Question

我使用此代码来获取打开的UDP端口和使用每个端口的应用程序。

DWORD (WINAPI *pGetExtendedUdpTable)(
  PVOID pUdpTable,
  PDWORD pdwSize,
  BOOL bOrder,
  ULONG ulAf,
  UDP_TABLE_CLASS TableClass,
  ULONG Reserved
);
    MIB_UDPTABLE_OWNER_PID *pUDPInfo;
    MIB_UDPROW_OWNER_PID *owner;
    DWORD size;
    DWORD dwResult;

    HMODULE hLib = LoadLibrary((LPCWSTR)"iphlpapi.dll");

    pGetExtendedUdpTable = (DWORD (WINAPI *)(PVOID,PDWORD,BOOL,ULONG,UDP_TABLE_CLASS,ULONG))
        GetProcAddress(hLib, "GetExtendedTcpTable");

    if ( !pGetExtendedUdpTable )
    {
        //printf("Could not load iphlpapi.dll. This application is for Windows XP SP2 and up.\n");

        return "Could not load iphlpapi.dll. This application is for Windows XP SP2 and up.\n";
    }

    dwResult = pGetExtendedUdpTable(NULL,       &size, false, AF_INET, (UDP_TABLE_CLASS)5, 0);
    pUDPInfo = (MIB_UDPTABLE_OWNER_PID*)malloc(size);
    dwResult = pGetExtendedUdpTable(pUDPInfo,   &size, false, AF_INET, (UDP_TABLE_CLASS)5, 0);
//
   if (dwResult != NO_ERROR)
    {
        printf("Couldn't get our IP table");

        return "Couldn't get our IP table";
    }
   for (DWORD dwLoop = 0; dwLoop < pUDPInfo->dwNumEntries; dwLoop++)
    {
        owner = &pUDPInfo->table[dwLoop];      
        ApplicationName = GetNameByPID(owner->dwOwningPid);
        OpenedPort = convertInt(ntohs(owner->dwLocalPort));
        LocalAdress = convertInt(ntohs(owner->dwLocalAddr));
   }

但是，我和netstat -ano的结果不一样。在我的代码中，我的端口0超过10次但在netstat命令中端口0不存在。

Answer 1

你到处都有UDP，但你要查询的功能是TCP（GetExtendedTcpTable）。

GetExtendedUdpTable和netstat结果之间的区别

1 个答案: