ettercap

gabsik · 01-15-2007, 09:28 PM

I was trying with ettercap to sniff traffic over my router , it was the first time i used this prog and at the beginning i was massing with the plugins.I had my tests on the gateway linuxbox and now i can access the inside lan servers from the gateway but not the opposite way with ssh ... did i have changed something that "poisoned" the ssh key exchange ?

Code:

gabrix@www:~$ ssh -p 666 argo@gabrix
ssh: gabrix: Name or service not known

That's a really odd error i can login backwords do but now i don't know ho to repair to this ... help please anyone !

chrwei · 01-16-2007, 08:12 AM

that error simply means the name could not be resolved. do you have dns setup or have that name in your hosts file? if no to both, you should not be suprized to get this error.

gabsik · 01-16-2007, 01:02 PM

I don't know if you are right i have also formatted the gateway where i was connecting to from the inside lan clients and /etc/resolv.conf and /etc/hosts are set as i always did ...

gabsik · 01-16-2007, 05:06 PM

It's not a dns problem as i supposed it's a key exchange issue . I resetted all keys i had made new onces but the probem remains that's the debugging output :

Quote:

gabrix@mail:~$ scpa -vv .ssh/id_dsa.pub argo:/home/gabrix/
Executing: program /usr/bin/ssh host argo, user (unspecified), command scp -v -t /home/gabrix/
OpenSSH_3.8.1p1 Debian-8.sarge.6, OpenSSL 0.9.7e 25 Oct 2004
debug1: Reading configuration data /etc/ssh/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to argo [192.168.0.2] port 666.
debug1: Connection established.
debug1: identity file /home/gabrix/.ssh/identity type -1
debug1: identity file /home/gabrix/.ssh/id_rsa type -1
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug2: key_type_from_name: unknown key type '-----END'
debug1: identity file /home/gabrix/.ssh/id_dsa type 2
ssh_exchange_identification: Connection closed by remote host
lost connection