Urlsnarf crashes after start

Bug #1323024 reported by JP
44
This bug affects 8 people
Affects Status Importance Assigned to Milestone
dsniff (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Urlsnarf gives normal startup message then immediately stops.
"urlsnarf: listening on wlan2 [tcp port 80 or port 8080 or port 3128]"

dmesg shows:
[472236.869398] device wlan2 entered promiscuous mode
[472236.961365] device wlan2 left promiscuous mode

Description: Ubuntu 14.04 LTS
Release: 14.04

dsniff:
  Installed: 2.4b1+debian-22.1
  Candidate: 2.4b1+debian-22.1
  Version table:
 *** 2.4b1+debian-22.1 0

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in dsniff (Ubuntu):
status: New → Confirmed
Revision history for this message
Brandon Allen (tap3w0rm) wrote :

When I run urlsnarf it returns me to the command line

root@SynLife:~# urlsnarf -i eth0
urlsnarf: listening on eth0 [tcp port 80 or port 8080 or port 3128]
root@SynLife:~#

Here is my version info:
root@SynLife:~# urlsnarf -?
Version: 2.4
Usage: urlsnarf [-n] [-i interface | -p pcapfile] [[-v] pattern [expression]]
root@SynLife:~#

Revision history for this message
Jay R. Wren (evarlast) wrote :

Notice: it is not a crash.

$ sudo urlsnarf
urlsnarf: listening on eth0 [tcp port 80 or port 8080 or port 3128]
$ echo $?
0

I looked at the source. The pcap timeout of zero once represented "no timeout" but in newer libpcap the pcap_set_timeout man page says:

       The behavior, if the timeout isn't specified, is undefined. We recommend always setting
       the timeout to a non-zero value.

The patch in the package 23_urlsnarf_timestamp.patch looks to be the culprit.

Revision history for this message
Jay R. Wren (evarlast) wrote :

I attempted a PPA with the bad patch removed from quilt.

https://launchpad.net/~evarlast/+archive/ubuntu/dsniff

Revision history for this message
alex (a-castanofernandez) wrote :

Hi Jay,

I am affraid that the PPA is empty:

https://launchpad.net/~evarlast/+archive/ubuntu/dsniff

 This PPA does not contain any packages yet. Find more information about how to upload packages in the PPA help page.

:D

Revision history for this message
Rafael Nonato (rafaeln) wrote :

Now Jay's PPA has a version of dsniff that works.

Revision history for this message
Raimund Specht (raimund-m) wrote :

I can confirm that the urlsnarf binary from Jay's PPA fixes this problem for me (amd64).

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.