{"id":118137,"date":"2026-10-26T11:40:43","date_gmt":"2026-10-26T03:40:43","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/118137.html"},"modified":"2026-10-26T11:40:43","modified_gmt":"2026-10-26T03:40:43","slug":"%e4%bb%8e%e9%9b%b6%e5%ae%9e%e7%8e%b0%e4%b8%80%e4%b8%aa-windows-%e7%bd%91%e7%bb%9c%e5%97%85%e6%8e%a2%e5%99%a8%ef%bc%88ai%e8%b5%8b%e8%83%bd%ef%bc%89","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/118137.html","title":{"rendered":"\u4ece\u96f6\u5b9e\u73b0\u4e00\u4e2a Windows \u7f51\u7edc\u55c5\u63a2\u5668\uff08AI\u8d4b\u80fd\uff09"},"content":{"rendered":"<p>\u505a\u7f51\u7edc\u534f\u8bae\u5b9e\u9a8c\u65f6&#xff0c;\u6700\u76f4\u63a5\u7684\u65b9\u6848\u662f\u6253\u5f00 Wireshark&#xff0c;\u9009\u62e9\u4e00\u4e2a\u7f51\u5361&#xff0c;\u770b\u7740\u6570\u636e\u5305\u6eda\u8fc7\u5c4f\u5e55\u3002\u5de5\u5177\u5f88\u597d\u7528&#xff0c;\u4f46\u5b83\u4e0d\u4f1a\u89e3\u91ca\u4e00\u4e2a\u6570\u636e\u5305\u600e\u6837\u4ece\u7f51\u5361\u8fdb\u5165\u7a0b\u5e8f&#xff0c;\u600e\u6837\u88ab\u8bc6\u522b\u6210 IPv4&#xff0c;\u53c8\u600e\u6837\u53d8\u6210\u534f\u8bae\u6811\u548c\u5341\u516d\u8fdb\u5236\u89c6\u56fe\u3002<\/p>\n<p>\u6211\u60f3\u628a\u8fd9\u4e2a\u8fc7\u7a0b\u5b8c\u6574\u8d70\u4e00\u904d&#xff0c;\u4e8e\u662f\u7528 C&#043;&#043;17\u3001Win32 \u548c Npcap \u505a\u4e86\u4e00\u4e2a\u8f7b\u91cf\u7f51\u7edc\u5206\u6790\u5668 NetObserver\u3002<\/p>\n<p>\u9879\u76ee\u6ca1\u6709\u8bd5\u56fe\u590d\u523b Wireshark\u3002\u5b83\u7684\u76ee\u6807\u66f4\u5177\u4f53&#xff1a;\u5b8c\u6210\u7f51\u5361\u679a\u4e3e\u3001\u5b9e\u65f6\u6355\u83b7\u3001BPF \u8fc7\u6ee4\u3001\u534f\u8bae\u89e3\u6790\u3001\u6355\u83b7\u540e\u8fc7\u6ee4\u3001TCP \u4f1a\u8bdd\u91cd\u7ec4\u3001pcapng \u4fdd\u5b58\u548c\u8bfb\u53d6&#xff0c;\u5e76\u63d0\u4f9b\u4e00\u4e2a\u53ef\u64cd\u4f5c\u7684\u56fe\u5f62\u754c\u9762\u3002<\/p>\n<p>\u57fa\u672c\u662f\u501f\u52a9AI\u5f00\u53d1&#xff0c;\u6240\u4ee5\u9664\u4e0a\u8ff0\u76ee\u7684&#xff0c;\u8fd8\u53ef\u4ee5\u5c06\u4e4b\u4f5c\u4e3aAI\u8d4b\u80fd\u7684\u9879\u76ee\u7ecf\u9a8c\u3002<\/p>\n<h4>1. \u5b89\u88c5 Windows \u5f00\u53d1\u73af\u5883<\/h4>\n<p>\u4e0b\u5217\u90fd\u662f\u4e00\u4e9b\u6bd4\u8f83\u7b80\u5355\u7684\u5b89\u88c5&#xff0c;\u5c31\u4e0d\u4e00\u4e00\u63d0\u4f9b\u4e0b\u8f7d\u94fe\u63a5\u548c\u5b89\u88c5\u6b65\u9aa4\u4e86<\/p>\n<p>\u5b89\u88c5&#xff1a;<\/p>\n<ul>\n<li>Visual Studio 2022 Build Tools<\/li>\n<li>\u5de5\u4f5c\u8d1f\u8f7d&#xff1a;\u4f7f\u7528 C&#043;&#043; \u7684\u684c\u9762\u5f00\u53d1<\/li>\n<li>CMake<\/li>\n<li>Git<\/li>\n<li>VS Code<\/li>\n<li>Wireshark<\/li>\n<li>Python&#xff0c;\u4ec5\u7528\u4e8e\u6d4b\u8bd5\u672c\u5730 HTTP \u670d\u52a1<\/li>\n<\/ul>\n<p>\u9a8c\u8bc1&#xff1a;<\/p>\n<p>cmake &#8211;version<br \/>\ngit &#8211;version<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261026034040-6adecbb81215c.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>VS Code \u53ea\u662f\u7f16\u8f91\u5668&#xff0c;\u7f16\u8bd1\u7531 MSVC \u548c CMake \u5b8c\u6210\u3002<\/p>\n<h4>2. \u5b89\u88c5 Npcap<\/h4>\n<p>\u5b89\u88c5 Npcap \u8fd0\u884c\u5e93&#xff0c;\u5efa\u8bae\u9009\u62e9&#xff1a;<\/p>\n<p>Install Npcap in WinPcap API-compatible Mode<\/p>\n<p>\u9a8c\u8bc1&#xff1a;<\/p>\n<p><span class=\"token function\">Get-Service<\/span> Npcap<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261026034040-6adecbb86c20a.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>USB \u6293\u5305\u7ec4\u4ef6\u4e0d\u662f\u672c\u5b9e\u9a8c\u5fc5\u9700\u9879\u3002<\/p>\n<h4>3. \u51c6\u5907 Npcap SDK<\/h4>\n<p>\u4e0b\u8f7d Npcap SDK&#xff0c;\u5e76\u653e\u5230&#xff1a;<\/p>\n<p>third_party\\\\npcap-sdk<\/p>\n<p>\u9a8c\u8bc1&#xff1a;\u8981\u5747\u8fd4\u56detrue<\/p>\n<p>Test-Path &#034;D:\\\\AI\\\\NetObserver\\\\third_party\\\\npcap-sdk\\\\Include\\\\pcap.h&#034;<br \/>\nTest-Path &#034;D:\\\\AI\\\\NetObserver\\\\third_party\\\\npcap-sdk\\\\Lib\\\\x64\\\\wpcap.lib&#034;<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261026034040-6adecbb88541d.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>\u76ee\u5f55\u5e94\u5305\u542b&#xff1a;<\/p>\n<p>third_party\\\\npcap-sdk\\\\Include\\\\pcap.h<br \/>\nthird_party\\\\npcap-sdk\\\\Lib\\\\x64\\\\wpcap.lib<br \/>\nthird_party\\\\npcap-sdk\\\\Lib\\\\x64\\\\Packet.lib<\/p>\n<p>\u4e0d\u8981\u628a SDK \u4e8c\u8fdb\u5236\u63d0\u4ea4\u5230 Git\u3002<\/p>\n<h4>4. \u5efa\u7acb\u7a7a\u9879\u76ee<\/h4>\n<p>\u4f8b\u5982&#xff1a;(\u547d\u540d\u81ea\u5df1\u60f3)<\/p>\n<p>D:\\\\AI\\\\NetObserverLab<\/p>\n<p>\u63a8\u8350\u7ed3\u6784&#xff1a;<\/p>\n<p>NetObserverLab\/<br \/>\n\u251c\u2500\u2500 CMakeLists.txt<br \/>\n\u251c\u2500\u2500 CMakePresets.json<br \/>\n\u251c\u2500\u2500 src\/<br \/>\n\u2502   \u251c\u2500\u2500 core\/<br \/>\n\u2502   \u2502   \u251c\u2500\u2500 CaptureEngine.h<br \/>\n\u2502   \u2502   \u251c\u2500\u2500 CaptureEngine.cpp<br \/>\n\u2502   \u2502   \u251c\u2500\u2500 PacketTypes.h<br \/>\n\u2502   \u2502   \u251c\u2500\u2500 PacketParser.h<br \/>\n\u2502   \u2502   \u2514\u2500\u2500 PacketParser.cpp<br \/>\n\u2502   \u251c\u2500\u2500 console_main.cpp<br \/>\n\u2502   \u2514\u2500\u2500 gui_main.cpp<br \/>\n\u251c\u2500\u2500 tests\/<br \/>\n\u251c\u2500\u2500 scripts\/<br \/>\n\u251c\u2500\u2500 resources\/<br \/>\n\u2514\u2500\u2500 README.md<\/p>\n<h4>5. \u521b\u5efa\u57fa\u7840 .gitignore<\/h4>\n<p>\u9700\u8981\u5efa\u7acb\u4e00\u4e2agit\u4ed3\u5e93&#xff0c;\u53ef\u4ee5\u8ba9\u4f60\u5f00\u53d1\u7684\u65f6\u5019&#xff0c;\u56de\u6eaf\u7248\u672c&#xff0c;\u5f88\u6709\u7528<\/p>\n<p>\u81f3\u5c11\u5ffd\u7565&#xff1a;<\/p>\n<p>build\/<br \/>\n.vs\/<br \/>\nthird_party\/npcap-sdk\/<br \/>\ncaptures\/<br \/>\n*.pcap<br \/>\n*.pcapng<\/p>\n<p>\u9632\u6b62\u4f60\u7684git\u4ed3\u5e93\u7206\u70b8<\/p>\n<h4>\u4e0b\u9762\u5c31\u662f\u5177\u4f53\u6b65\u9aa4&#xff0c;\u53ef\u4ee5\u5c06\u6587\u7ae0\u53d1\u7ed9AI&#xff0c;\u8f85\u52a9\u7406\u89e3\u5f00\u53d1<\/h4>\n<h4>6. \u5efa\u7acb\u6700\u5c0f CMake \u5de5\u7a0b<\/h4>\n<p>\u5148\u53ea\u521b\u5efa\u63a7\u5236\u53f0\u76ee\u6807&#xff0c;\u6682\u65f6\u4e0d\u5199 GUI\u3002<\/p>\n<p>CMake \u9700\u8981\u627e\u5230 Npcap SDK&#xff1a;<\/p>\n<p>find_path(PCAP_INCLUDE_DIR<br \/>\n    NAMES pcap.h<br \/>\n    HINTS &#034;${CMAKE_SOURCE_DIR}\/third_party\/npcap-sdk&#034;<br \/>\n    PATH_SUFFIXES Include<br \/>\n)<\/p>\n<p>find_library(WPCAP_LIBRARY<br \/>\n    NAMES wpcap<br \/>\n    HINTS &#034;${CMAKE_SOURCE_DIR}\/third_party\/npcap-sdk&#034;<br \/>\n    PATH_SUFFIXES Lib\/x64<br \/>\n)<\/p>\n<p>\u94fe\u63a5&#xff1a;<\/p>\n<p>target_include_directories(netobserver_core PUBLIC<br \/>\n    &#034;${CMAKE_SOURCE_DIR}\/src&#034;<br \/>\n    &#034;${PCAP_INCLUDE_DIR}&#034;<br \/>\n)<\/p>\n<p>target_link_libraries(netobserver_core PUBLIC<br \/>\n    &#034;${WPCAP_LIBRARY}&#034;<br \/>\n    ws2_32<br \/>\n)<\/p>\n<p>\u5728\u6e90\u6587\u4ef6\u4e2d\u52a0\u5165&#xff1a;<\/p>\n<p>#define WPCAP<br \/>\n#define HAVE_REMOTE<br \/>\n#include &lt;pcap.h&gt;<\/p>\n<p>\u4f7f\u7528 CMake \u751f\u6210 Visual Studio \u5de5\u7a0b&#xff1a;<\/p>\n<p>cmake -S . -B build -A x64<br \/>\ncmake &#8211;build build &#8211;config Debug<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261026034040-6adecbb8a1aa4.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261026034040-6adecbb8ead5a.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>\u8fd9\u4e2a\u9636\u6bb5\u4e0d\u8981\u5148\u5199\u754c\u9762\u3002\u5148\u4fdd\u8bc1 C&#043;&#043; \u548c Npcap \u80fd\u591f\u94fe\u63a5\u6210\u529f\u3002<\/p>\n<h4>7. \u679a\u4e3e\u7f51\u5361<\/h4>\n<p>\u7b2c\u4e00\u9879\u529f\u80fd\u662f\u5217\u51fa\u6240\u6709\u6293\u5305\u8bbe\u5907\u3002<\/p>\n<p>\u6838\u5fc3\u8c03\u7528&#xff1a;<\/p>\n<p>pcap_findalldevs<br \/>\npcap_freealldevs<\/p>\n<p>\u63a7\u5236\u53f0\u8f93\u51fa\u7f51\u5361\u540d\u79f0\u548c\u63cf\u8ff0\u3002\u7ed3\u679c\u4e2d\u4e00\u822c\u53ef\u4ee5\u770b\u5230&#xff1a;<\/p>\n<p>Realtek Wireless LAN<br \/>\nBluetooth Device<br \/>\nVMware Virtual Ethernet Adapter<br \/>\nAdapter for loopback traffic capture<\/p>\n<p>\u8fd0\u884c&#xff1a;<\/p>\n<p>.\\\\build\\\\Debug\\\\netobserver-cli.exe &#8211;list<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261026034041-6adecbb98d4b2.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n<p>\u5982\u679c\u80fd\u770b\u5230 \\\\Device\\\\NPF_&#8230;&#xff0c;\u8bf4\u660e Npcap \u548c\u7a0b\u5e8f\u914d\u7f6e\u6b63\u5e38\u3002<\/p>\n<p>\u5f53\u524d\u8054\u7f51\u6d41\u91cf\u4e00\u822c\u9009\u62e9 Wi-Fi \u6216\u6709\u7ebf\u7f51\u5361\u3002\u6d4b\u8bd5\u672c\u5730 HTTP \u670d\u52a1\u65f6\u9009\u62e9\u56de\u73af\u7f51\u5361\u3002<\/p>\n<h4>8. \u6253\u5f00\u7f51\u5361\u5e76\u6293\u5305<\/h4>\n<p>\u9009\u62e9\u7f51\u5361\u540e\u8c03\u7528&#xff1a;<\/p>\n<p>pcap_open_live(<br \/>\n    deviceName,<br \/>\n    65535,<br \/>\n    1,<br \/>\n    1000,<br \/>\n    errbuf<br \/>\n);<\/p>\n<p>\u53c2\u6570\u4f9d\u6b21\u662f\u7f51\u5361\u540d\u79f0\u3001\u6355\u83b7\u957f\u5ea6\u3001\u6df7\u6742\u6a21\u5f0f\u548c\u8bfb\u53d6\u8d85\u65f6\u3002<\/p>\n<p>\u5faa\u73af\u8c03\u7528&#xff1a;<\/p>\n<p>pcap_next_ex<\/p>\n<p>\u62ff\u5230\u6570\u636e\u540e\u81f3\u5c11\u663e\u793a&#xff1a;<\/p>\n<ul>\n<li>\u6570\u636e\u5305\u5e8f\u53f7<\/li>\n<li>\u6355\u83b7\u957f\u5ea6<\/li>\n<li>\u539f\u59cb\u957f\u5ea6<\/li>\n<\/ul>\n<p>\u5fc5\u987b\u590d\u5236\u6570\u636e\u5185\u5bb9&#xff1a;<\/p>\n<p>std::vector&lt;std::uint8_t&gt; bytes(<br \/>\n    rawPacket,<br \/>\n    rawPacket &#043; packetHeader-&gt;caplen<br \/>\n);<\/p>\n<p>pkt_data \u6307\u5411\u7684\u7f13\u51b2\u533a\u4f1a\u88ab\u4e0b\u4e00\u6b21\u6355\u83b7\u590d\u7528&#xff0c;\u4e0d\u80fd\u76f4\u63a5\u4fdd\u5b58\u8fd9\u4e2a\u6307\u9488\u3002<\/p>\n<p>\u4e3a\u4e86\u53ca\u65f6\u54cd\u5e94\u505c\u6b62\u64cd\u4f5c&#xff0c;\u53ef\u4ee5\u5f00\u542f\u975e\u963b\u585e\u8bfb\u53d6&#xff1a;<\/p>\n<p>pcap_setnonblock(handle, 1, errbuf);<\/p>\n<p>\u505c\u6b62\u65f6&#xff1a;<\/p>\n<p>pcap_breakloop(handle);<br \/>\npcap_close(handle);<\/p>\n<h4>9. \u8bbe\u7f6e BPF \u6355\u83b7\u8fc7\u6ee4<\/h4>\n<p>\u4f7f\u7528&#xff1a;<\/p>\n<p>pcap_lookupnet<br \/>\npcap_compile<br \/>\npcap_setfilter<br \/>\npcap_freecode<\/p>\n<p>\u53ef\u4ee5\u5148\u652f\u6301\u8fd9\u4e9b\u8868\u8fbe\u5f0f&#xff1a;<\/p>\n<p>tcp<br \/>\nudp<br \/>\nicmp<br \/>\narp<br \/>\nudp port 53<br \/>\ntcp port 8080<br \/>\nhost 10.122.60.186<\/p>\n<p>\u6355\u83b7\u8fc7\u6ee4\u5728 Npcap \u5c42\u751f\u6548&#xff0c;\u4e0d\u5339\u914d\u7684\u6570\u636e\u5305\u4e0d\u4f1a\u88ab\u7a0b\u5e8f\u8bfb\u53d6\u3002<\/p>\n<h4>10. \u89e3\u6790 Ethernet \u548c IP<\/h4>\n<p>\u4ee5\u592a\u7f51\u5e27\u5f00\u5934\u5305\u62ec&#xff1a;<\/p>\n<p>\u76ee\u7684 MAC&#xff1a;6 \u5b57\u8282<br \/>\n\u6e90 MAC&#xff1a;6 \u5b57\u8282<br \/>\nEtherType&#xff1a;2 \u5b57\u8282<\/p>\n<p>\u63a5\u7740\u89e3\u6790 IPv4&#xff1a;<\/p>\n<ul>\n<li>\u7248\u672c\u548c\u9996\u90e8\u957f\u5ea6<\/li>\n<li>\u603b\u957f\u5ea6<\/li>\n<li>TTL<\/li>\n<li>\u534f\u8bae\u53f7<\/li>\n<li>\u6e90 IP<\/li>\n<li>\u76ee\u7684 IP<\/li>\n<\/ul>\n<p>IP \u9996\u90e8\u957f\u5ea6\u4e0d\u80fd\u56fa\u5b9a\u5199\u6210 20&#xff1a;<\/p>\n<p>const std::size_t ipHeaderLength &#061;<br \/>\n    (ipHeader-&gt;verIhl &amp; 0x0F) * 4;<\/p>\n<p>\u4f20\u8f93\u5c42\u504f\u79fb&#xff1a;<\/p>\n<p>const std::size_t l4Offset &#061;<br \/>\n    ethernetHeaderLength &#043; ipHeaderLength;<\/p>\n<p>\u7aef\u53e3\u548c\u5730\u5740\u9700\u8981\u8f6c\u6362\u5b57\u8282\u5e8f&#xff1a;<\/p>\n<p>ntohs<br \/>\nntohl<\/p>\n<p>\u534f\u8bae\u89e3\u6790\u524d\u5fc5\u987b\u68c0\u67e5 caplen&#xff0c;\u4e0d\u80fd\u8ba9\u77ed\u5305\u6216\u7578\u5f62\u5305\u9020\u6210\u8d8a\u754c\u8bfb\u53d6\u3002<\/p>\n<h4>11. \u89e3\u6790 TCP\u3001UDP\u3001ARP\u3001ICMP \u548c IGMP<\/h4>\n<p>\u5efa\u8bae\u6309\u4ee5\u4e0b\u987a\u5e8f\u5b9e\u73b0&#xff1a;<\/p>\n<p>UDP<br \/>\n\u2192 TCP<br \/>\n\u2192 ICMP<br \/>\n\u2192 ARP<br \/>\n\u2192 IGMP<\/p>\n<p>TCP \u81f3\u5c11\u89e3\u6790&#xff1a;<\/p>\n<ul>\n<li>\u6e90\u7aef\u53e3\u3001\u76ee\u7684\u7aef\u53e3<\/li>\n<li>\u5e8f\u5217\u53f7\u3001\u786e\u8ba4\u53f7<\/li>\n<li>\u9996\u90e8\u957f\u5ea6<\/li>\n<li>SYN\u3001ACK\u3001FIN\u3001RST\u3001PSH\u3001URG<\/li>\n<li>\u5e94\u7528\u5c42\u8f7d\u8377\u504f\u79fb<\/li>\n<\/ul>\n<p>UDP \u89e3\u6790\u7aef\u53e3\u3001\u957f\u5ea6\u548c\u8f7d\u8377\u3002ARP \u89e3\u6790\u8bf7\u6c42\u3001\u5e94\u7b54\u548c\u53d1\u9001\u65b9\/\u76ee\u6807 MAC\u3001IP\u3002ICMP \u8bc6\u522b Echo Request \u548c Echo Reply\u3002IGMP \u53ef\u4ee5\u5148\u5904\u7406\u5e38\u89c1\u6210\u5458\u5173\u7cfb\u62a5\u6587\u3002<\/p>\n<p>\u547d\u4ee4\u884c\u8f93\u51fa\u793a\u4f8b&#xff1a;<\/p>\n<p>[1] 10.0.0.1:50000 -&gt; 10.0.0.2:80 TCP<br \/>\n[2] 10.0.0.1 -&gt; 10.0.0.2 ICMP Echo Request<br \/>\n[3] Who has 10.0.0.20? Tell 10.0.0.10<\/p>\n<h4>12. \u5206\u6790 HTTP \u6216 FTP<\/h4>\n<p>\u9009\u62e9 HTTP \u4f5c\u4e3a\u91cd\u70b9\u5e94\u7528\u5c42\u534f\u8bae\u3002<\/p>\n<p>\u5728 TCP \u8f7d\u8377\u4e2d\u68c0\u67e5&#xff1a;<\/p>\n<p>GET \/<br \/>\nPOST \/<br \/>\nHEAD \/<br \/>\nHTTP\/<\/p>\n<p>\u53ef\u4ee5\u63d0\u53d6&#xff1a;<\/p>\n<ul>\n<li>\u8bf7\u6c42\u65b9\u6cd5<\/li>\n<li>URI<\/li>\n<li>Host<\/li>\n<li>Content-Type<\/li>\n<li>HTTP \u72b6\u6001\u7801<\/li>\n<\/ul>\n<p>FTP \u5219\u53ef\u4ee5\u5148\u5206\u6790 21 \u7aef\u53e3\u7684\u547d\u4ee4\u548c\u54cd\u5e94\u9996\u884c\u3002<\/p>\n<p>\u8fd9\u4e2a\u9636\u6bb5\u53ea\u5206\u6790\u5355\u4e2a\u6570\u636e\u5305\u4e2d\u7684\u5e94\u7528\u5c42\u6587\u672c&#xff0c;\u4e0d\u8981\u6c42\u7acb\u5373\u5b9e\u73b0\u5b8c\u6574 HTTP \u6d41\u89e3\u6790\u3002<\/p>\n<h4>13. \u52a0\u5165\u591a\u7ebf\u7a0b GUI<\/h4>\n<p>GUI \u5efa\u8bae\u5148\u4f7f\u7528 Win32&#xff0c;\u907f\u514d\u5f15\u5165 MFC \u6216 Qt \u7684\u989d\u5916\u914d\u7f6e\u3002<\/p>\n<p>\u754c\u9762\u5927\u81f4\u5206\u4e3a&#xff1a;<\/p>\n<p>\u9876\u90e8&#xff1a;\u7f51\u5361\u3001\u6355\u83b7\u8fc7\u6ee4\u3001\u5f00\u59cb\u3001\u505c\u6b62<br \/>\n\u5de6\u4fa7&#xff1a;\u5feb\u6377\u8fc7\u6ee4\u548c\u5b9e\u65f6\u7edf\u8ba1<br \/>\n\u4e2d\u95f4&#xff1a;\u6570\u636e\u5305\u5217\u8868<br \/>\n\u53f3\u4fa7\u4e0b\u65b9&#xff1a;\u534f\u8bae\u8be6\u60c5\u3001\u5341\u516d\u8fdb\u5236\u3001\u4f1a\u8bdd\u7edf\u8ba1<\/p>\n<p>\u6355\u83b7\u7ebf\u7a0b\u53ea\u8d1f\u8d23\u8bfb\u53d6\u6570\u636e\u5305\u3002\u6570\u636e\u89e3\u6790\u540e\u901a\u8fc7\u6d88\u606f\u4ea4\u7ed9\u4e3b\u7ebf\u7a0b&#xff1a;<\/p>\n<p>PostMessage(hWnd, WM_APP_PACKET, 0, (LPARAM)packet);<\/p>\n<p>\u4e0d\u8981\u5728\u6355\u83b7\u7ebf\u7a0b\u4e2d\u76f4\u63a5\u64cd\u4f5c\u7a97\u53e3\u63a7\u4ef6\u3002<\/p>\n<p>\u9ad8\u6d41\u91cf\u4e0b\u4e0d\u8981\u6bcf\u4e2a\u5305\u53d1\u9001\u4e00\u6b21\u6d88\u606f&#xff0c;\u53ef\u4ee5\u6bcf 64 \u4e2a\u5305\u7ec4\u6210\u4e00\u6279\u3002\u5426\u5219\u6d88\u606f\u961f\u5217\u4f1a\u5806\u79ef&#xff0c;\u505c\u6b62\u6309\u94ae\u53ef\u80fd\u5f88\u4e45\u624d\u54cd\u5e94\u3002<\/p>\n<h4>14. \u5b9e\u73b0\u6355\u83b7\u540e\u663e\u793a\u8fc7\u6ee4<\/h4>\n<p>\u6355\u83b7\u8fc7\u6ee4\u548c\u663e\u793a\u8fc7\u6ee4\u8981\u5206\u6210\u4e24\u4e2a\u8f93\u5165\u6846\u3002<\/p>\n<p>\u4f8b\u5982&#xff1a;<\/p>\n<p>BPF \u6355\u83b7\u8fc7\u6ee4&#xff1a;icmp<br \/>\n\u663e\u793a\u8fc7\u6ee4&#xff1a;tcp and tcp.port &#061;&#061; 80<\/p>\n<p>\u663e\u793a\u8fc7\u6ee4\u53ea\u6539\u53d8\u5df2\u6355\u83b7\u7684\u6570\u636e\u5305\u5217\u8868&#xff0c;\u4e0d\u5f71\u54cd pcapng \u6587\u4ef6\u3002<\/p>\n<p>\u53ef\u4ee5\u5148\u5b9e\u73b0\u8fd9\u4e9b\u6761\u4ef6&#xff1a;<\/p>\n<p>icmp<br \/>\ntcp<br \/>\nudp<br \/>\narp<br \/>\nip.addr &#061;&#061; 192.168.1.10<br \/>\ntcp.port &#061;&#061; 80<br \/>\nudp.port &#061;&#061; 53<br \/>\nframe.len &gt; 100<\/p>\n<p>\u518d\u589e\u52a0 and\u3001or\u3001not \u548c\u62ec\u53f7\u3002<\/p>\n<p>\u201c\u4ec5\u6b64\u4f1a\u8bdd\u201d\u6309\u94ae\u53ef\u4ee5\u6839\u636e\u5f53\u524d\u6570\u636e\u5305\u81ea\u52a8\u751f\u6210\u5730\u5740\u548c\u7aef\u53e3\u6761\u4ef6\u3002<\/p>\n<h4>15. \u4fdd\u5b58 pcap \u6216 pcapng<\/h4>\n<p>\u7b2c\u4e00\u7248\u53ef\u4ee5\u76f4\u63a5\u4f7f\u7528 libpcap \u4fdd\u5b58\u7ecf\u5178 pcap&#xff1a;<\/p>\n<p>pcap_dump_open<br \/>\npcap_dump<br \/>\npcap_dump_close<\/p>\n<p>\u540e\u7eed\u5b9e\u73b0 pcapng \u65f6&#xff0c;\u9700\u8981\u5199\u5165&#xff1a;<\/p>\n<ul>\n<li>Section Header Block<\/li>\n<li>Interface Description Block<\/li>\n<li>Enhanced Packet Block<\/li>\n<\/ul>\n<p>\u4fdd\u5b58\u540e\u5148\u7528 capinfos \u68c0\u67e5\u6587\u4ef6&#xff1a;<\/p>\n<p>capinfos capture.pcapng<\/p>\n<p>\u7136\u540e\u76f4\u63a5\u7528 Wireshark \u6253\u5f00\u3002\u5982\u679c Wireshark \u80fd\u6b63\u5e38\u8bfb\u53d6\u6570\u636e\u5305\u6570\u91cf\u548c\u65f6\u95f4\u6233&#xff0c;\u8bf4\u660e\u6587\u4ef6\u7ed3\u6784\u57fa\u672c\u6b63\u786e\u3002<\/p>\n<h4>16. \u5b9e\u73b0 TCP \u4f1a\u8bdd\u548c Follow Stream<\/h4>\n<p>TCP Follow Stream \u4e0d\u662f\u7b80\u5355\u62fc\u63a5\u8f7d\u8377\u3002<\/p>\n<p>\u9700\u8981\u5904\u7406&#xff1a;<\/p>\n<ul>\n<li>\u53cc\u5411 TCP \u8fde\u63a5<\/li>\n<li>\u5e8f\u5217\u53f7<\/li>\n<li>\u4e71\u5e8f\u6bb5<\/li>\n<li>\u91cd\u4f20\u6bb5<\/li>\n<li>\u90e8\u5206\u91cd\u53e0<\/li>\n<li>\u5e8f\u5217\u53f7\u56de\u7ed5<\/li>\n<\/ul>\n<p>\u7a0b\u5e8f\u53ef\u4ee5\u6309\u4e24\u4e2a\u7aef\u70b9\u5efa\u7acb\u4f1a\u8bdd&#xff0c;\u5206\u522b\u4fdd\u5b58\u4e24\u4e2a\u65b9\u5411\u7684\u6570\u636e\u3002\u9047\u5230\u91cd\u590d\u6bb5\u65f6\u8df3\u8fc7&#xff0c;\u9047\u5230\u4e71\u5e8f\u6bb5\u65f6\u8fdb\u5165\u5f85\u5904\u7406\u7f13\u5b58\u3002<\/p>\n<p>\u6d41\u5185\u5bb9\u4e0d\u80fd\u65e0\u9650\u589e\u957f\u3002\u53ef\u4ee5\u9650\u5236\u6bcf\u4e2a\u65b9\u5411\u6700\u591a\u4fdd\u7559 1 MB&#xff0c;\u540c\u65f6\u8bbe\u7f6e\u5168\u5c40\u5185\u5b58\u4e0a\u9650\u3002<\/p>\n<p>\u660e\u6587\u6587\u672c\u76f4\u63a5\u663e\u793a\u3002TLS\u3001\u538b\u7f29\u6570\u636e\u548c\u4e8c\u8fdb\u5236\u5185\u5bb9\u663e\u793a\u5341\u516d\u8fdb\u5236\u9884\u89c8&#xff0c;\u4e0d\u8981\u5f3a\u884c\u5f53\u4f5c\u6587\u672c\u5c55\u793a\u3002<\/p>\n<h4>17. \u6d4b\u8bd5\u548c Wireshark \u5bf9\u6bd4<\/h4>\n<p>\u771f\u5b9e\u6d41\u91cf\u6309\u4ee5\u4e0b\u987a\u5e8f\u6d4b\u8bd5&#xff1a;<\/p>\n<p>ICMP<br \/>\n\u2192 ARP<br \/>\n\u2192 DNS<br \/>\n\u2192 TCP<br \/>\n\u2192 HTTP<br \/>\n\u2192 Follow Stream<\/p>\n<p>\u4fdd\u5b58 pcapng \u540e&#xff0c;\u7528 Wireshark \u6253\u5f00\u540c\u4e00\u4e2a\u6587\u4ef6&#xff0c;\u5bf9\u6bd4&#xff1a;<\/p>\n<ul>\n<li>\u6e90\u3001\u76ee\u7684 MAC<\/li>\n<li>\u6e90\u3001\u76ee\u7684 IP<\/li>\n<li>\u534f\u8bae<\/li>\n<li>\u6e90\u3001\u76ee\u7684\u7aef\u53e3<\/li>\n<li>\u6570\u636e\u5305\u957f\u5ea6<\/li>\n<li>TCP \u6807\u5fd7\u4f4d<\/li>\n<li>ICMP \u7c7b\u578b<\/li>\n<li>\u539f\u59cb\u8f7d\u8377<\/li>\n<\/ul>\n<p>Wireshark \u4e2d\u9009\u62e9&#xff1a;<\/p>\n<p>Follow \u2192 TCP Stream \u2192 Hex Dump<\/p>\n<p>\u5c31\u80fd\u5bf9\u6bd4\u540c\u4e00\u4e2a TCP \u6d41\u7684\u5341\u516d\u8fdb\u5236\u5185\u5bb9\u3002<\/p>\n<p>\u7406&#xff1a;<\/p>\n<ul>\n<li>\u53cc\u5411 TCP \u8fde\u63a5<\/li>\n<li>\u5e8f\u5217\u53f7<\/li>\n<li>\u4e71\u5e8f\u6bb5<\/li>\n<li>\u91cd\u4f20\u6bb5<\/li>\n<li>\u90e8\u5206\u91cd\u53e0<\/li>\n<li>\u5e8f\u5217\u53f7\u56de\u7ed5<\/li>\n<\/ul>\n<p>\u7a0b\u5e8f\u53ef\u4ee5\u6309\u4e24\u4e2a\u7aef\u70b9\u5efa\u7acb\u4f1a\u8bdd&#xff0c;\u5206\u522b\u4fdd\u5b58\u4e24\u4e2a\u65b9\u5411\u7684\u6570\u636e\u3002\u9047\u5230\u91cd\u590d\u6bb5\u65f6\u8df3\u8fc7&#xff0c;\u9047\u5230\u4e71\u5e8f\u6bb5\u65f6\u8fdb\u5165\u5f85\u5904\u7406\u7f13\u5b58\u3002<\/p>\n<p>\u6d41\u5185\u5bb9\u4e0d\u80fd\u65e0\u9650\u589e\u957f\u3002\u53ef\u4ee5\u9650\u5236\u6bcf\u4e2a\u65b9\u5411\u6700\u591a\u4fdd\u7559 1 MB&#xff0c;\u540c\u65f6\u8bbe\u7f6e\u5168\u5c40\u5185\u5b58\u4e0a\u9650\u3002<\/p>\n<p>\u660e\u6587\u6587\u672c\u76f4\u63a5\u663e\u793a\u3002TLS\u3001\u538b\u7f29\u6570\u636e\u548c\u4e8c\u8fdb\u5236\u5185\u5bb9\u663e\u793a\u5341\u516d\u8fdb\u5236\u9884\u89c8&#xff0c;\u4e0d\u8981\u5f3a\u884c\u5f53\u4f5c\u6587\u672c\u5c55\u793a\u3002<\/p>\n<h4>17. \u6d4b\u8bd5\u548c Wireshark \u5bf9\u6bd4<\/h4>\n<p>\u771f\u5b9e\u6d41\u91cf\u6309\u4ee5\u4e0b\u987a\u5e8f\u6d4b\u8bd5&#xff1a;<\/p>\n<p>ICMP<br \/>\n\u2192 ARP<br \/>\n\u2192 DNS<br \/>\n\u2192 TCP<br \/>\n\u2192 HTTP<br \/>\n\u2192 Follow Stream<\/p>\n<p>\u4fdd\u5b58 pcapng \u540e&#xff0c;\u7528 Wireshark \u6253\u5f00\u540c\u4e00\u4e2a\u6587\u4ef6&#xff0c;\u5bf9\u6bd4&#xff1a;<\/p>\n<ul>\n<li>\u6e90\u3001\u76ee\u7684 MAC<\/li>\n<li>\u6e90\u3001\u76ee\u7684 IP<\/li>\n<li>\u534f\u8bae<\/li>\n<li>\u6e90\u3001\u76ee\u7684\u7aef\u53e3<\/li>\n<li>\u6570\u636e\u5305\u957f\u5ea6<\/li>\n<li>TCP \u6807\u5fd7\u4f4d<\/li>\n<li>ICMP \u7c7b\u578b<\/li>\n<li>\u539f\u59cb\u8f7d\u8377<\/li>\n<\/ul>\n<p>Wireshark \u4e2d\u9009\u62e9&#xff1a;<\/p>\n<p>Follow \u2192 TCP Stream \u2192 Hex Dump<\/p>\n<p>\u5c31\u80fd\u5bf9\u6bd4\u540c\u4e00\u4e2a TCP \u6d41\u7684\u5341\u516d\u8fdb\u5236\u5185\u5bb9\u3002<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261026034041-6adecbb9c8824.png\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u505a\u7f51\u7edc\u534f\u8bae\u5b9e\u9a8c\u65f6&#xff0c;\u6700\u76f4\u63a5\u7684\u65b9\u6848\u662f\u6253\u5f00 Wireshark&#xff0c;\u9009\u62e9\u4e00\u4e2a\u7f51\u5361&#xff0c;\u770b\u7740\u6570\u636e\u5305\u6eda\u8fc7\u5c4f\u5e55\u3002\u5de5\u5177\u5f88\u597d\u7528&#xff0c;\u4f46\u5b83\u4e0d\u4f1a\u89e3\u91ca\u4e00\u4e2a\u6570\u636e\u5305\u600e\u6837\u4ece\u7f51\u5361\u8fdb\u5165\u7a0b\u5e8f&#xff0c;\u600e\u6837\u88ab\u8bc6\u522b\u6210 IPv4&#xff0c;\u53c8\u600e\u6837\u53d8\u6210\u534f\u8bae\u6811\u548c\u5341\u516d\u8fdb\u5236\u89c6\u56fe\u3002<br \/>\n\u6211\u60f3\u628a\u8fd9\u4e2a\u8fc7\u7a0b\u5b8c\u6574\u8d70\u4e00\u904d&#xff0c;\u4e8e\u662f\u7528 C17\u3001Win32 \u548c Npcap \u505a\u4e86\u4e00\u4e2a\u8f7b\u91cf\u7f51\u7edc\u5206\u6790\u5668 NetObserver\u3002<br \/>\n\u9879\u76ee\u6ca1\u6709\u8bd5\u56fe\u590d\u523b Wireshark\u3002\u5b83\u7684\u76ee\u6807\u66f4\u5177\u4f53&amp;#x<\/p>\n","protected":false},"author":2,"featured_media":118130,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[868,149,50,78,122],"topic":[],"class_list":["post-118137","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-868","tag-windows","tag-50","tag-78","tag-122"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4ece\u96f6\u5b9e\u73b0\u4e00\u4e2a Windows \u7f51\u7edc\u55c5\u63a2\u5668\uff08AI\u8d4b\u80fd\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/118137.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4ece\u96f6\u5b9e\u73b0\u4e00\u4e2a Windows \u7f51\u7edc\u55c5\u63a2\u5668\uff08AI\u8d4b\u80fd\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u505a\u7f51\u7edc\u534f\u8bae\u5b9e\u9a8c\u65f6&#xff0c;\u6700\u76f4\u63a5\u7684\u65b9\u6848\u662f\u6253\u5f00 Wireshark&#xff0c;\u9009\u62e9\u4e00\u4e2a\u7f51\u5361&#xff0c;\u770b\u7740\u6570\u636e\u5305\u6eda\u8fc7\u5c4f\u5e55\u3002\u5de5\u5177\u5f88\u597d\u7528&#xff0c;\u4f46\u5b83\u4e0d\u4f1a\u89e3\u91ca\u4e00\u4e2a\u6570\u636e\u5305\u600e\u6837\u4ece\u7f51\u5361\u8fdb\u5165\u7a0b\u5e8f&#xff0c;\u600e\u6837\u88ab\u8bc6\u522b\u6210 IPv4&#xff0c;\u53c8\u600e\u6837\u53d8\u6210\u534f\u8bae\u6811\u548c\u5341\u516d\u8fdb\u5236\u89c6\u56fe\u3002 \u6211\u60f3\u628a\u8fd9\u4e2a\u8fc7\u7a0b\u5b8c\u6574\u8d70\u4e00\u904d&#xff0c;\u4e8e\u662f\u7528 C17\u3001Win32 \u548c Npcap \u505a\u4e86\u4e00\u4e2a\u8f7b\u91cf\u7f51\u7edc\u5206\u6790\u5668 NetObserver\u3002 \u9879\u76ee\u6ca1\u6709\u8bd5\u56fe\u590d\u523b Wireshark\u3002\u5b83\u7684\u76ee\u6807\u66f4\u5177\u4f53&amp;#x\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/118137.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-26T03:40:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261026034040-6adecbb81215c.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/118137.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/118137.html\",\"name\":\"\u4ece\u96f6\u5b9e\u73b0\u4e00\u4e2a Windows \u7f51\u7edc\u55c5\u63a2\u5668\uff08AI\u8d4b\u80fd\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-10-26T03:40:43+00:00\",\"dateModified\":\"2026-10-26T03:40:43+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/118137.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/118137.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/118137.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4ece\u96f6\u5b9e\u73b0\u4e00\u4e2a Windows \u7f51\u7edc\u55c5\u63a2\u5668\uff08AI\u8d4b\u80fd\uff09\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u4ece\u96f6\u5b9e\u73b0\u4e00\u4e2a Windows \u7f51\u7edc\u55c5\u63a2\u5668\uff08AI\u8d4b\u80fd\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/118137.html","og_locale":"zh_CN","og_type":"article","og_title":"\u4ece\u96f6\u5b9e\u73b0\u4e00\u4e2a Windows \u7f51\u7edc\u55c5\u63a2\u5668\uff08AI\u8d4b\u80fd\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u505a\u7f51\u7edc\u534f\u8bae\u5b9e\u9a8c\u65f6&#xff0c;\u6700\u76f4\u63a5\u7684\u65b9\u6848\u662f\u6253\u5f00 Wireshark&#xff0c;\u9009\u62e9\u4e00\u4e2a\u7f51\u5361&#xff0c;\u770b\u7740\u6570\u636e\u5305\u6eda\u8fc7\u5c4f\u5e55\u3002\u5de5\u5177\u5f88\u597d\u7528&#xff0c;\u4f46\u5b83\u4e0d\u4f1a\u89e3\u91ca\u4e00\u4e2a\u6570\u636e\u5305\u600e\u6837\u4ece\u7f51\u5361\u8fdb\u5165\u7a0b\u5e8f&#xff0c;\u600e\u6837\u88ab\u8bc6\u522b\u6210 IPv4&#xff0c;\u53c8\u600e\u6837\u53d8\u6210\u534f\u8bae\u6811\u548c\u5341\u516d\u8fdb\u5236\u89c6\u56fe\u3002 \u6211\u60f3\u628a\u8fd9\u4e2a\u8fc7\u7a0b\u5b8c\u6574\u8d70\u4e00\u904d&#xff0c;\u4e8e\u662f\u7528 C17\u3001Win32 \u548c Npcap \u505a\u4e86\u4e00\u4e2a\u8f7b\u91cf\u7f51\u7edc\u5206\u6790\u5668 NetObserver\u3002 \u9879\u76ee\u6ca1\u6709\u8bd5\u56fe\u590d\u523b Wireshark\u3002\u5b83\u7684\u76ee\u6807\u66f4\u5177\u4f53&amp;#x","og_url":"https:\/\/www.wsisp.com\/helps\/118137.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-10-26T03:40:43+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261026034040-6adecbb81215c.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/118137.html","url":"https:\/\/www.wsisp.com\/helps\/118137.html","name":"\u4ece\u96f6\u5b9e\u73b0\u4e00\u4e2a Windows \u7f51\u7edc\u55c5\u63a2\u5668\uff08AI\u8d4b\u80fd\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-10-26T03:40:43+00:00","dateModified":"2026-10-26T03:40:43+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/118137.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/118137.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/118137.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u4ece\u96f6\u5b9e\u73b0\u4e00\u4e2a Windows \u7f51\u7edc\u55c5\u63a2\u5668\uff08AI\u8d4b\u80fd\uff09"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/118137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=118137"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/118137\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/118130"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=118137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=118137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=118137"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=118137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}