Re: Extracting credentials from pcap

From: Brian Toovey (admin@vulntrac.com)
Date: Mon Sep 17 2007 - 11:06:14 EDT


I am wondering if maybe the cleaned output of dsniff can then be used
as a filter in say ethereal or some other sniffer that can do reports?

>
> dsniff is fantastic at pulling out various credentials but it doesn't
> get the dates correct from pcap. When digging about the source code it
> seems that dsniff just prints the current time/date when it finds a new
> record. It doesn't even seem that libnids passes the pcap timestamp.

-- 
Brian Toovey
admin@vulntrac.com
http://vulntrac.com
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:07 EDT