pdah
April 20th, 2009, 05:39 AM
Hi everybody,
Currently I'm using libpcap to develop a sniffing tool. I've read some tutorials and I can get the packet header, is it possible to capture the plain-text content using libpcap also ? ( like http request content ... )
I've tried to search on Google, looked at the documentation of tcpdump and wireshark but found nothing.
One thing I found on internet is that libpcap only captures 2% packets of network, i'm wondering how can wireshark captures everything while they're still using lipbcap.
Currently I'm using libpcap to develop a sniffing tool. I've read some tutorials and I can get the packet header, is it possible to capture the plain-text content using libpcap also ? ( like http request content ... )
I've tried to search on Google, looked at the documentation of tcpdump and wireshark but found nothing.
One thing I found on internet is that libpcap only captures 2% packets of network, i'm wondering how can wireshark captures everything while they're still using lipbcap.