Penetration Testing mailing list archives

Re: Extracting credentials from pcap


From: "Brian Toovey" <admin () vulntrac com>
Date: Mon, 17 Sep 2007 11:06:14 -0400

I am wondering if maybe the cleaned output of dsniff can then be used
as a filter in say ethereal or some other sniffer that can do reports?


dsniff is fantastic at pulling out various credentials but it doesn't
get the dates correct from pcap.  When digging about the source code it
seems that dsniff just prints the current time/date when it finds a new
record.  It doesn't even seem that libnids passes the pcap timestamp.



-- 
Brian Toovey
admin () vulntrac com
http://vulntrac.com

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: