UPDATE: (Partial success)
i tried the MITM attack (ettercap) using my laptop on my home network and noticed i get the same error (can't initialize 'nat' table) that i get on the zaurus but it works on my laptop running ubuntu so i figured that this error might not be the root of the problem. After trial and error i came to a solution of steps that will make my zaurus so as to be able sniff through ettercap but it still cannot handle sites that use ssl so as to create and fill fake ssl-certificates on the fly.
Now the other error on the z that does not appear on my laptop is : dissector 'dns' not supported (etter.conf line 70)
line 70 in etter.conf reads dns=53
The commands corresponding to the ssl dissection used by ettercap are :
redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
Also the extra modules which i think are needed to be able to do this ssl redirectio that appear on my laptop and not on the zaurus are :
ipt_REDIRECT
iptable_nat
nf_nat
nf_conntrack_ipv4
nf_conntrack
On the zaurus i have iptable_mangle loaded instead of the ones above (among the common ones in both; ip_tables, iptable_filter and x_tables)
Any ideas any1 to get ssl sniffing working ? or how to get (some of) these modules ?
Thnx in advance
i tried the MITM attack (ettercap) using my laptop on my home network and noticed i get the same error (can't initialize 'nat' table) that i get on the zaurus but it works on my laptop running ubuntu so i figured that this error might not be the root of the problem. After trial and error i came to a solution of steps that will make my zaurus so as to be able sniff through ettercap but it still cannot handle sites that use ssl so as to create and fill fake ssl-certificates on the fly.
Now the other error on the z that does not appear on my laptop is : dissector 'dns' not supported (etter.conf line 70)
line 70 in etter.conf reads dns=53
The commands corresponding to the ssl dissection used by ettercap are :
redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
Also the extra modules which i think are needed to be able to do this ssl redirectio that appear on my laptop and not on the zaurus are :
ipt_REDIRECT
iptable_nat
nf_nat
nf_conntrack_ipv4
nf_conntrack
On the zaurus i have iptable_mangle loaded instead of the ones above (among the common ones in both; ip_tables, iptable_filter and x_tables)
Any ideas any1 to get ssl sniffing working ? or how to get (some of) these modules ?
Thnx in advance
Use the old kernel (23.9) with the integrated ip-tables modules. This will work.
Thanks for the reply but I cant find this kernel for the c1000 for sharp rom !
Can 20r0 please add the ip_table related modules to the kernel?
