golang抓取tcp包的实现方式

go get -u github.com/google/gopacket

package main

import (
    "fmt"
    "log"
    "os"
    "time"

    "github.com/google/gopacket"
    "github.com/google/gopacket/pcap"
)

func main() {
    // 获取接口名称，例如 "eth0" 或 "en0"
    device := os.args[1]

    // 打开设备
    handle, err := pcap.openlive(device, 1600, true, pcap.blockforever)
    if err != nil {
        log.fatal(err)
    }
    defer handle.close()

    // 设置过滤规则，只抓取 tcp 数据包
    err = handle.setbpffilter("tcp")
    if err != nil {
        log.fatal(err)
    }

    // 开始捕获数据包
    packetsource := gopacket.newpacketsource(handle, handle.linktype())
    for packet := range packetsource.packets() {
        // 获取 tcp 数据包
        tcplayer := packet.layer(gopacket.layertypetcp)
        if tcplayer != nil {
            tcppacket := tcplayer.(*gopacket.tcp)

            // 打印源地址、源端口、目标地址、目标端口
            fmt.printf("源地址: %s:%d\n", packet.networklayer().networkflow().src().string(), tcppacket.srcport)
            fmt.printf("目标地址: %s:%d\n", packet.networklayer().networkflow().dst().string(), tcppacket.dstport)
            
            // 打印 tcp 数据内容
            fmt.println("tcp 数据:", string(tcppacket.payload))
        }
    }

    // 捕获一段时间后停止抓包
    time.sleep(10 * time.second)
    handle.close()
}

```shell
go run tcp_packet_capture.go <接口名称>
```