Results 1 to 2 of 2

Thread: ettercap filter problem

Hybrid View

  1. #1
    Just burned their ISO
    Join Date
    Jan 2013
    Location
    italy
    Posts
    4

    Default ettercap filter problem

    Hi all,
    I am using
    BT5R3-KDE-32 and
    ettercap 0.7.4.1

    I have created a simple filter to see (for example) google HTML in plain text. To achive this goal I want to sosbtitute in HTTP header
    Accept-Encoding: gzip, deflate with
    Accept-Encoding: identity


    The filter was made just like this:

    if (ip.proto == TCP && search(DATA.data, "gzip") ) {
    replace("gzip", "identity");
    msg("gzip --> identity.\n");
    }

    if (ip.proto == TCP && search(DATA.data, "deflate") ) {
    replace("deflate", "identity");
    msg("deflate --> identity.\n");
    }

    if (ip.proto == TCP && search(DATA.data, "identity, identity") ) {
    replace("identity, identity", "identity");
    msg("double identity --> identity.\n");
    }



    In testing with BT5, I see the logging messages, and the packets
    are injected by Ettercap, but the original frames are not dropped. I
    validated this on the victim where he gets the original packets
    immediately followed by the Ettercap-modified packets. The follow-up
    packets are dropped by the victim as TCP retransmissions.

    I'm guessing this is due to something having changed in the kernel, but I'm not sure what it could be. I checked /sys/net/ipv4/ip_forward, but it is set to 0.

    Can anyone tell me what I have made wrong ?
    Thanks in advance.

  2. #2
    Just burned their ISO
    Join Date
    Jan 2013
    Location
    italy
    Posts
    4

    Default Re: ettercap filter problem

    Hi all,
    I have received no answer...
    so I don't know: nobady use ettercap filter ? I have done all correctly ?
    Do you need some more information ?

    Please tell me what I'm doing wrong ...
    Thank you in advance.

Similar Threads

  1. Ettercap filter problem replacing HTTP tags
    By krrunch in forum OLD Newbie Area
    Replies: 2
    Last Post: 12-04-2009, 07:58 PM
  2. Ettercap Image Filter Problem! HELP!
    By lostandconfused in forum OLD Newbie Area
    Replies: 1
    Last Post: 09-06-2009, 08:23 AM
  3. Help with ettercap filter
    By Tully in forum OLD Newbie Area
    Replies: 0
    Last Post: 02-25-2009, 09:46 AM
  4. ettercap filter problem
    By imported_pynstrom in forum OLD Newbie Area
    Replies: 3
    Last Post: 06-26-2008, 12:46 AM
  5. ettercap filter
    By Tex-Twil in forum OLD BackTrack v2.0 Final
    Replies: 28
    Last Post: 10-07-2007, 05:31 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •