摘要:
一个关于抓包后文件解析的问题,首先,需要了解pcap文件的结构,通过了解,我定义了一个叫做SomeTypes.h的头文件typedef unsigned int DWORD;typedef unsigned short WORD;typedef struct timeval{DWORD GMTtime;DWORD microTime;}timeval;typedef struct pcap_pkthdr{struct timeval ts; DWORD caplen; DWORD len;}pacp_pkthdr;typedef struct pcap_file_header{DWORD m. 阅读全文