Does not show passwords (regression because of (Debian) patch)

[Meluco]

Binary package hint: ettercap

'ettercap -T -q -M arp /victim1/ /victim2/' must show http or ftp passwords in screen, but there isn't.

'ettercap -T -Q -M arp /victim1/ /victim2/ -w /tmp/file.pcap' and then 'ettercap -T -q -r /tmp/file.pcap' do the same.

If I open /tmp/file.pcap with Whireshark and search password string manualy, I find it.

[Mark Doliner (thekingant)]

This might be caused by the patch from http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521857 The first proposed patch from the Debian ticket also exists in the Ubuntu package, and I believe it is incorrect. I'm seeing a similar problem to the one described by Meluco--ettercap's TCP analyzer is seemingly unable to capture or log traffic.

Making either of the changes suggested by the last few comments on the Debian ticket (change the int to either long or u_char) fix the problem for me. Although I wasn't able to test whether ettercap crashed, as I have not experienced the described crash myself.

[Gianfranco Costamagna (costamagnagianfranco)]

@Mark Doliner, could you explain better your solution?

is only changing from (int) to (long) ???

[Gianfranco Costamagna (costamagnagianfranco)]

This bug should be fixed in 0.7.3-2.1ubuntu2 (ubuntu Oneiric and Precise).

Could anybody give it a try?

[Meluco (daniel-banobre-dopico)]

El jue, 27-10-2011 a las 16:03 +0000, LocutusOfBorg escribió:

> This bug should be fixed in 0.7.3-2.1ubuntu2 (ubuntu Oneiric and
> Precise).

It's fixed in 1:0.7.3-2.1ubuntu1 (natty) x86_64.

>
> Could anybody give it a try?
>
> ** Also affects: ettercap (Debian) via
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521857
> Importance: Unknown
> Status: Unknown
>
> ** Tags added: verification-needed
>