Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / Compact Framework / March 2007

Tip: Looking for answers? Try searching our database.

COmpact Framework Network Sniffing

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Graville@gmail.com - 22 Mar 2007 11:18 GMT
Hi All,

I am having a problem writing a a simpe IP packet sniffer for Windows
Mobile 5. I have taken a simple piece of code that works fine on the
standard framework but when I run under CF 2.0 I get compilation
errors in relation to the IOControlCode enum which the compact
framework does not recognise. I get an error "The name 'IOControlCode'
does not exist in the current context" I'm assuming raw socket
capturing is supported in CF 2.0. Does anyone know what the enum value
should be as CF expects an int but i tried the int -1744830463 which i
found on the MSDN website but this fails.

//For sniffing the socket to capture the packets has to be a raw
socket, with the
//address family being of type internetwork, and protocol being IP
mainSocket = new Socket(AddressFamily.InterNetwork,
SocketType.Raw, ProtocolType.IP);

//Bind the socket to the selected IP address
mainSocket.Bind(new IPEndPoint(IPAddress.Parse(cmbInterfaces.Text),
0));

//Set the socket  options
mainSocket.SetSocketOption(SocketOptionLevel.IP,            //Applies
only to IP packets
                                  SocketOptionName.HeaderIncluded, //
Set the include the header
                                  true);                           //
option to true

                   byte[] byTrue = new byte[4] { 1, 0, 0, 0 };
                   byte[] byOut = new byte[4];

//Socket.IOControl is analogous to the WSAIoctl method of Winsock 2
mainSocket.IOControl(IOControlCode.ReceiveAll,     //THIS LINE
FAILS
                                       byTrue,
                                        byOut);

//Start receiving the packets asynchronously
mainSocket.BeginReceive(byteData, 0, byteData.Length,
SocketFlags.None,
                       new AsyncCallback(OnReceive), null);

Hope you can help,

Dave Hanson
Paul G. Tobey [eMVP] - 22 Mar 2007 16:52 GMT
You aren't going to be able to do that.  At most, you'll be able to display
the UI with a Compact Framework application.  You'll have to completely
rewrite the actual sniffing code to work with the Windows CE network stack
and that's very likely to involve writing an intermediate driver (native
code) to capture the packets and forward them, via a point-to-point message
queue, maybe, to the waiting UI program.

Paul T.

> Hi All,
>
[quoted text clipped - 43 lines]
>
> Dave Hanson
Graville@gmail.com - 22 Mar 2007 17:40 GMT
On 22 Mar, 15:52, "Paul G. Tobey [eMVP]" <p space tobey no spam AT no
instrument no spam DOT com> wrote:
> You aren't going to be able to do that.  At most, you'll be able to display
> the UI with a Compact Framework application.  You'll have to completely
[quoted text clipped - 58 lines]
>
> - Show quoted text -

Paul,

Thanks for this but I am confused as I thought reading from a raw
socket was supported in .NET CF 2.0. All the functions are there and
intellisence understands them? Why would the API's be available if
they had not been implemented?

Dave
Graville@gmail.com - 27 Mar 2007 11:03 GMT
On 22 Mar, 17:40, Gravi...@gmail.com wrote:
> On 22 Mar, 15:52, "Paul G. Tobey [eMVP]" <p space tobey no spam AT no
> instrument no spam DOT com> wrote:
[quoted text clipped - 72 lines]
>
> - Show quoted text -

So can anyone help me on this? Just came back to this post and thought
it would have an answer by now! :-(

Dave
Paul G. Tobey [eMVP] - 27 Mar 2007 16:23 GMT
I think there's just nothing more.  The OS doesn't support doing what you
want to do, so what the framework allows is irrelevant.  I've given you the
basics of what you'll have to do to capture packets (driver/application
combination).

Paul T.

> On 22 Mar, 17:40, Gravi...@gmail.com wrote:
>> On 22 Mar, 15:52, "Paul G. Tobey [eMVP]" <p space tobey no spam AT no
[quoted text clipped - 85 lines]
>
> Dave
Graville@gmail.com - 28 Mar 2007 09:19 GMT
On 27 Mar, 16:23, "Paul G. Tobey [eMVP]" <p space tobey no spam AT no
instrument no spam DOT com> wrote:
> I think there's just nothing more.  The OS doesn't support doing what you
> want to do, so what the framework allows is irrelevant.  I've given you the
[quoted text clipped - 98 lines]
>
> - Show quoted text -

Fair enough :-)

Time to dig out the manuals and refresh myself with C. :-(
Paul G. Tobey [eMVP] - 28 Mar 2007 18:21 GMT
In particular, look at the NetLog documentation for Windows CE.  There's a
DLL which is provided to OEMs in source form by Microsoft.  This DLL can be
set up to receive network logging information.  The default code writes the
data to a file in the same format as NetLog on the desktop, so you can use
the desktop tools to review the data.  I've fooled around with modifying it
to send the packets that it sees via a point-to-point message queue to a
client application which could parse and display the packets, if desired,
but it's just a few modifications of the MS source, at this point and I
don't expect it to go further.

If you don't have Platform Builder, you can download an evaluation copy of
CE6 from www.microsoft.com/embedded and find it there, I think; it's been
around a while.

Paul T.

> On 27 Mar, 16:23, "Paul G. Tobey [eMVP]" <p space tobey no spam AT no
> instrument no spam DOT com> wrote:
[quoted text clipped - 114 lines]
>
> Time to dig out the manuals and refresh myself with C. :-(

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.