eavesarp icon indicating copy to clipboard operation
eavesarp copied to clipboard

Sender-blacklist filtering

Open s0i37 opened this issue 4 years ago • 0 comments

Hello. I've found a bit unwanted behavior. Lets imagine situation. I have victim host which located in interested subnet and where I can't run eavesarp and attacker machine where I will run eavesarp in analyze passive mode. In this case I prefer run tcpdump.exe -i 1 -nn -w dump.pcap. Because of in analyze mode can't use active check -ar flag I need forcibly ask every host in subnet during capturing traffic like a ping 192.168.0.0/24. FInally, then I run eavesarp.py a -pfs dump.pcap --blacklist victim_ip all discovered hosts (via ping) will be shown grey color instead of white. It seems that --blacklist key prevent to filtering all packets of this host instead of filtering output results. Thank you.

s0i37 avatar Apr 30 '20 19:04 s0i37