View Full Version : ferret makes huge .pcap files

2013-05-18, 08:51
Hi all, after migrating to new hardware and to Kali instead of BT5, i managed that ferret sidejack tool began to reproduced a real huge pcap files (Gigabytes after some opened pages).
as i can see in hex, ferret dumps crazy amount of zeros.
the same problem appeared with two different wifi adapters

08:00.0 Network controller: Intel Corporation Centrino Wireless-N 2230 (rev c4)
Kernel driver in use: iwlwifi

07:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8101E/RTL8102E PCI Express Fast Ethernet controller (rev 05)
Kernel driver in use: r8169

any ideas?
ps. sorry for my poor english :o

2013-05-18, 09:32
I put a ticket in last month - no response yet.

2013-05-19, 19:22
ok, so i made a little ugly fix to be able to use hamster.
idea is to use tcpdump for sniffing and ferret in the file mode for generating hamster.txt log file.
just put ferret_fix.sh to the hamster dir and execute it manually when launching hamster: ./ferret_fix.sh wlan0
(and do not set interface in the hamster setting, because it will launch ferret in interface mode)


tcpdump -i $1 -w tcpdump.pcap &
while true
sleep 4
ferret -r tcpdump.pcap --hamster