maemo.org - Talk
Page 2 of 2 1 2
Show 40 post(s) from this thread on one page

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Applications (https://talk.maemo.org/forumdisplay.php?f=41)
-   -   NetDiscover on N900 (Network Reconnaissance, ARP) (https://talk.maemo.org/showthread.php?t=63772)

hawaii 2010-10-21 15:09
Re: NetDiscover on N900 (Network Reconnaissance, ARP)
 
The error you posted is due to libnet. What they are referring to as layer 0x335, is not supported.

I'm not sure what gprs0 link spec is - the easiest way to fix this would be to bridge a tun/tap interface to it to get a layer 3-2 device to bind to with netdiscover.

egoshin 2010-10-21 19:49
Re: NetDiscover on N900 (Network Reconnaissance, ARP)
 
Quote:
Originally Posted by hawaii (Post 847205)
The error you posted is due to libnet. What they are referring to as layer 0x335, is not supported.

I'm not sure what gprs0 link spec is - the easiest way to fix this would be to bridge a tun/tap interface to it to get a layer 3-2 device to bind to with netdiscover.
However, the binary from 'colin.stephane' (previous page) does work with gprs0... no any real output, of course. It seems that NetDiscover walks through all subnets but no response from T-Mobile.

hawaii 2010-10-21 21:51
Re: NetDiscover on N900 (Network Reconnaissance, ARP)
 
The svn release removes libnet dependency from ifaces.c, ifaces.h and main.c - and puts it onto libpcap.

hawaii 2010-10-21 22:16
Re: NetDiscover on N900 (Network Reconnaissance, ARP)
 
1 Attachment(s)
As a side note - if you're interested in dumping RAW data from ANY network interface, regardless of link type, see attached. This is stupid useful, it's an absolute necessity for me.

binary only, and it will attach to the first active interface or one supplied through `-i $INTERFACE`.

colin.stephane 2010-10-21 22:39
Re: NetDiscover on N900 (Network Reconnaissance, ARP)
 
Quote:
Originally Posted by mail_e36 (Post 847096)
colin.stephane,

Does your backported version support network interfaces other than wlan0?

Thank you
Hi,

Yes, it work with phonet0 for example but doesn't report any MAC or IP since this interface is not connected ...

I have also compiled the package for x86 to be able to use it on many interfaces on Firewall I have build at office, something like bonding + vlan with name like 'bond0.200:FWB2'

To be clear, I have made the x86 package before the armel one, because I needed the new version to be able to use it on my Firewall interfaces ...

A++

egoshin 2010-10-21 22:45
Re: NetDiscover on N900 (Network Reconnaissance, ARP)
 
Quote:
Originally Posted by hawaii (Post 847486)
As a side note - if you're interested in dumping RAW data from ANY network interface, regardless of link type, see attached. This is stupid useful, it's an absolute necessity for me.

binary only, and it will attach to the first active interface or one supplied through `-i $INTERFACE`.
What is the difference to tcpdump?

mail_e36 2010-10-22 13:51
Re: NetDiscover on N900 (Network Reconnaissance, ARP)
 
Thanks for your input colin.stephane and Hawaii, I will try colin.stephane's binary today to see how it goes.

Quote:
Originally Posted by colin.stephane (Post 847503)
Hi,

Yes, it work with phonet0 for example but doesn't report any MAC or IP since this interface is not connected ...

I have also compiled the package for x86 to be able to use it on many interfaces on Firewall I have build at office, something like bonding + vlan with name like 'bond0.200:FWB2'

To be clear, I have made the x86 package before the armel one, because I needed the new version to be able to use it on my Firewall interfaces ...

A++

aneira 2010-12-27 16:19
Re: NetDiscover on N900 (Network Reconnaissance, ARP)
 
Quote:
Originally Posted by hawaii (Post 847486)
As a side note - if you're interested in dumping RAW data from ANY network interface, regardless of link type, see attached. This is stupid useful, it's an absolute necessity for me.

binary only, and it will attach to the first active interface or one supplied through `-i $INTERFACE`.
Could you please be more verbose?
Do you have the code? what is the difference between rawdump and tcpdump?
I run ./rawdump -i phonet0 and seems to capture my first interface (wlan0). Do you kill it with Control-C??

Thanks and Regards.

Alvaro


All times are GMT. The time now is 11:41.
Page 2 of 2 1 2
Show 40 post(s) from this thread on one page

vBulletin® Version 3.8.8