Re: Extracting credentials from pcap

Also maybe ettercap does dates have you tried it?

http://ettercap.sourceforge.net/

dsniff is fantastic at pulling out various credentials but it doesn't
get the dates correct from pcap. When digging about the source code it
seems that dsniff just prints the current time/date when it finds a new
record. It doesn't even seem that libnids passes the pcap timestamp.


--
Brian Toovey
admin@xxxxxxxxxxxx
http://vulntrac.com

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------