"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "share/etter.filter.examples" between
ettercap-0.8.3.tar.gz and ettercap-0.8.3.1.tar.gz

About: ettercap is a multipurpose sniffer/interceptor/logger for switched LAN.

etter.filter.examples  (ettercap-0.8.3):etter.filter.examples  (ettercap-0.8.3.1)
skipping to change at line 97 skipping to change at line 97
# Modifying binary data by using external commands # Modifying binary data by using external commands
if (udp.dst == 53 && pcre_regex(DATA.data, ".*\x03com\x00.*")) { if (udp.dst == 53 && pcre_regex(DATA.data, ".*\x03com\x00.*")) {
log(DATA.data, "/tmp/payload"); log(DATA.data, "/tmp/payload");
drop(); drop();
execinject("/bin/sed 's/\x03com\x00/\x02my\x04page\x02de\x00/g' /tmp/payload" ); execinject("/bin/sed 's/\x03com\x00/\x02my\x04page\x02de\x00/g' /tmp/payload" );
udp.len += 7; udp.len += 7;
exec("/bin/rm /tmp/payload"); exec("/bin/rm /tmp/payload");
msg("faked"); msg("faked");
} }
if (udp.dst == 53 && pcre_regex(DATA.data, ".*\x03com\x00.*")) {
execreplace("/bin/sed 's/\x03com\x00/\x02my\x04page\x02de\x00/g'");
msg("faked");
}
# filter only a specific ip address # filter only a specific ip address
if (ip.src == '192.168.0.2') { if (ip.src == '192.168.0.2') {
drop(); drop();
} }
# do the same for IPv6 # do the same for IPv6
if (ipv6.src == '2001:db8::1') { if (ipv6.src == '2001:db8::1') {
drop(); drop();
} }
 End of changes. 1 change blocks. 
0 lines changed or deleted 5 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)