winpcap 在win7 64位上广播以太网数据包,当存在虚拟机或无线网卡(wifi)时存在问题；

最新推荐文章于 2024-03-20 22:00:00 发布

smilestone322

最新推荐文章于 2024-03-20 22:00:00 发布

阅读量2.3k

点赞数

分类专栏： Ndis 网络驱动编程庖丁解牛--winpcap源码彻底解密网络编程开源技术

本文链接：https://blog.csdn.net/smilestone_322/article/details/37695265

版权

网络编程开源技术同时被 3 个专栏收录

37 篇文章 13 订阅

订阅专栏

Ndis 网络驱动编程

29 篇文章 8 订阅

订阅专栏

庖丁解牛--winpcap源码彻底解密

14 篇文章 7 订阅

订阅专栏

使用winpcap做局域网的设备查找功能，测试人员在win7下 64位的系统下，测试发现当存在无线网卡时(wifi),设备查找不到，存在虚拟机时，设备查找也存在问题；需要搭建一个环境跟进下，我设备查找使用的方法是使用winpcap枚举每个网卡，然后往每个网卡发广播包！

Q-16: Which network adapters are supported by WinPcap?

A: The WinPcap device driver was developed to work primarily with Ethernet (10/100/1000) adapters. Support for other MACs was added during the development, but Ethernet remains the most tested one.

The overall situation is:

Windows 95/98/ME: the packet driver works ok on Ethernet networks. It works also on PPP WAN links, but with some limitations (for example it is not able to capture the LCP and NCP packets). FDDI, ARCNET, ATM and Token Ring should be supported, however we did not test them because we do not have the hardware.
Windows NT4/2000/XP/2003/Vista/2008/Win7/2008R2: the packet driver works ok on Ethernet networks. As for dial-up adapters and VPN connections, readQ5 and Q6. As in Win9x, FDDI, ARCNET, ATM and Token Ring are supported, but not tested by us.
Wireless adapters: these adapters may present problems, because they are not properly supported by the Windows Kernel. Some of them are not detected, other don't support promiscuous mode. In the best case, WinPcap is able to see an Ethernet emulation and not the real transiting packets: this means that the 802.11 frames are transformed into fake Ethernet frames before being captured, and that control frames are not received.

问题解决了，原因是在对每个网卡传递参数时存在Bug，数据被污染！