Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm on Ubuntu – but it's the same on Debian. I'm using tcpdump in order to track the connection of computers on my private network. At some point, the internet connection of the computers launching the script is lost as well as the targeted computers.

Here's the command line:

tcpdump -i wlan0 -A src host IP_TARGET

I tried with netsniff-ng, but the issue is the same.

The script that I refer to deviates the connection from the targeted computers to my computer (by sending ARP request) and grep the cookies from the output of tcpdump.

share|improve this question
Hello Zack, it isn't clear from your question what the setup is - can you add some detail? By "script" are you referring to tcpdump, or some other script? Is connection to the server running tcpdump failing? edit the question if you have more info. – Paul May 22 '12 at 13:19
I edited the question. Also, it is the connection to the server running tcpdump who fails. – Zack Dibe May 22 '12 at 13:28
You are spoofing arp to get response packets destined for one computer to go to another? And you don't expect connections to be lost? – Paul May 22 '12 at 13:38
When I get the response packets, I read them then redirect them to the router. The connection isn't always lost. Sometimes it's immediately, sometimes it's after a few minutes. – Zack Dibe May 22 '12 at 13:51
Without more information, the only answer you are going to get is "you are messing with the traffic flows, and this is causing the connection drops". I would recommend editing again, and putting in all the details of what you are doing and how, what macs you are spoofing - and what macs the packets have at each stage. – Paul May 22 '12 at 13:58

You must log in to answer this question.

Browse other questions tagged .