Comments on: mystery.app - File Not Found

Question: mystery.app - File Not Found

Samizdata — Thu, 15 Jan 2009 20:09:30 -0800

Does anyone know of a wireless packet sniffer for Linux that shows pictures and only pictures?

A while back, while testing LiveCD based auditing Linux distros, I ran into an interesting F/OSS package which would go promiscuous, packet sniff, capture and display only graphics files being sent over the wireless LAN. It kept the packet and all other information invisible and would, if I recall correctly, just display each captured picture as an overlay on an evergrowing collage.

Unfortunately, I no longer have that CD available, and for the life of me, I can neither remember the name of the application or actually find anything on Google about it that rings a bell.

Any help would be appreciated.

By: kcm

kcm — Thu, 15 Jan 2009 20:18:41 -0800

driftnet is an example. See also: webcollage, also mentioned there. EtherPEG is the Mac version that started it all.

By: zpousman

zpousman — Thu, 15 Jan 2009 21:19:49 -0800

Carnivore, by RSG will also do this. And it's damn sexy to boot.

By: zpousman

zpousman — Thu, 15 Jan 2009 21:25:57 -0800

A professor I know keeps threatening to run this in class during his lectures.... Oh, the twitter icons and facebook images he'll see.

By: odinsdream

odinsdream — Fri, 16 Jan 2009 07:25:30 -0800

zpousman; are there any more recent clients for CarnivorePE?

By: Freen

Freen — Fri, 16 Jan 2009 16:40:30 -0800

hmm.. can't seem to get them working. CarnivorePE doesn't seem to have any functional clients, as far as i can tell. As far as I can tell, the php client produces nearly unintelligible gibberish.

By: Samizdata

Samizdata — Sat, 17 Jan 2009 10:00:00 -0800

Driftnet appears to be the client. Now off to test.

By: odinsdream

odinsdream — Sat, 17 Jan 2009 19:21:06 -0800

I got the example Processing client working (the one accessible right on the CarnivorePE homepage) but it doesn't do much. Most of the other clients are either well-intentioned but useless, or dead links.

It's an interesting piece of code, though. I'd love to see if someone came up with a more functional client. I'll be giving it a shot.

By: zpousman

zpousman — Sun, 18 Jan 2009 17:11:56 -0800

Not to threadjack, but yeah, CarnivorePE clients seem to be missing. I'll see if I can find a few that are on an external drive over here... It *used* to be cool, I swear!

By: Samizdata

Samizdata — Tue, 20 Jan 2009 05:37:30 -0800

I will say that Driftnet ended up to be the tool I was looking for, but I am intrigued to see where CarnivorePE goes.

Cheers for all the info!