Sniffer原理及开源代码,包含几个文档的说明，源码，简单易懂！...

NDIS，网卡传输抓包工具的源代码，接口程序-NDIS, capturing Packet Ethernet transmission source tools, interface procedures

基于winpcap的嗅探器 网络技术课的实验作业 -based on the Sniffer network technology operations of Experiment

本源码是一个实时网络流量监听源码，有多种视图模式，可以显示详细的进程信息和该进程实时网络传输数据流量。可以实时显示接收和发送的网络数据流量。

sniffer获取IP数据抱,分析TCP,UDP,ICMP数据抱-sniffers have access to IP data, analyze TCP, UDP, ICMP data hold

需要实现的功能目标是： 1． 网卡、适配器的显示和选择 2． 获取局域网内活动主机 3． 数据包的接收 4． 数据包的解析 5． 选择活动主机列表中一个或多个主机 6． 捕获数据包并进行概要信息显示 7． 显示IP流量统计信息 -Need to achieve functional objectives are: 1. Card, adapter display and option 2. Activities within the LAN hosts to obtain 3. Packet reception 4. Packet parsing 5. Select list of active hosts one or more hosts 6. Capture data packets and carry out summary information display 7. Show IP Traffic Statistics

网络入侵检测系统

网络监听程序,基于创建原始套接字,修改I/0选项实现的一个IP包捕获的应用程序-network monitoring procedures, based on the creation of the original socket, revised I/0 option of achieving an IP packet capture applications

C语言实现的Linux下的抓包工具，功能全面，支持多种协议，如icmp arp udp tcp等。需要libpcap的支持。-C language of the Linux capturing Packet tools, full functions, support for multiple protocols, such as icmp arp udp tcp so. Libpcap need support.

firewall源码，基于应用层的防火墙抓包工具-firewall source code, based on application-layer firewall tool for capturing Packet

snort是一个赫赫有名的网络入侵检测系统，但是一般都是运行在linux下，这里是一个运行在windows下的snort-Snort is a famous system that detect inbreaking into network,but it usually runs on linux.Whereas this is a snort which runs on windows.