car.3205 发表于 2017-6-21 20:52:08

[补] winpcap编程

static void pcap_handle(u_char *user, const struct pcap_pkthdr *h, const u_char *buf)  {
  static unsigned failCount = 0;
  #ifndef NO_ARP
  if (buf==0x88 && buf==0x8e) {
  #endif
  if (memcmp(destMAC, buf+6, 6)!=0 && startMode>2)    /* 服务器MAC地址不符 */
  return;
  capBuf = buf;
  if (buf==0x00 && buf==0x01 && buf==0x01) {    /* 验证用户名 */
  if (startMode < 3) {
  memcpy(destMAC, buf+6, 6);
  printf(_("** 认证MAC:\t%s\n"), formatHex(destMAC, 6));
  startMode += 3; /* 标记为已获取 */
  }
  switchState(ID_IDENTITY);
  }
  else if (buf==0x00 && buf==0x01 && buf==0x04) /* 验证密码 */
  switchState(ID_CHALLENGE);
  else if (buf==0x00 && buf==0x03) {/* 认证成功 */
  printf(_(">> 认证成功!\n"));
  failCount = 0;
  if (!(startMode%3 == 2)) {
  getEchoKey(buf);
  showRuijieMsg(buf, h->caplen);
  }
  if (dhcpMode==1 || dhcpMode==2) /* 二次认证第一次或者认证后 */
  switchState(ID_DHCP);
  else if (startMode%3 == 2)
  switchState(ID_WAITECHO);
  else
  switchState(ID_ECHO);
  }
  else if (buf==0x00 && buf==0x04) {/* 认证失败或被踢下线 */
  if (state==ID_WAITECHO || state==ID_ECHO) {
  printf(_(">> 认证掉线,开始重连!\n"));
  switchState(ID_START);
  }
  else if (buf!=0 || startMode%3==2) {
  printf(_(">> 认证失败!\n"));
  if (startMode%3 != 2)
  showRuijieMsg(buf, h->caplen);
  if (maxFail && ++failCount>=maxFail) {
  printf(_(">> 连续认证失败%u次,退出认证。\n"), maxFail);
  exit(EXIT_SUCCESS);
  }
  restart();
  }
  else
  switchState(ID_START);
  }
  }
页: [1]
查看完整版本: [补] winpcap编程