"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "share/etter.filter.examples" between
ettercap-0.8.3.tar.gz and ettercap-0.8.3.1.tar.gz

About: ettercap is a multipurpose sniffer/interceptor/logger for switched LAN.

etter.filter.examples  (ettercap-0.8.3)	:	etter.filter.examples  (ettercap-0.8.3.1)
skipping to change at line 97		skipping to change at line 97
# Modifying binary data by using external commands		# Modifying binary data by using external commands
if (udp.dst == 53 && pcre_regex(DATA.data, ".*\x03com\x00.*")) {		if (udp.dst == 53 && pcre_regex(DATA.data, ".*\x03com\x00.*")) {
log(DATA.data, "/tmp/payload");		log(DATA.data, "/tmp/payload");
drop();		drop();
execinject("/bin/sed 's/\x03com\x00/\x02my\x04page\x02de\x00/g' /tmp/payload" );		execinject("/bin/sed 's/\x03com\x00/\x02my\x04page\x02de\x00/g' /tmp/payload" );
udp.len += 7;		udp.len += 7;
exec("/bin/rm /tmp/payload");		exec("/bin/rm /tmp/payload");
msg("faked");		msg("faked");
}		}
		if (udp.dst == 53 && pcre_regex(DATA.data, ".*\x03com\x00.*")) {
		execreplace("/bin/sed 's/\x03com\x00/\x02my\x04page\x02de\x00/g'");
		msg("faked");
		}
# filter only a specific ip address		# filter only a specific ip address
if (ip.src == '192.168.0.2') {		if (ip.src == '192.168.0.2') {
drop();		drop();
}		}
# do the same for IPv6		# do the same for IPv6
if (ipv6.src == '2001:db8::1') {		if (ipv6.src == '2001:db8::1') {
drop();		drop();
}		}
End of changes. 1 change blocks.
0 lines changed or deleted		5 lines changed or added

---