golang抓取tcp包的实现方式

go get -u github.com/google/gopacket

package main

import (
    "fmt"
    "log"
    "os"
    "time"

    "github.com/google/gopacket"
    "github.com/google/gopacket/pcap"
)

func main() {
    // 获取接口名称，例如 "eth0" 或 "en0"
    device := os.Args[1]

    // 打开设备
    handle, err := pcap.OpenLive(device, 1600, true, pcap.BlockForever)
    if err != nil {
        log.Fatal(err)
    }
    defer handle.Close()

    // 设置过滤规则，只抓取 TCP 数据包
    err = handle.SetBPFFilter("tcp")
    if err != nil {
        log.Fatal(err)
    }

    // 开始捕获数据包
    packetSource := gopacket.NewPacketSource(handle, handle.LinkType())
    for packet := range packetSource.Packets() {
        // 获取 TCP 数据包
        tcpLayer := packet.Layer(gopacket.LayerTypeTCP)
        if tcpLayer != nil {
            tcpPacket := tcpLayer.(*gopacket.TCP)

            // 打印源地址、源端口、目标地址、目标端口
            fmt.Printf("源地址: %s:%d\n", packet.NetworkLayer().NetworkFlow().Src().String(), tcpPacket.SrcPort)
            fmt.Printf("目标地址: %s:%d\n", packet.NetworkLayer().NetworkFlow().Dst().String(), tcpPacket.DstPort)
            
            // 打印 TCP 数据内容
            fmt.Println("TCP 数据:", string(tcpPacket.Payload))
        }
    }

    // 捕获一段时间后停止抓包
    time.Sleep(10 * time.Second)
    handle.Close()
}

```shell
go run tcp_packet_capture.go <接口名称>
```