[zeromq-dev] Sniffing connections

[Matthew Kaufman]

José Pedro Oliveira,

How do you mean?

Can you provide a screenshot example of what you want ettercap to show?


On Fri, Apr 12, 2013 at 5:43 PM, Jose Pedro Oliveira <jpo at di.uminho.pt>wrote:

> Matthew,
>
> Is Ettercap able to dissect ZMQ frames?
>
> Can't find references to one in the history
>
>     http://ettercap.github.io/ettercap/downloads.html
>
> or in the dissectors source directory
>
>     https://github.com/Ettercap/ettercap/tree/master/src/dissectors
>
> Regards,
> jpo
>
> On 2013-04-12 22:05, Matthew Kaufman wrote:
> > Please use http://ettercap.github.io/ettercap/ to understand everything
> > in life.
> >
> >
> > On Fri, Apr 12, 2013 at 4:58 PM, Jose Pedro Oliveira <jpo at di.uminho.pt
> > <mailto:jpo at di.uminho.pt>> wrote:
> >
> >     On 2013-04-10 18:12, Garrett Smith wrote:
> >     > It's come to the point that I want to become very intimate with
> >     0MQ connections.
> >     >
> >     > I'd usually use tcpdump and watch port traffic but at the TCP
> level,
> >     > I'm guessing I won't learn much. Does anyone have some helpful
> tips to
> >     > start this process?
> >
> >     Garrett,
> >
> >     Tcpdump 4.4 will be released with ZMTP/1.0 support (13/ZMTP
> >     specification): just clone the tcpdump git repo and check
> >     the file print-zeromq.c (or download the tcpdump 4.4 RC3
> >     source tarball).
> >
> >     Git:
> >         git clone git://bpf.tcpdump.org/tcpdump
> >     <http://bpf.tcpdump.org/tcpdump>
> >
> >     Tarballs:
> >        http://www.ca.tcpdump.org/beta/
> >
> >     Additional info:
> >      * [zeromq-dev] testing of tcpdump decoder of ZeroMQ wire protocol
> >
> http://lists.zeromq.org/pipermail/zeromq-dev/2013-March/020824.html
> >
> >     Regards,
> >     jpo
> >     --
> >     José Pedro Oliveira
> >     * mailto:jpo at di.uminho.pt <mailto:jpo at di.uminho.pt> *
> >     _______________________________________________
> >     zeromq-dev mailing list
> >     zeromq-dev at lists.zeromq.org <mailto:zeromq-dev at lists.zeromq.org>
> >     http://lists.zeromq.org/mailman/listinfo/zeromq-dev
> >
> >
> >
> >
> > _______________________________________________
> > zeromq-dev mailing list
> > zeromq-dev at lists.zeromq.org
> > http://lists.zeromq.org/mailman/listinfo/zeromq-dev
> >
>
>
> --
> José Pedro Oliveira
> * mailto:jpo at di.uminho.pt *
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.zeromq.org/pipermail/zeromq-dev/attachments/20130417/894692ab/attachment.htm>