schpongo Posted February 9, 2012 Share Posted February 9, 2012 I'm kind new to linux and backtrack but i was trying to sppof a dns with ettercap, but i haven't gotten it to work. I'm running Backtrack 5 r1 in Vmware Fusion on my macbook pro. 1. I edit the etter.dns file in nano. i changed the ip to my current ip address but kept the default Microsoft 2. I save the file 3. I Start ettercap with the command " ettercap -T -q -i eth0 -P dna_spoof -M arp // // 4. ettercap starts and says " Activating dns_spoof plugin..." 5. I'll go on www.microsoft.com but i get this error message " SEND L3 ERROR: 1881 byte packet (0800:06) destined to 192.168.178.9 was not forwarded (libnet_write_raw_ipv4(): -1 bytes written (Message too long) " Can anyone help me i just followed a handful of tutorials on youtube but haven't been successful I appreciate all help THX Daniel.k from Germany Quote Link to comment Share on other sites More sharing options...
Diggs Posted February 9, 2012 Share Posted February 9, 2012 I would make sure that ettercap is up to the current version. The L3 errors show up with the older version when there is a conflict with a newer Linux kernel. Quote Link to comment Share on other sites More sharing options...
schpongo Posted February 9, 2012 Author Share Posted February 9, 2012 I'v continued to search and is it possible that ettercap doesn't work with 64 bit? Quote Link to comment Share on other sites More sharing options...
schpongo Posted February 9, 2012 Author Share Posted February 9, 2012 I got ettercap to work under a 32 bit version of backtrack but now i can"t find the ettter.dns file and make the required changes. if I type in locate etter.dns i only get the etter.dns file in the vieojak file not in the share file \. Quote Link to comment Share on other sites More sharing options...
schpongo Posted February 11, 2012 Author Share Posted February 11, 2012 So i found the file but its still not showing up when i try to locate it in terminal. But i have another problem i got ettercap running but it kinda crashes my network the only site that can be accessed from an other computer is the ip ip address im spoofing. Can anyone help me? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.