ETTERLOG(8) System Manager's Manual ETTERLOG(8) (NAME) etterlog - ettercap (SYNOPSIS) etterlog [OPTIONS] FILE (DESCRIPTION) etterlog ettercap . ( -Lc) . ( ). ... : stderr etterlog : etterlog [options] logfile > outfile ftp ftp . (GENERAL OPTIONS) -a, --analyze . -c, --connections ( ). LOG_PACKET . LOG_INFO . : : etterlog -c logfile.ecp | grep 10.0.0.1 -f, --filter TARGET . TARGET ettercap . TARGET MAC/IPs/PORTs . IPv6 TARGET MAC/IPs/IPv6/PORTs . ANY () . IPs IPv6 ANY IPs IPv6 . . LOG_INFO target mac ip () . //80 . -r, --reverse TARGET. not(TARGET) TARGET . -t, --proto PROTO ( TCP + UDP ). "simple" . ettercap TCP UDP . PROTO "tcp" "udp" "all" . -F, --filcon CONNECTION . CONNECTION PROTO:SOURCE:DEST . SOURCE DEST IP:PORT . : etterlog -F TCP:10.0.0.23:3318:198.182.196.56:80 -s, --only-source CONNECTION . -F . : HTTP FTP : etterlog -B -s -n -F TCP:10.0.0.1:20:10.0.0.2:35426 logfile.ecp > example.tar.gz -d, --only-dest --only-source . -n, --no-headers . ( -B) . . : : Thu Mar 27 23:03:31 2003 [169396] . -m, --show-mac mac ip . -k, --color -F . LOG_INFO (LAN) (REMOTE) (GATEWAYS) . -l, --only-local INFO . -L, --only-remote INFO . (SEARCH OPTIONS) -e, --regex . LOG_PACKET (payload) . LOG_INFO ( ) . : REG_ICASE ( ) . -u, --user . / . -p, --passwords . . -u . '*' . -i, --show-client ip . (ACL) . -I, --client . . (EDITING OPTIONS) -C, --concat () ( ) . ettercap . -o . : etterlog -C -o outfile input1 input2 input3 -o, --outfile . (VISUALIZATION METHOD) -B, --binary . ( ). -X, --hex . : "HTTP/1.1 304 Not Modified" : 0000: 4854 5450 2f31 2e31 2033 3034 204e 6f74 HTTP/1.1 304 Not 0010: 204d 6f64 6966 6965 64 Modified -A, --ascii << >> '.' . -T, --text << >> . -E, --ebcdic EBCDIC ASCII. -H, --html html . '<' '>' . : This is the title, but the following will not be displayed. This is the title, but the following will not be displayed. -U, --utf8 UTF-8. . `iconv --list` . -Z, --zero . -x, --xml xml . DTD xml share/etterlog.dtd . (STANDARD OPTIONS) -v, --version . -h, --help . (EXAMPLES) etterlog . etterlog -k -l dump.eci . etterlog -X dump.ecp HEX . etterlog -c dump.ecp . etterlog -Akn -F TCP:10.0.0.1:13423:213.203.143.52:6666 dump.ecp IRC 10.0.0.1 ASCII . etterlog -H -t tcp -f //80 dump.ecp HTTP html. etterlog -Z -r -f /10.0.0.2/22 dump.ecp ssh 10.0.0.2 etterlog -A -e 'user' -f //110 dump.ecp POP 'user' ( ). etterlog -u root dump.eci 'root'. etterlog -e Apache dump.eci 'Apache'. etterlog -e Linux dump.eci 'Linux'. etterlog -t tcp -f //110 dump.eci tcp 110 . etterlog -t udp dump.eci UDP . etterlog -B -s -n -F TCP:10.0.0.1:20:10.0.0.2:35426 logfile.ecp > example.tar.gz 10.0.0.1 FTP . . (ORIGINAL AUTHORS) Alberto Ornaghi (ALoR) Marco Valleri (NaGA) (PROJECT STEWARDS) Emilio Escobar (exfil) Eric Milam (Brav0Hax) (OFFICIAL DEVELOPERS) Mike Ryan (justfalter) Gianfranco Costamagna (LocutusOfBorg) Antonio Collarino (sniper) Ryan Linn Jacob Baines (CONTRIBUTORS) Dhiru Kholia (kholia) Alexander Koeppe (koeppea) Martin Bos (PureHate) Enrique Sanchez Gisle Vanem Johannes Bauer Daten (Bryan Schneiders) (SEE ALSO) ettercap(8), etterfilter(8), etter.conf(5), ettercap_curses(8), ettercap_plugins(8), ettercap-pkexec(8) ettercap 0.8.4.1 ETTERLOG(8)