现在的位置: 首页 > 综合 > 正文

进程-端口-IP地址关联演示2

2013年11月23日 ⁄ 综合 ⁄ 共 11515字 ⁄ 字号 小 中 大 ⁄ 评论关闭

声明：

        此份代码参考了“Hook 系统服务隐藏端口”和http://topic.csdn.net/t/20050105/17/3701810.html#|的一些代码片断和内容，以及对iphlpapi的反汇编才有了这份代码。并且是在原文章"进程-端口-IP地址关联演示"补充和扩展。在"进程-端口-IP地址关联演示"中是没法获取远程IP地址和端口的，现在这份代码已经算比较完美的解决了一系列问题。程序重新封装了GetTcpTable和GetUdpTable两个API函数，并且增加了两个函数的扩展版本GetTcpTableEx和GetUdpTableEx，主要的区别是前两个函数不能从端口关联到进程，后两个函数成功解决此问题。目前代码只在win2k/winxp/win2003上测试通过，由于本人没有vista就没办法测试了，有条件的朋友可以去测试一下。如果你还发现有什么bug请于我联系，谢谢！如果能把你修改的更完美的代码发给我一份的话，就更好了！！

        先贴关键代码，需要完整代码的可以下载，地址是：http://p.blog.csdn.net/images/p_blog_csdn_net/chenhui530/EntryImages/20080803/GetNetInfo.jpg

 

  1. Public Function GetTcpTable(ByVal Handle As Long) As MIB_TCPTABLE
  2.     Dim TcpRows() As MIB_TCPROW
  3.     Dim objQuery As TCP_REQUEST_QUERY_INFORMATION_EX
  4.     Dim hEvent As Long, hEvent1 As Long
  5.     Dim ntStatus As Long
  6.     Dim objIoStatusBlock As IO_STATUS_BLOCK
  7.     Dim TcpStats As MIB_TCPSTATS
  8.     hEvent = CreateEvent(ByVal 0&, 0, 1, vbNullString)
  9.     If hEvent Then
  10.         objQuery.ID.toi_entity.tei_entity = &H400 'CO_TL_ENTITY;   tcp
  11.         objQuery.ID.toi_entity.tei_instance = 0
  12.         objQuery.ID.toi_class = &H200 'INFO_CLASS_PROTOCOL
  13.         objQuery.ID.toi_type = &H100 'INFO_TYPE_PROVIDER
  14.         objQuery.ID.toi_id = &H1 'TCP_STATS_ID
  15.         ntStatus = NtDeviceIoControlFile(Handle, _
  16.                                         hEvent, _
  17.                                         ByVal 0&, _
  18.                                         ByVal 0&, _
  19.                                         objIoStatusBlock, _
  20.                                         &H120003, _
  21.                                         objQuery, _
  22.                                         LenB(objQuery), _
  23.                                         TcpStats, _
  24.                                         LenB(TcpStats))
  25.         If NT_SUCCESS(ntStatus) Then
  26.             hEvent1 = CreateEvent(ByVal 0&, 0, 1, vbNullString)
  27.             If hEvent1 Then
  28.                 ZeroMemory objQuery, LenB(objQuery)
  29.                 ZeroMemory objIoStatusBlock, LenB(objIoStatusBlock)
  30.                 objQuery.ID.toi_entity.tei_entity = &H400 'CO_TL_ENTITY;   tcp
  31.                 objQuery.ID.toi_entity.tei_instance = 0
  32.                 objQuery.ID.toi_class = &H200 'INFO_CLASS_PROTOCOL
  33.                 objQuery.ID.toi_type = &H100 'INFO_TYPE_PROVIDER
  34.                 objQuery.ID.toi_id = &H101 'TCP_MIB_ADDRTABLE_ENTRY_ID
  35.                 ReDim TcpRows(TcpStats.dwNumConns - 1)
  36.                 ntStatus = NtDeviceIoControlFile(Handle, _
  37.                                 hEvent1, _
  38.                                 ByVal 0&, _
  39.                                 ByVal 0&, _
  40.                                 objIoStatusBlock, _
  41.                                 &H120003, _
  42.                                 objQuery, _
  43.                                 LenB(objQuery), _
  44.                                 TcpRows(0), _
  45.                                 TcpStats.dwNumConns * LenB(TcpRows(0)))
  46.                 If NT_SUCCESS(ntStatus) Then
  47.                     GetTcpTable.dwNumEntries = objIoStatusBlock.uInformation / LenB(TcpRows(0))
  48.                     ReDim GetTcpTable.table(TcpStats.dwNumConns - 1)
  49.                     CopyMemory GetTcpTable.table(0), TcpRows(0), TcpStats.dwNumConns * LenB(TcpRows(0))
  50.                 End If
  51.             End If
  52.         End If
  53.     End If
  54.     If hEvent Then NtClose hEvent
  55.     If hEvent1 Then NtClose hEvent1
  56. End Function
  58. Public Function GetTcpTableEx(ByVal Handle As Long) As MIB_TCPTABLEEX
  59.     Dim TcpRows() As MIB_TCPROWEX
  60.     Dim objQuery As TCP_REQUEST_QUERY_INFORMATION_EX
  61.     Dim hEvent As Long, hEvent1 As Long
  62.     Dim ntStatus As Long
  63.     Dim objIoStatusBlock As IO_STATUS_BLOCK
  64.     Dim TcpStats As MIB_TCPSTATS
  65.     hEvent = CreateEvent(ByVal 0&, 0, 1, vbNullString)
  66.     If hEvent Then
  67.         objQuery.ID.toi_entity.tei_entity = &H400 'CO_TL_ENTITY;   tcp
  68.         objQuery.ID.toi_entity.tei_instance = 0
  69.         objQuery.ID.toi_class = &H200 'INFO_CLASS_PROTOCOL
  70.         objQuery.ID.toi_type = &H100 'INFO_TYPE_PROVIDER
  71.         objQuery.ID.toi_id = &H1 'TCP_STATS_ID
  72.         ntStatus = NtDeviceIoControlFile(Handle, _
  73.                                         hEvent, _
  74.                                         ByVal 0&, _
  75.                                         ByVal 0&, _
  76.                                         objIoStatusBlock, _
  77.                                         &H120003, _
  78.                                         objQuery, _
  79.                                         LenB(objQuery), _
  80.                                         TcpStats, _
  81.                                         LenB(TcpStats))
  82.         If NT_SUCCESS(ntStatus) Then
  83.             hEvent1 = CreateEvent(ByVal 0&, 0, 1, vbNullString)
  84.             If hEvent1 Then
  85.                 ZeroMemory objQuery, LenB(objQuery)
  86.                 ZeroMemory objIoStatusBlock, LenB(objIoStatusBlock)
  87.                 objQuery.ID.toi_entity.tei_entity = &H400 'CO_TL_ENTITY;   tcp
  88.                 objQuery.ID.toi_entity.tei_instance = 0
  89.                 objQuery.ID.toi_class = &H200 'INFO_CLASS_PROTOCOL
  90.                 objQuery.ID.toi_type = &H100 'INFO_TYPE_PROVIDER
  91.                 objQuery.ID.toi_id = &H102 'TCP_MIB_ADDRTABLE_ENTRY_EX_ID
  92.                 ReDim TcpRows(TcpStats.dwNumConns - 1)
  93.                 ntStatus = NtDeviceIoControlFile(Handle, _
  94.                                 hEvent1, _
  95.                                 ByVal 0&, _
  96.                                 ByVal 0&, _
  97.                                 objIoStatusBlock, _
  98.                                 &H120003, _
  99.                                 objQuery, _
  100.                                 LenB(objQuery), _
  101.                                 TcpRows(0), _
  102.                                 TcpStats.dwNumConns * LenB(TcpRows(0)))
  103.                 If NT_SUCCESS(ntStatus) Then
  104.                     GetTcpTableEx.dwNumEntries = objIoStatusBlock.uInformation / LenB(TcpRows(0))
  105.                     ReDim GetTcpTableEx.table(TcpStats.dwNumConns - 1)
  106.                     CopyMemory GetTcpTableEx.table(0), TcpRows(0), TcpStats.dwNumConns * LenB(TcpRows(0))
  107.                 End If
  108.             End If
  109.         End If
  110.     End If
  111.     If hEvent Then NtClose hEvent
  112.     If hEvent1 Then NtClose hEvent1
  113. End Function
  115. Public Function GetUdpTable(ByVal Handle As Long) As MIB_UDPTABLE
  116.     Dim UdpRows() As MIB_UDPROW
  117.     Dim objQuery As TCP_REQUEST_QUERY_INFORMATION_EX
  118.     Dim hEvent As Long, hEvent1 As Long
  119.     Dim ntStatus As Long
  120.     Dim objIoStatusBlock As IO_STATUS_BLOCK
  121.     Dim UdpStats As MIB_UDPSTATS
  122.     hEvent = CreateEvent(ByVal 0&, 0, 1, vbNullString)
  123.     If hEvent Then
  124.         objQuery.ID.toi_entity.tei_entity = &H401 'CO_TL_ENTITY;   udp
  125.         objQuery.ID.toi_entity.tei_instance = 0
  126.         objQuery.ID.toi_class = &H200 'INFO_CLASS_PROTOCOL
  127.         objQuery.ID.toi_type = &H100 'INFO_TYPE_PROVIDER
  128.         objQuery.ID.toi_id = &H1 'TCP_STATS_ID
  129.         ntStatus = NtDeviceIoControlFile(Handle, _
  130.                                         hEvent, _
  131.                                         ByVal 0&, _
  132.                                         ByVal 0&, _
  133.                                         objIoStatusBlock, _
  134.                                         &H120003, _
  135.                                         objQuery, _
  136.                                         LenB(objQuery), _
  137.                                         UdpStats, _
  138.                                         LenB(UdpStats))
  139.         If NT_SUCCESS(ntStatus) Then
  140.             hEvent1 = CreateEvent(ByVal 0&, 0, 1, vbNullString)
  141.             If hEvent1 Then
  142.                 ZeroMemory objQuery, LenB(objQuery)
  143.                 ZeroMemory objIoStatusBlock, LenB(objIoStatusBlock)
  144.                 objQuery.ID.toi_entity.tei_entity = &H401 'CO_TL_ENTITY;   udp
  145.                 objQuery.ID.toi_entity.tei_instance = 0
  146.                 objQuery.ID.toi_class = &H200 'INFO_CLASS_PROTOCOL
  147.                 objQuery.ID.toi_type = &H100 'INFO_TYPE_PROVIDER
  148.                 objQuery.ID.toi_id = &H101 'TCP_MIB_ADDRTABLE_ENTRY_ID
  149.                 ReDim UdpRows(UdpStats.dwNumAddrs - 1)
  150.                 ntStatus = NtDeviceIoControlFile(Handle, _
  151.                                 hEvent1, _
  152.                                 ByVal 0&, _
  153.                                 ByVal 0&, _
  154.                                 objIoStatusBlock, _
  155.                                 &H120003, _
  156.                                 objQuery, _
  157.                                 LenB(objQuery), _
  158.                                 UdpRows(0), _
  159.                                 UdpStats.dwNumAddrs * LenB(UdpRows(0)))
  160.                 If NT_SUCCESS(ntStatus) Then
  161.                     GetUdpTable.dwNumEntries = objIoStatusBlock.uInformation / LenB(UdpRows(0))
  162.                     ReDim GetUdpTable.table(UdpStats.dwNumAddrs - 1)
  163.                     CopyMemory GetUdpTable.table(0), UdpRows(0), UdpStats.dwNumAddrs * LenB(UdpRows(0))
  164.                 End If
  165.             End If
  166.         End If
  167.     End If
  168.     If hEvent Then NtClose hEvent
  169.     If hEvent1 Then NtClose hEvent1
  170. End Function
  172. Public Function GetUdpTableEx(ByVal Handle As Long) As MIB_UDPTABLEEX
  173.     Dim UdpRows() As MIB_UDPROWEX
  174.     Dim objQuery As TCP_REQUEST_QUERY_INFORMATION_EX
  175.     Dim hEvent As Long, hEvent1 As Long
  176.     Dim ntStatus As Long
  177.     Dim objIoStatusBlock As IO_STATUS_BLOCK
  178.     Dim UdpStats As MIB_UDPSTATS
  179.     hEvent = CreateEvent(ByVal 0&, 0, 1, vbNullString)
  180.     If hEvent Then
  181.         objQuery.ID.toi_entity.tei_entity = &H401 'CO_TL_ENTITY;   udp
  182.         objQuery.ID.toi_entity.tei_instance = 0
  183.         objQuery.ID.toi_class = &H200 'INFO_CLASS_PROTOCOL
  184.         objQuery.ID.toi_type = &H100 'INFO_TYPE_PROVIDER
  185.         objQuery.ID.toi_id = &H1 'TCP_STATS_ID
  186.         ntStatus = NtDeviceIoControlFile(Handle, _
  187.                                         hEvent, _
  188.                                         ByVal 0&, _
  189.                                         ByVal 0&, _
  190.                                         objIoStatusBlock, _
  191.                                         &H120003, _
  192.                                         objQuery, _
  193.                                         LenB(objQuery), _
  194.                                         UdpStats, _
  195.                                         LenB(UdpStats))
  196.         If NT_SUCCESS(ntStatus) Then
  197.             hEvent1 = CreateEvent(ByVal 0&, 0, 1, vbNullString)
  198.             If hEvent1 Then
  199.                 ZeroMemory objQuery, LenB(objQuery)
  200.                 ZeroMemory objIoStatusBlock, LenB(objIoStatusBlock)
  201.                 objQuery.ID.toi_entity.tei_entity = &H401 'CO_TL_ENTITY;   udp
  202.                 objQuery.ID.toi_entity.tei_instance = 0
  203.                 objQuery.ID.toi_class = &H200 'INFO_CLASS_PROTOCOL
  204.                 objQuery.ID.toi_type = &H100 'INFO_TYPE_PROVIDER
  205.                 objQuery.ID.toi_id = &H102 'TCP_MIB_ADDRTABLE_ENTRY_EX_ID
  206.                 ReDim UdpRows(UdpStats.dwNumAddrs - 1)
  207.                 ntStatus = NtDeviceIoControlFile(Handle, _
  208.                                 hEvent1, _
  209.                                 ByVal 0&, _
  210.                                 ByVal 0&, _
  211.                                 objIoStatusBlock, _
  212.                                 &H120003, _
  213.                                 objQuery, _
  214.                                 LenB(objQuery), _
  215.                                 UdpRows(0), _
  216.                                 UdpStats.dwNumAddrs * LenB(UdpRows(0)))
  217.                 If NT_SUCCESS(ntStatus) Then
  218.                     GetUdpTableEx.dwNumEntries = objIoStatusBlock.uInformation / LenB(UdpRows(0))
  219.                     ReDim GetUdpTableEx.table(UdpStats.dwNumAddrs - 1)
  220.                     CopyMemory GetUdpTableEx.table(0), UdpRows(0), UdpStats.dwNumAddrs * LenB(UdpRows(0))
  221.                 End If
  222.             End If
  223.         End If
  224.     End If
  225.     If hEvent Then NtClose hEvent
  226.     If hEvent1 Then NtClose hEvent1
  227. End Function
返回
【上篇】
【下篇】

作者:

抱歉!评论已关闭.

返回首页

Copyright © 2013-2018 学步园  保留所有权利.
软文销售 QQ客服：2265327166 点击这里给我发消息（其他合作也可洽谈）
必威体育
必威电竞