分析vb6网络流量
我正在使用 Microsoft 网络监视器来分析通过 Winsck.ocx 通过 VB6 应用程序发送的流量。
数据包的十六进制查看器显示从我的计算机发送到服务器的数据,但是数据似乎已被编码... .我不认为它是加密的,如标题所示: WiFi:[未加密数据]
如何解码该数据?
我知道您可以单击解码按钮,但有数百种协议可供选择,我不知道该选择哪一种。
I'm using Microsoft Network Monitor to analyse traffic that is sent through a VB6 application via winsck.ocx
The hex viewer of the packet shows the data which is sent from my computer to the server, however the data seems to be encoded....I don't think it is encrypted as the header says:
WiFi: [Unencrypted Data]
How can I decode this data?
I know you can click on a decode button but there are hundreds of protocols to choose from and I have no idea which one to select.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
首先检查窗体上 Winsock 对象的属性。它应该是“0 - sckTCPProtocol”或“1 - sckUDPProtocol”。在“网络监视器”窗口中,选择 TCP 或 UDP,选择与 Winsock 属性匹配的那个。
作为网络的一般背景,您有一系列“层”,每个层都有不同的职责。因此 TCP 处理数据流的错误、超时等。它位于 IP 之上,它只是将数据位从一个设备移动到另一个设备。这两者都依赖于物理机制 - 在您的情况下是 WiFi。每一层都需要知道某些信息,以便发送设备在发送数据之前在数据上加上一个标头。因此,任何给定数据包的前 20+ 字节都不是您的应用程序将发送/接收的内容,如果连接正常,您可以忽略它们。
Start by checking the properties of the Winsock object on your form. It should be either "0 - sckTCPProtocol" or "1 - sckUDPProtocol". In the Network Monitor window select either TCP or UDP, whichever matches the Winsock property.
As a general background to networking, you have a series of "layers" each with a different responsibility. So TCP handles errors, timeouts, etc. for a data stream. This sits on top of IP which simply moves data bits from one device to another. Both of those rely on a physical mechanism - WiFi in your case. Each layer needs to know certain information so the sending device slaps a header on your data before it sends it out. Thus the first 20+ bytes of any given packet are not what your application will send/receive and you can ignore them if the connection is working.