eavesarp
eavesarp copied to clipboard
Sender-blacklist filtering
Hello.
I've found a bit unwanted behavior.
Lets imagine situation. I have victim
host which located in interested subnet and where I can't run eavesarp
and attacker
machine where I will run eavesarp
in analyze passive mode.
In this case I prefer run tcpdump.exe -i 1 -nn -w dump.pcap
. Because of in analyze mode can't use active check -ar
flag I need forcibly ask every host in subnet during capturing traffic like a ping 192.168.0.0/24.
FInally, then I run eavesarp.py a -pfs dump.pcap --blacklist victim_ip
all discovered hosts (via ping) will be shown grey color instead of white. It seems that --blacklist
key prevent to filtering all packets of this host instead of filtering output results.
Thank you.