DSNIFF(8)

NAME
dsniff - simple sniffer for penetration testing

SYNOPSIS
dsniff [-n] [-i interface] [-s snaplen] [-r|-w file]

DESCRIPTION
dsniff is a simple password sniffer which handles FTP, Telnet, HTTP, POP, NNTP, IMAP, SNMP, LDAP, Rlogin, NFS, SOCKS, X11, IRC, AIM, CVS, ICQ, Napster, Citrix ICA, Symantec pcAnywhere, NAI Sniffer, Microsoft SMB, and Oracle SQL*Net protocols.

dsniff minimally parses each application protocol, only saving the interesting bits, and uses Berkeley DB as its output file format, only logging unique auth info. Correct TCP/IP reassembly is provided by libnids(3).

I wrote dsniff with honest intentions - to audit my own network, and to demonstrate the insecurity of cleartext network protocols. Please do not abuse this software.

OPTIONS

-n  Do not resolve IP addresses to hostnames.

-i interface
    Specify the interface to listen on.

-s snaplen
    Analyze at most the first snaplen bytes of each TCP connection, rather than the default of 1024.

-r file
    Read sniffed sessions from a file created with the -w option.

-w file
    Write sniffed sessions to file rather than parsing and printing them out. They can be later reviewed with the -r option.

SEE ALSO
arpredirect(8), findgw(8), macof(8), mailsnarf(8), tcpkill(8), tcpnice(8), urlsnarf(8), webspy(8), libnids(3)

AUTHOR
Dug Song <dugsong@monkey.org>