2014-10-30 494 views

回答

0

PcapPacket類有方法 public int transferStateAndDataTo(byte [] buffer)它將數據包的內容複製到字節數組。
與大小定義字節[]作爲packet.getTotalSize()

如果你正在尋找的有效載荷

//opens an offline pcap file 
Pcap pcap = Pcap.openOffline(pcapIpFile, errbuf); 

//packet object 
PcapPacket packet = new PcapPacket(JMemory.POINTER); 

Payload pl = new Payload(); 

pcap.nextEx(packet);  // retrieves the next packet from input loop thru until eof 

if(packet.hasHeader(pl)) //this will check for and retrieve the payload 
    pl.data() // this will give you the data in the payload as a byte stream 

在不同的報頭數據(以太網/ IP/TCP)還有其它方法可用與執行

+0

謝謝。但是,在將字節數組數據包解碼回pcap數據包時,異常發生在IP4()協議中。是否足夠做這樣的轉換:PcapPacket包=新的PcapPacket(字節)? – user3823859 2014-12-13 05:30:38