-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathlive_capture.go
48 lines (41 loc) · 1.27 KB
/
live_capture.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
package main
/*
import (
"github.com/google/gopacket"
"github.com/google/gopacket/pcap"
"log"
"time"
"github.com/google/gopacket/layers"
)
var (
device string = "eth0"
snapshot_len int32 = 1024
promiscuous bool = false
err error
timeout time.Duration = 30 * time.Second
handle *pcap.Handle
)
func main() {
// Open device
if handle, err := pcap.OpenLive("eth0", 1600, true, pcap.BlockForever); err != nil {
panic(err)
} else if err := handle.SetBPFFilter("tcp and port 80"); err != nil { // optional
panic(err)
} else {
packetSource := gopacket.NewPacketSource(handle, handle.LinkType())
for packet := range packetSource.Packets() {
udpContent := packet.TransportLayer().(*layers.UDP)
// log.Println("%v", udpContent.Payload)
innerPacket := gopacket.NewPacket(udpContent.Payload[8:], layers.LayerTypeEthernet, gopacket.Default)
// log.Println("%v", innerPacket)
if innerPacket.NetworkLayer() == nil || innerPacket.TransportLayer() == nil || innerPacket.TransportLayer().LayerType() != layers.LayerTypeTCP {
// log.Println("not a tcp payload")
continue
} else {
tcp := innerPacket.TransportLayer().(*layers.TCP)
log.Println(string(tcp.Payload))
}
}
}
}
*/