我如何阻止一些已知的数据包？ [英] How i block some known packet?
问题描述
您好，
首先，我正在搜索一个嗅探和过滤网络数据包的基本应用程序，它也应该阻止一些已知的数据包...
我有一台服务器，并且正在运行一些特定的exe ...
一些lamers / hackers发送一个已知的数据包，他们可以关闭特定的exes ...实际上这对我不利...
他们是发送这个数据包（它可以被它们修改，我知道因为我也捕获了一些不同的数据包，它们也会关闭它们）;
00000000 25 00 00 50 00 00 0E 41 41 75 26 98 AE 82 E8 BB％.. P ... A Au& amp ;〜®，è»
00000010 00 00 00 19 00 00 00 99 25 03 DD BA 18 E0 1A C3 .......™％。ݺ.à.Ã
00000020 D9 F4 5D 1B B4 69 6A AB 48 1C 21 09 00 00 50 00Ùô] .'ij«H ....！P。
00000030 00 10 47 48 EC 19 A3 DA 2F E9 0E 00 01 20 00 00..GHì。£/é... ..
00000040 0B 00 41 67 65 6E 74 53 65 72 76 65 72 00 05 00 ..AgentS erver ...
00000050 0D 60 00 00 01 01 00 05 20 0B 00 0D 60 00 00 00 .` ...... ...`...
00000060 01 00 01 C3 02 05 00 00 00 02 05 00 0D 60 00 00 ...Ã.... .....`..
00000070 01 01 00 05 60 06 00 0D 60 00 00 00 03 00 02 00 ....`...`.......
00000080 02。
如何过滤这个已知的数据包，我不希望这个数据包达到exes ...
有没有包过滤/阻止？
你的问题有点令人困惑。原因是因为您提到要阻止特定数据包。但是你也提到它可以改变。因此，如果您打算逐包处理数据包级别的blcck。你要拔掉头发。我建议看看SharpPcap。它是WinPCap的.NET端口。您可以在.NET代码中使用此库，检查数据包，并尝试查找可以过滤的内容。 MAC，IP，结构。在.NET应用程序本身内。
Sharp Pcap可以找到这里
Hello,
First off all i'm searching a basic application that sniff and filter network packets and also it should be block some known packets...
I have a server and some specific exe's are running on it...
Some lamers/hackers send a known packet and they can close spesific exes... In practically that is not good for me...
They are sending this packet (It can be modified by them, i know because i also capture some different packets which they also close exes);
00000000 25 00 00 50 00 00 0E 41 41 75 26 98 AE 82 E8 BB %..P...A Au&˜®‚è»
00000010 00 00 00 19 00 00 00 99 25 03 DD BA 18 E0 1A C3 .......™ %.ݺ.à.Ã
00000020 D9 F4 5D 1B B4 69 6A AB 48 1C 21 09 00 00 50 00 Ùô].´ij« H.!...P.
00000030 00 10 47 48 EC 19 A3 DA 2F E9 0E 00 01 20 00 00 ..GHì.£Ú /é... ..
00000040 0B 00 41 67 65 6E 74 53 65 72 76 65 72 00 05 00 ..AgentS erver...
00000050 0D 60 00 00 01 01 00 05 20 0B 00 0D 60 00 00 00 .`...... ...`...
00000060 01 00 01 C3 02 05 00 00 00 02 05 00 0D 60 00 00 ...Ã.... .....`..
00000070 01 01 00 05 60 06 00 0D 60 00 00 00 03 00 02 00 ....`... `.......
00000080 02 .
How can i filter this known packet, i dont want this packet to reach exes...
Is there any packet filter/blocker?
Your question is kind of confusing. The reason being is because you mention that you want to block a specific packet. However you also mention that it can be changed. Therefore if you set out to blcck at the Packet level on a packet by packet. You're going to pull your hair out. I would recommend looking at SharpPcap. It's a .NET port of the WinPCap. Using this library in your .NET code you can, examine the packets, and attempt to find something that you can filter on. MAC, IP, Structure. Within the .NET application itself.
Sharp Pcap can be found Here
这篇关于我如何阻止一些已知的数据包？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
