ferret makes huge .pcap files

[3t3st3r]

Hi all, after migrating to new hardware and to Kali instead of BT5, i managed that ferret sidejack tool began to reproduced a real huge pcap files (Gigabytes after some opened pages).
as i can see in hex, ferret dumps crazy amount of zeros.
the same problem appeared with two different wifi adapters



08:00.0 Network controller: Intel Corporation Centrino Wireless-N 2230 (rev c4)
Kernel driver in use: iwlwifi

07:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8101E/RTL8102E PCI Express Fast Ethernet controller (rev 05)
Kernel driver in use: r8169


any ideas?
ps. sorry for my poor english :o

[Vulpi]

I put a ticket in last month - no response yet.
http://bugs.kali.org/view.php?id=289

[3t3st3r]

ok, so i made a little ugly fix to be able to use hamster.
idea is to use tcpdump for sniffing and ferret in the file mode for generating hamster.txt log file.
just put ferret_fix.sh to the hamster dir and execute it manually when launching hamster: ./ferret_fix.sh wlan0
(and do not set interface in the hamster setting, because it will launch ferret in interface mode)


#!/bin/bash

tcpdump -i $1 -w tcpdump.pcap &
while true
do
sleep 4
ferret -r tcpdump.pcap --hamster
done