours ago". (that's more "840 developer-years of effort"; it's not if gerald started working on 840 years ago , did himself. :-))
most of lines of code in dissector core , dissectors use it.
if don't care using wireshark's code (which means willing have give away source code program gets program, , willing let them give source code away want to), try building own program using same wireshark library wireshark , tshark use (that library 1 source in epan directory of wireshark source, , subdirectories).
you wouldn't need of them if have small subset of protocols care about.
libpcap not you; library capturing packets, writing them capture files, , reading capture files, , includes no code analyzing raw file data.
Comments
Post a Comment