ettercap-ng gets Fatal error on Snow Leopard at start up

[randy@…]

The initial Arp queries to build the host list failed causing this error.

"FATAL: ARP poisoning needs a non empty hosts list."

The PCAP_TIMEOUT for MACOSX used in pcap_open_live() is a bit short (10 ms). I'm not sure why there wasn't a more generous value used.

I bumped it up to 1000 ms and all is well.

Some users may not have had a problem before. I did on two different macbook pros.

[randy@…]

Portfile diff

[randy@…]

new patch file

[hsivank@…]

Cc Me!

[fjovel@…]

Cc Me!

[fjovel@…]

hsivank, I tried looking for the file that contains the PCAP_TIMEOUT but I'm having problems finding it. Could you please tell me were to find the file that contains this? Is this the only tweak you had to do to fix this? Thank You!

[hsivank@…]

You can manually modify ec_capture.c but i'm not sure it is the better way.
Anyway you can find the build directory like this :

a/fetch and extract source :

port extract ettercap-ng

b/ get build directory

port work ettercap-ng

Or you can use the *classic* method
patch ettecap-ng's Porfile with Portfile-ettercap_ng.diff and copy patch_src_ec_capture.c in {ettecap-ng portfile directory}/files
(take a look at  http://guide.macports.org/#development.patches.applying)

After, simply launch

sudo port install ettercap-ng

ec_capture.c will be automatically modified ...

[fjovel@…]

Replying to hsivank@…:

You can manually modify ec_capture.c but i'm not sure it is the better way.
Anyway you can find the build directory like this : a/fetch and extract source : {{{ port extract ettercap-ng }}} Thank You!!! that solved the problem!!! b/ get build directory {{{ port work ettercap-ng }}} Or you can use the *classic* method
patch ettecap-ng's Porfile with Portfile-ettercap_ng.diff and copy patch_src_ec_capture.c in {ettecap-ng portfile directory}/files
(take a look at  http://guide.macports.org/#development.patches.applying) After, simply launch {{{ sudo port install ettercap-ng }}} ec_capture.c will be automatically modified ...

[fjovel@…]

Hsivank thank you, the fix worked great!

[jmr@…]

Can't reproduce.