Results 1 to 2 of 2

Thread: Advanced EtterCap filtering

Hybrid View

  1. #1
    Just burned their ISO
    Join Date
    Jan 2013
    Posts
    2

    Default Advanced EtterCap filtering

    Hi Folks,

    I have a linux box with 2 nics. I'd like to run Ettercap as MiTM to apply a filter to change HTTP traffic passing through. Besided HTTP traffic, loads of multicast UDP traffic (software distribution) is passing through, so Ettercap's performance is really slow. Too slow to make it work this way..

    I've tried:

    - creating my own bridge on the linux machine (using brctl). Ettercap can sniff the traffic on the bridge but not change it.
    - apply a tcpdump-style filter to only let TCP (http) traffic run through ettercap. This does not work because ettercap needs IP's assigned to both nics, which is not the case when bridging..

    Can anyone help me out how to do this? Maybe it is possible to seperate TCP from UDP traffic and only let TCP trafic run through ettercap and let UDP traffic pass through BR0(my brctl bridge). I don't know how to do this..

  2. #2
    Just burned their ISO
    Join Date
    Jan 2013
    Posts
    2

    Default Re: Advanced EtterCap filtering

    Fixed my problem by using Netsed instead of Ettercap!

    Created BR0 and prevented http traffic from crossing the bridge, redirecting it to a local port instead using eb+iptables.. Netsed is listening on that port and forwarding to the original destination based on a set of rules. It is working perfectly!

Similar Threads

  1. WEP w/MAC filtering hacking on BT4
    By Mjolnir in forum Beginners Forum
    Replies: 1
    Last Post: 04-27-2010, 04:37 PM
  2. mac filtering need help
    By Doomsday51225 in forum OLD Newbie Area
    Replies: 0
    Last Post: 03-29-2009, 12:46 AM
  3. mac filtering
    By a-tom in forum OLD BackTrack 3 Final
    Replies: 1
    Last Post: 10-22-2008, 08:56 AM
  4. MAC address filtering
    By musik4u66 in forum OLD Newbie Area
    Replies: 4
    Last Post: 01-07-2008, 12:43 AM
  5. Network with MAC filtering, WPA-PSK, and AD...
    By m3thical in forum OLD Wireless
    Replies: 6
    Last Post: 12-31-2007, 12:33 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •