PaulDotCom mailing list archives
wall of sheep software
From: james.mattson at gmail.com (James Mattson)
Date: Fri, 18 Sep 2009 17:58:03 -0700
Im a big fan of using tcpreplay, then using the usual tools like ettercap, driftnet, urlsnarf, etc... If its a wireless pcap, use airdecap-ng first... Has anyone given TCPextract a shot? It too looks like a good way to carve goodies from pcaps... -B0z0dcl0wn -----Original Message----- From: Robin Wood <dninja at gmail.com> Sent: Friday, September 18, 2009 3:41 PM To: PaulDotCom Security Weekly Mailing List <pauldotcom at mail.pauldotcom.com> Subject: Re: [Pauldotcom] wall of sheep software I've downloaded NetWitness and will give it a look through but I was more after something more like a script that would just run through and pull out incriminating information. Adrians script looks good but that is parsing ettercap output which I haven't got. I've just had a play with ngrep and got some POP3 details out so I might try scripting that. Robin 2009/9/18 Chris Bentley <chris.bentley at sky.com>:
You could always try splitting the pcap file, only problem being missing some interaction when analysing the files. http://www.ethereal.com/lists/ethereal-users/200511/msg00253.html 2009/9/18 Robert Miller <arch3angel at gmail.com>This will not make the "Wall of Shame" for you but for mining a cap file this is useful, however the free version has a 2gb capture limit http://www.netwitness.com/products/investigator.aspx This software helped me locate a bot running crazy on a satellite network really fast, just wish the company would buy ?the full version
Current thread:
- wall of sheep software, (continued)
- wall of sheep software Chris Bentley (Sep 18)
- wall of sheep software Chris Bentley (Sep 18)
- wall of sheep software Nick Baronian (Sep 18)
- wall of sheep software Adrian Crenshaw (Sep 18)
- wall of sheep software Chris Bentley (Sep 18)
- wall of sheep software Robert Miller (Sep 18)
- wall of sheep software Chris Bentley (Sep 18)
- wall of sheep software Robin Wood (Sep 18)
- wall of sheep software Chris Bentley (Sep 18)
- wall of sheep software PJ McGarvey (Sep 18)
- wall of sheep software John Strand (Sep 18)
- wall of sheep software infolookup at gmail.com (Sep 18)
- wall of sheep software James Mattson (Sep 18)
- wall of sheep software Ben Greenfield (Sep 21)
- wall of sheep software Will Metcalf (Sep 21)
- wall of sheep software Ben Greenfield (Sep 21)