Urlsnarf crashes after start

Bug #1323024 reported by JP on 2014-05-25
This bug affects 8 people
Affects Status Importance Assigned to Milestone
dsniff (Ubuntu)

Bug Description

Urlsnarf gives normal startup message then immediately stops.
"urlsnarf: listening on wlan2 [tcp port 80 or port 8080 or port 3128]"

dmesg shows:
[472236.869398] device wlan2 entered promiscuous mode
[472236.961365] device wlan2 left promiscuous mode

Description: Ubuntu 14.04 LTS
Release: 14.04

  Installed: 2.4b1+debian-22.1
  Candidate: 2.4b1+debian-22.1
  Version table:
 *** 2.4b1+debian-22.1 0

Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in dsniff (Ubuntu):
status: New → Confirmed
Brandon Allen (tap3w0rm) wrote :

When I run urlsnarf it returns me to the command line

root@SynLife:~# urlsnarf -i eth0
urlsnarf: listening on eth0 [tcp port 80 or port 8080 or port 3128]

Here is my version info:
root@SynLife:~# urlsnarf -?
Version: 2.4
Usage: urlsnarf [-n] [-i interface | -p pcapfile] [[-v] pattern [expression]]

Jay R. Wren (evarlast) wrote :

Notice: it is not a crash.

$ sudo urlsnarf
urlsnarf: listening on eth0 [tcp port 80 or port 8080 or port 3128]
$ echo $?

I looked at the source. The pcap timeout of zero once represented "no timeout" but in newer libpcap the pcap_set_timeout man page says:

       The behavior, if the timeout isn't specified, is undefined. We recommend always setting
       the timeout to a non-zero value.

The patch in the package 23_urlsnarf_timestamp.patch looks to be the culprit.

Jay R. Wren (evarlast) wrote :

I attempted a PPA with the bad patch removed from quilt.


alex (a-castanofernandez) wrote :

Hi Jay,

I am affraid that the PPA is empty:


 This PPA does not contain any packages yet. Find more information about how to upload packages in the PPA help page.


Rafael Nonato (rafaeln) wrote :

Now Jay's PPA has a version of dsniff that works.

Raimund Specht (raimund-m) wrote :

I can confirm that the urlsnarf binary from Jay's PPA fixes this problem for me (amd64).

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers