Network Security Tools

find_tcp_conn.c

The easiest way to compile this plug-in is to make a new directory called find_tcp_conn in the plug-ins directory in the Ettercap source tree. Then, copy over the Makefile from another plug-in called find_conn, and replace all occurrences of find_conn with find_tcp_conn. Run make, and you will end up with ec_find_tcp_conn.so in the .libs/ directory. To load this plug-in from the GTK frontend, press Ctrl-O and select this file. Press Ctrl-P to go to the plug-in management section, and double-click the “find_tcp_conn” entry to enable the plug-in. Here is the complete source code for find_tcp_conn.c for easy reference:

#include <ec.h> /* required for global variables */ #include <ec_plugins.h> /* required for plugin ops */ #include <ec_packet.h> #include <ec_hook.h> /* prototypes */ int plugin_load(void *); static int find_tcp_conn_init(void *); static int find_tcp_conn_fini(void *); static void parse_tcp(struct packet_object *po); /* plugin operations */ struct plugin_ops find_tcp_conn_ops = { /* ettercap version MUST be the global EC_VERSION */ ettercap_version: EC_VERSION, /* the name of the plugin */ name: "find_tcp_conn", /* a short description of the plugin (max 50 chars) */ info: "Detect TCP connections", /* the plugin version. */ version: "1.0", /* activation function */ init: &find_tcp_conn_init, /* deactivation function */ fini: &find_tcp_conn_fini, }; /* this function is called on plugin load */ int plugin_load(void *handle) { return plugin_register(handle, ...