Re: X-based sniffer-netxmon

[route () RESENTMENT INFONEXUS COM (route () RESENTMENT INFONEXUS COM)]

{Zhang Qianli}
> When I first saw the software ttywatcher, I wondered why not changed it
> into an X-interfaced sniffer. This thought has proved not as easy as I had
> thought. And after about severl months' work, at last the netxmon come into
> being.

    Ethereal, http://ethereal.zing.org, is a stable portable network
    traffic analyzer running on top of tcpdump that sports a nice GTK-based
    interface.

    Oh yah.  Use libnet.  http://www.packetfactory.net/libnet

--
libnet_build_ethernet(de, se, 0x0800, NULL, 0, buf);
libnet_build_ip(0x14, 0, 1, 0, 1, 6, si, di, NULL, 0, buf + 0xe);
libnet_build_tcp(sp, dp, 1, 2, 2, 0xffff, 0, NULL, 0, buf + 0x14 + 0xe);