/usr/share/ettercap/etter.filter.kill is in ettercap-common 1:0.8.2-2build1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 | ############################################################################
# #
# ettercap -- etter.filter -- filter source file #
# #
# Copyright (C) ALoR & NaGA #
# #
# This program is free software; you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation; either version 2 of the License, or #
# (at your option) any later version. #
# #
############################################################################
##
#
# This filter will kill all the connection made by an host.
# this can be used instead of the old 'banshee' plugin.
# if you need to add target victims, simply copy the code as many time you
# want
##
if (ip.src == '192.168.1.1') {
# sent the RST to both source and dest
kill();
# don't even forward the packet
drop();
}
if (ip.src == '192.168.1.2') {
kill();
drop();
}
|