ARP包的捕获分析（基于Libpcap下）

NDIS，网卡传输抓包工具的源代码，接口程序-NDIS, capturing Packet Ethernet transmission source tools, interface procedures

cc2431无线芯片的抓包工具，可以通过usb口连接单片机，然后显示MAC层的包的详细内容-cc2431 radio chip capture tool, you can connect through the usb port single-chip, and then show the MAC Layer packet details

使用packet32实现的raw socket的初始化、接收数据包、发送数据包、关闭等功能。-It has realised the Raw socket`s initialation, receiving, sending of data packets and closing functions in which packet32 is used.

FreeBSD上的一个sniffer程序-FreeBSD sniffer procedure

网络流量监控，统计当前网络的输入流量和输出流量。-Network traffic monitoring, statistics on current network traffic input and output flow.

需要实现的功能目标是： 1． 网卡、适配器的显示和选择 2． 获取局域网内活动主机 3． 数据包的接收 4． 数据包的解析 5． 选择活动主机列表中一个或多个主机 6． 捕获数据包并进行概要信息显示 7． 显示IP流量统计信息 -Need to achieve functional objectives are: 1. Card, adapter display and option 2. Activities within the LAN hosts to obtain 3. Packet reception 4. Packet parsing 5. Select list of active hosts one or more hosts 6. Capture data packets and carry out summary information display 7. Show IP Traffic Statistics

一个非常简单的基于MFC单文档结构的LAN包信息监视器，仅仅 实现了非常简单的功能，留待大家进一步扩展。该应用基于NT/2000/xp下的NDIS Packet Driver,所以你在运行它之前必须添加该包驱动程序-a very simple MFC single document based on the structure of the LAN packet information monitors, only achieved a very simple function, we leave it to further expand. The application based on the NDIS NT/2000/xp Packet Driver, so you run it must be added before the packet drivers

一个很好的IP包捕获程序，可以在包内看到详细的IP包内容，并且设置了过滤规则，可以按照规则得到自己想要的东西VC6.0下调试通过-a good IP packet capture procedures, the package can be seen in detail within the IP packet contents, and set up filtering rules, we can follow the rules of the things you want to debug through VC6.0

编译环境:VC6 作用:简单功能的sniffer.使用WSADATA等windows socket.可监听tcp,udp,icmp等,也可根据需要更改代码.-Compiler Environment: VC6 role: a simple function of sniffer. Use WSADATA such as windows socket. Can monitor tcp, udp, icmp, etc. may also need to change the code.

snort是一个赫赫有名的网络入侵检测系统，但是一般都是运行在linux下，这里是一个运行在windows下的snort-Snort is a famous system that detect inbreaking into network,but it usually runs on linux.Whereas this is a snort which runs on windows.