题
我试图找出我们的局域网中哪些设备在线和离线。我见过很多程序都在进行图形网络概述,显示 LAN IP 和 MAC 地址。我想知道是否以及如何从 C#/.NET 中提取这些(ARP?)信息?
任何示例代码片段/链接将不胜感激。
解决方案
如果您知道有哪些设备,则可以使用 平级. 。这将允许您至少填满 ARP 表。如果需要,您始终可以执行 ARP -a 并解析输出。这里还有一个链接,展示了如何通过 pinvoke 进行呼叫 获取Ip网络表. 。我在下面提供了 Ping 类以及如何使用 GetIpNetTable 访问 ARP 表的示例。
这是 Ping 类的示例
using System;
using System.Net;
using System.Net.NetworkInformation;
using System.Text;
namespace Examples.System.Net.NetworkInformation.PingTest
{
public class PingExample
{
// args[0] can be an IPaddress or host name.
public static void Main (string[] args)
{
Ping pingSender = new Ping ();
PingOptions options = new PingOptions ();
// Use the default Ttl value which is 128,
// but change the fragmentation behavior.
options.DontFragment = true;
// Create a buffer of 32 bytes of data to be transmitted.
string data = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa";
byte[] buffer = Encoding.ASCII.GetBytes (data);
int timeout = 120;
PingReply reply = pingSender.Send (args[0], timeout, buffer, options);
if (reply.Status == IPStatus.Success)
{
Console.WriteLine ("Address: {0}", reply.Address.ToString ());
Console.WriteLine ("RoundTrip time: {0}", reply.RoundtripTime);
Console.WriteLine ("Time to live: {0}", reply.Options.Ttl);
Console.WriteLine ("Don't fragment: {0}", reply.Options.DontFragment);
Console.WriteLine ("Buffer size: {0}", reply.Buffer.Length);
}
}
}
}
这是 GetIpNetTable 的示例。
using System;
using System.Runtime.InteropServices;
using System.ComponentModel;
using System.Net;
namespace GetIpNetTable
{
class Program
{
// The max number of physical addresses.
const int MAXLEN_PHYSADDR = 8;
// Define the MIB_IPNETROW structure.
[StructLayout(LayoutKind.Sequential)]
struct MIB_IPNETROW
{
[MarshalAs(UnmanagedType.U4)]
public int dwIndex;
[MarshalAs(UnmanagedType.U4)]
public int dwPhysAddrLen;
[MarshalAs(UnmanagedType.U1)]
public byte mac0;
[MarshalAs(UnmanagedType.U1)]
public byte mac1;
[MarshalAs(UnmanagedType.U1)]
public byte mac2;
[MarshalAs(UnmanagedType.U1)]
public byte mac3;
[MarshalAs(UnmanagedType.U1)]
public byte mac4;
[MarshalAs(UnmanagedType.U1)]
public byte mac5;
[MarshalAs(UnmanagedType.U1)]
public byte mac6;
[MarshalAs(UnmanagedType.U1)]
public byte mac7;
[MarshalAs(UnmanagedType.U4)]
public int dwAddr;
[MarshalAs(UnmanagedType.U4)]
public int dwType;
}
// Declare the GetIpNetTable function.
[DllImport("IpHlpApi.dll")]
[return: MarshalAs(UnmanagedType.U4)]
static extern int GetIpNetTable(
IntPtr pIpNetTable,
[MarshalAs(UnmanagedType.U4)]
ref int pdwSize,
bool bOrder);
[DllImport("IpHlpApi.dll", SetLastError = true, CharSet = CharSet.Auto)]
internal static extern int FreeMibTable(IntPtr plpNetTable);
// The insufficient buffer error.
const int ERROR_INSUFFICIENT_BUFFER = 122;
static void Main(string[] args)
{
// The number of bytes needed.
int bytesNeeded = 0;
// The result from the API call.
int result = GetIpNetTable(IntPtr.Zero, ref bytesNeeded, false);
// Call the function, expecting an insufficient buffer.
if (result != ERROR_INSUFFICIENT_BUFFER)
{
// Throw an exception.
throw new Win32Exception(result);
}
// Allocate the memory, do it in a try/finally block, to ensure
// that it is released.
IntPtr buffer = IntPtr.Zero;
// Try/finally.
try
{
// Allocate the memory.
buffer = Marshal.AllocCoTaskMem(bytesNeeded);
// Make the call again. If it did not succeed, then
// raise an error.
result = GetIpNetTable(buffer, ref bytesNeeded, false);
// If the result is not 0 (no error), then throw an exception.
if (result != 0)
{
// Throw an exception.
throw new Win32Exception(result);
}
// Now we have the buffer, we have to marshal it. We can read
// the first 4 bytes to get the length of the buffer.
int entries = Marshal.ReadInt32(buffer);
// Increment the memory pointer by the size of the int.
IntPtr currentBuffer = new IntPtr(buffer.ToInt64() +
Marshal.SizeOf(typeof(int)));
// Allocate an array of entries.
MIB_IPNETROW[] table = new MIB_IPNETROW[entries];
// Cycle through the entries.
for (int index = 0; index < entries; index++)
{
// Call PtrToStructure, getting the structure information.
table[index] = (MIB_IPNETROW) Marshal.PtrToStructure(new
IntPtr(currentBuffer.ToInt64() + (index *
Marshal.SizeOf(typeof(MIB_IPNETROW)))), typeof(MIB_IPNETROW));
}
for (int index = 0; index < entries; index++)
{
MIB_IPNETROW row = table[index];
IPAddress ip=new IPAddress(BitConverter.GetBytes(row.dwAddr));
Console.Write("IP:"+ip.ToString()+"\t\tMAC:");
Console.Write( row.mac0.ToString("X2") + '-');
Console.Write( row.mac1.ToString("X2") + '-');
Console.Write( row.mac2.ToString("X2") + '-');
Console.Write( row.mac3.ToString("X2") + '-');
Console.Write( row.mac4.ToString("X2") + '-');
Console.WriteLine( row.mac5.ToString("X2"));
}
}
finally
{
// Release the memory.
FreeMibTable(buffer);
}
}
}
}
其他提示
在我的情况,我想看看所有的ARP广播我的网络上的流量检测我的网络上广播冲突的IP地址和MAC地址的设备。我找到了“ARP -a”轮询实现导致过时的信息,这使得它特别具有挑战性检测IP地址冲突。例如,两个设备都响应ARP请求,但作为一个响应总是随后赶到,将隐藏在“ARP -a”表中的较早响应。
我用 SharpPcap 以与ARP通信的捕获过滤器创建捕获服务。然后,我使用 Packet.Net 解析ARP报文。最后,我日志,并生成有关的IP和MAC地址冲突警报作为数据包来英寸
谷歌搜索 “fingbox”。好像你正在试图检测inturders?
这是一个入侵者探测装置是完全合法的,它很好的了解谁在使用你的无线传输,在哪些端口。有时,它也显示了MAC地址,并可以ping通。具有的其它特征堆。
不隶属于 StackOverflow