ELF@44 ( p@@@@||AAPvBB$¯'('E$'ď@$!8䁙 0܏¯('C$—bTB(@—! @􀙏 0܏!@A@('B$! @ŏb 0܏5A<8D$ 0܏A4F E0 B$+$ $0Cd0 !@+ @0$0$! $!X`&!C!,$' $F$!$$!!@+@!8 $$%$$!$!8F!f$bc$$$!<'!'!l$0$h !(B,h! '$f$,@$f$$b,@$$#f!$b@c$!<'!',($ !!!!́ ! @&&-$ "!܀ &@! $!!0!  !(@@!@BPSa!`< b|  @| "$ C < !# "$C@! 5 &"F!0` !8 @#`!e$&ff] [-C] -i iface etherpuppet -m {-s port|-c targetip:port} [-I ifname] -s : listen on TCP port -c : : connect to : -i : vampirize interface -I : choose the name of the virtual interface -m : master mode -B : do not use any BPF. Etherpuppet may see its own traffic! -S : build BPF filter with SSH_CONNECTION environment variable -M src:sp,dst:dp : BPF filter manual configuration -C : don't copy real interface parameters to virtual interface -d : increase debug level (can be used more than once) EtherPuppet %s (c) 2004 Philippe Biondi More informations: http://www.secdev.org/projects/etherpuppet v0.3puppet%dERROR: invalid argument : [%s] ms:c:i:I:hdBSMCvMODE=%i iface=%s bindERROR: can't resolve [%s] Connecting to %s:%i... connectsend PROTOVERSIONWaiting for connection on port %i... listenacceptrecv PROTOVERSIONERROR: Protocol version mismatch local=%08x (%i.%i) remote=%08x (%i.%i) Protocol version ok. local=%08x (%i.%i) remote=%08x (%i.%i) I am %s:%i Peer is %s:%i /dev/net/tunopenrecv linktypeRemote linktype is %i (Ethernet) Remote linktype is %i (PPP) Remote linktype %i is unknown. Using Ethernet. ioctl TUNSETIFFAllocated interface is [%s] socketsetsockoptSSH_CONNECTIONERROR: can't find SSH_CONNECTION environment variable. Is it the right session ? ERROR: can't parse SSH_CONNECTION environment variable! ERROR: can't parse -M argument [%s] ! BPF filters out %i.%i.%i.%i:%i <-> %i.%i.%i.%i:%i ioctl SIOCGIFINDEXgetsocknameSending remote linktype: %i PPP modesigactionCommunication established!ioctl getselect>read lengthcommandbyte packetReceived a %i %s (trying to continue) ioctl setappliedignoredConfigure request [%04x] %s ERROR: unknown command WARNING: truncated packet (%i > %i) . This should not happen read packet dataProtocol = %04x (trying to continue) writesendto<(trying to continue) read(trying to continue) recvfromsendSending %i bytes: Catched errorCatched TERM/INT signalConnection reset by peerSomething weird happened...Gracefull exitp4444444444444|444444444444444444T444`4444444H: 4@<@T@n@~@@@@̧@ާ@@@ @@+@7@M@e@q@@@@@¨@֨@@@ @@1@>@T@c@o@@@̩@ߩ@@@#@1@J@g@@@@ɪ@Ҫ@۪@@@@@'@<@I@e@n@w@@@@@٫@@ @@4@D@R@n@}@@@@@@Ѭ@@ @%@B@Y@@@ŭ@@@1@J@n@@@@Ю@@ @@<@S@S@S@S@S@S@S@S@S@S@S@S@S@S@S@S@S@S@S@S@a@x@@@ޯ@@@>@N@e@@@˰@@ @1@J@T@p@@@@@DZ@@@-@@@M@^@|@@@@@ʲ@Բ@޲@@@@!@<@L@a@SuccessOperation not permittedNo such file or directoryNo such processInterrupted system callI/O errorNo such device or addressArg list too longExec format errorBad file numberNo child processesTry againOut of memoryPermission deniedBad addressBlock device requiredDevice or resource busyFile existsCross-device linkNo such deviceNot a directoryIs a directoryInvalid argumentFile table overflowToo many open filesNot a typewriterText file busyFile too largeNo space left on deviceIllegal seekRead-only file systemToo many linksBroken pipeMath argument out of domain of funcMath result not representableNo message of desired typeIdentifier removedChannel number out of rangeLevel 2 not synchronizedLevel 3 haltedLevel 3 resetLink number out of rangeProtocol driver not attachedNo CSI structure availableLevel 2 haltedResource deadlock would occurNo record locks availableError 47Error 48Error 49Invalid exchangeInvalid request descriptorExchange fullNo anodeInvalid request codeInvalid slotFile locking deadlock errorError 57Error 58Bad font file formatDevice not a streamNo data availableTimer expiredOut of streams resourcesMachine is not on the networkPackage not installedObject is remoteLink has been severedAdvertise errorSrmount errorCommunication error on sendProtocol errorError 72RFS specific errorMultihop attemptedError 75Error 76Not a data messageFile name too longValue too large for defined data typeName not unique on networkFile descriptor in bad stateRemote address changedCan not access a needed shared libraryAccessing a corrupted shared library.lib section in a.out corruptedAttempting to link in too many shared librariesCannot exec a shared library directlyIllegal byte sequenceFunction not implementedToo many symbolic links encounteredInterrupted system call should be restartedStreams pipe errorDirectory not emptyToo many usersSocket operation on non-socketDestination address requiredMessage too longProtocol wrong type for socketProtocol not availableError 100-119Protocol not supportedSocket type not supportedOperation not supported on transport endpointProtocol family not supportedAddress family not supported by protocolAddress already in useCannot assign requested addressNetwork is downNetwork is unreachableNetwork dropped connection because of resetSoftware caused connection abortConnection reset by peerNo buffer space availableTransport endpoint is already connectedTransport endpoint is not connectedStructure needs cleaningError 136Not a XENIX named type fileNo XENIX semaphores availableIs a named type fileRemote I/O errorReservedError 142Cannot send after transport endpoint shutdownToo many references: cannot spliceConnection timed outConnection refusedHost is downNo route to hostOperation already in progressOperation now in progressStale NFS file handleError 152Error 153Error 154Error 155Error 156Error 157AIO operation canceledNo medium foundWrong medium typeRequired key not availableKey has expiredKey has been revokedKey was rejected by service(null) 0000000000000000[unknown error]/etc/hosts.localinfnan???yPD?$@ _B?DNSCACHEIP/etc/resolv.confnameserversearchdomainlb@'!$"( 0   GFED(EHͫH4  CBA@  GFED(EHͫH4 CBA@@@AMissing argument for `-x'. Unknown option `-x'. pAA(0AAA@BA:@P?@dAT3@@q@PD@/@z@d@ @?@p0@O@0@P@@/@ 6@Ah@D@7@@A0;@ A@`AhJ@AO@lb@0Ab@A@@d@pf@AA @@@pE@p>@0D@@@{@q@@I@0;@/@@A<@h8@z@f@H@?@>@P;@ <@<4@0>@;@^@@@@/@00@(@Al@A;@A\@O@P>@0@D@;@P@6@@@Ap0@@A0@@N@^@@]@>@@pO@>@z@0@Pb@b@Ѕ@P0@p?@A0F@`@=@0@A @1@{@C@<@`<@p@@A 7@4AO@d@0]@PK@A0?@6@=@AB@/@pN@Tg@(Q@p^@@C@p;@GCC: (Debian 4.3.0-1) 4.3.1 20080309 (prerelease)Agnu @@@@@ @ P@ @H/@/@/@/@/@0@00@P0@p0@0@0@0@ X1@(1@(T3@0<4@( 6@6@6@7@ 7@07@h8@@:@;@0;@P;@p;@(;@ <@`<@<@<@(=@=@>@0>@P>@p>@>@>@ 0?@P?@p?@?@?@(P@@@@ @@( A@0B@(C@lb@ C@ D@0D@PD@(D@D@(lb@ pE@80F@PH@0I@I@hJ@0PK@XpN@N@N@pO@O@O@O@O@P@0(Q@0\@0]@]@ ^@p^@^@0`@?8Pb@lb@ b@(d@(d@ Pf@pf@ f@f@ Tg@Pl@8 @q@ q@? z@z@z@{@0{@{@0X@@@0@  @h@(@ @P@Ѕ@@ @@@ 0@(،@0@(0@0@@X@0@H@8p@?80@H@(@P@@.symtab.strtab.shstrtab.reginfo.text.rodata.data.rel.ro.data.got.sbss.bss.comment.gnu.attributes.mdebug.abi32.pdrp@$@*P@P,2A?AEAXJAPAPU3^on+|,,0pV c @@P@AAAAA    /8AIQ[dmv +5EWeo{!.:FR]gs~p;@d"C@ "@0>@Ap^@ H@O@AW(Q@ bTg@o <@8"tN@ {pN@|0@/@B@LA(@ Af@$P@@ @h=@"6@"0?@APK@p;@d0]@%d@/O@6z@C 6@H/@4^4Ah 7@oA!u@}0@BB@h@@dp@`<@0<@C@{@@41@" @Pf@ p;@d"A0@ 0@=@"p;@d.`@<60F@FAMp?@TP0@[Ѕ@ "cb@H"j00@vPb@0@Tz@"<4@>@xA!pO@@D>@"]@\/@"@$"N@^@xN@p@0@"$A,0@"3@49p0@"?A!G@@HO6@TP@[;@("aD@Xi0@x/@@P>@O@\@DA;@8Al@@A@(A(@ Ѕ@ (00@"-/@"=@<E1@ST3@_@@Hg^@Tr;@(x0>@"/@"<4@">@ <@8P;@>@"/@?@H@f@`?@0"z@Ah8@p0@<@(A '@),/@>@D@$U0;@"[I@ e@q=@q@{@@ @$0D@ p>@h@|pE@@@ @H/@"A@ A pf@` d@T" z@, @,A @S AZ b@Hj 0Aw lb@T O@ A A@ hJ@ `A A@" A A PA 0;@ T3@ A 0@. @l8 7@"I D@ Y h@|^ Ak 6@p /@"v A ،@ /@ =@ P@@$ 0@" O@ p0@ 0>@ ?@0 A @ d@T z@" A /@" 6@% PD@H. @q@|< T3@"A dAK P?@W :@etherpuppet.calloc.catol.cerrno_location.cgetenv.cgetopt.chtonl.chtons.clongjmp.cmemchr.cmemcmp.cmemcpy.cmemset.cperror.csigaction.csigaddset.csigemptyset.csigprocmask.cstrchr.cstrdup.cstrlen.cstrncpy.cfprintf.cfwrite.cprintf.cputchar.cputs.cstderr.cstdout.cvfprintf.cvprintf.cgethostbyname.cgethostbyname_r.cgetopt_data.ch_errno.cinet_aton.cinet_ntoa.cinet_ntoa_r.cinet_pton.c__v_printf.cerrlistu.cmemccpy.cmemmove.csigjmp.cstrcasecmp.cstrcpy.cstrtol.cstrtoul.cfflush.cfputc_unlocked.cstdin.cgethostent.cdnscruft2.cdnscruft4.cres_query.c__dtostr.c__isinf.c__lltostr.c__ltostr.catexit.cisalnum.cisatty.cisblank.cisspace.cisxdigit.cdivdi3.cdnscruft.cdnscruft3.cres_mkquery.cif_nametoindex.crand.crand_r.cstrncmp.clongjmpputchar__dns_make_fd__libc_sigactionstrcpy__mainthe_BPF__v_printfgethostent_rbcmpsetjmp__longjmp__divdi3ioctlprintfstdoutrandom_fdata__gnu_local_gpsethostent_gp_dispsa_termsanerecvconnectsigemptyset__dns_searchinet_pton__siglongjmpmemmove__fflush4munmap__libc_fcntlatolerror_unified_syscall__dns_bufgetenverrnoisblank__libc_accept_gpversionhexdumpusageres_mkquerymemcpyperrorputs__dtostr__isinfmallocisatty__fflush_stdinsiglongjmpoptarg__ltostrsys_nerrrecvfrom__libc_longjmpstrtoulgethostbyname_ropterrsocketselectisspacefflush__libc_read__stdio_flushall__umoddi3lseek__libc_reallocsigaddset__environmmap__udivdi3send__sigjmp_saveftrylockfileisxdigit__setjmpstrtol__sigsetjmp__dns_make_fd6accepth_errnocallocisinfwriteenvironfprintfbindrand_rntohlvprintfif_nametoindex__you_tried_to_link_a_dietlibc_object_against_glibc__startsetsockoptmremapmemccpyoptindmemchrstdin__dns_gethostbyx_r_res_ftextifclone_set_ioctlrand__isspace_asciiread__thread_doexitstrncmp__libc_malloc__libc_freestrncpystrcasecmphtonlsendtofunlockfilerealloc__libc_sendmemcmplistensigaction__libc_closestrdupinet_atonendhostentindexgettimeofday__bss_startgetopt__libc_openmemset__dns_domainsmain__unified_syscallsrand__isxdigit_asciintohsinet_ntoasys_errlist__libc_recvfromres_querypoll__dns_decodenameisalnum__fflush_stdoutshutdown__libc_exitgethostbyname__clz_tabatexitflockfilestderrsrandomenv__stdin_is_ttyfputc__libc_lseek__dns_readstartfiles__sys_err_unknownoptoptfflush_unlocked__dns_buflen__stdio_outs__rt_sigaction__dns_plugplay_interfacefwrite_unlockedinet_ntoa_r__dns_fdfwrite_edata_GLOBAL_OFFSET_TABLE__endhtonsif_freenameindex__stdio_atexit__libc_calloc__lltostr__errno_location__fflush_stderrexit__stdio_rootatoi__nopthe_filter__moddi3_exit__libc_recvstrlenopen__rt_sigprocmask__libc_write__libc_sendtostrchrifclone_get_ioctlrecvmsgfputc_unlockedfcntl_fbssclose__libc_connectvfprintf__dns_makebuffree__dns_fd6sigprocmaskgetsockname