[Linux] ettercap monitor

["Angel G. Polanco Rodriguez" <angel en tunku uady mx>]

Hola amigos,

ya realice algunas pruebas con el software que baje para linux,
el Ettercap, les envio un ejemplo de lo que hace el filtro resolviendo
DNS-ARP hacia una maquina X : (por si desean monitorear algo sospechoso)
---------------------------------------------------------------------------------

                         ****** Ettercap 0.6.2 ******
 
Source:148.209.12.35 (me automonitoree)

This plugin must be executed within a sniffing method or you 
will see only your DNS request... 

DNS spoofing... (press return to stop) 
---------------------------------------------------------------------------------
DNS activity [148.209.12.35:1033] --> [148.209.1.1:53] 
query [www.linux.com]    A (0x1)  ID: 0x9ca6 

DNS activity [148.209.1.1:53] --> [148.209.12.35:1033] 
answer [www.linux.com]    A (0x1)  ID: 0x9ca6 

-> CNAME (0x5) [www.linux.com] -> [linux.com] 
->     A (0x1) [linux.com] -> [64.28.67.103] 

DNS activity [148.209.12.35:1033] --> [148.209.1.1:53] 
query [www.bandmin.org]    A (0x1)  ID: 0x54fc 

DNS activity [148.209.12.35:1033] --> [148.209.1.1:53] 
query [www.bandmin.org]    A (0x1)  ID: 0x54fc 

DNS activity [148.209.12.35:1033] --> [148.209.1.1:53] 
query [www.qwkmon.com]    A (0x1)  ID: 0x977b 
---------------------------------------------------------------------------------

Saludos y que la pasen muy bien este fin de semana.

Angel Polanco Rodriguez
UADY



Lista de correo linux en linux net mx
Preguntas linux-owner en linux net mx
http://www.linux.net.mx/