CarnivorePE

[murakami]

This is sorta of a wierd one along the lines of Driftnet.

http://rhizome.org/carnivore/

[ck3k]

Apperently this prog wont run unless you let it phone home. I dont think I trust it.

[blackwave]

Apperently this prog wont run unless you let it phone home. I dont think I trust it.

check out the FAQ, some good info there, including source... which "may" allow you to change the phoning home deal

http://rhizome.org/carnivore/faq.php3

10. Can I make my own client for CarnivorePE?
Yup, that's the whole point ;-) simply launch CarnivorePE and make a network socket connection to "localhost" on port 6667 and you are home free. In DOS you can do this by typing: telnet localhost 6667. We have templates available for Flash, Java, Perl, etc to help you if you want. There are three flavors that CarnivorePE can output: A) full packet data in ASCII, B) full packet data in strings of hex code, or C) packet headers only. CarnivorePE will default to C, but you can make your client switch to A by sending the following command to CarnivorePE (i.e. printing to localhost port 6667): JOIN #carnivore, or switch to B by sending the following command: JOIN #hexivore. Or you can switch it manually.


13. Is CarnivorePE open source?
Yup. The Windows source code is written in Visual Basic 6 and is covered by the Gnu General Public License

here is the link for the source
http://rhizome.org/carnivore/CPE_source.zip

[kallahar]

The first phone home request is an HTTP GET to http://rhizome2.rhizome.org/carnivor...son-detail.jpg

It doesn't send any extra data along with the get.

[converge]

The first phone home request is an HTTP GET to http://rhizome2.rhizome.org/carnivor...son-detail.jpg

It doesn't send any extra data along with the get.

could be wrong, but isn't the 'phone home' just a counter to track usage?

[blackwave]

I just unzipped the source from the link above, you can remove it, it is just grabbing the splash screen according to the comments in formSplash.frm:

[size=1]
'SHOW RANDOM IMAGE FROM WEB SERVER
Private Sub Form_Activate()
    'GRAB AN IMAGE FROM THE WEB
    loadimagefromweb
End Sub[/size]
[color=green][b]'FETCH AN IMAGE FROM THE CARNI WEBSITE
Sub loadimagefromweb()
    Dim temp_Path As String
    temp_Path = App.Path & "\temp.jpg"
    Dim MyBytes() As Byte
    On Error GoTo ErrorHandler
    
    'TRY TO LOAD SOMETHING FROM THE WEB
    MyBytes = Form1.Inet1.OpenURL("http://rhizome.org/carnivore/give_me_a_splash_image.php", icByteArray)
    debugOut ("FETCHING SPLASH IMAGE FROM SERVER")
    Open temp_Path For Binary As #1
        Put #1, , MyBytes()
    Close #1
    Picture1.Picture = LoadPicture(temp_Path)
[/b][/color][size=1]
ErrorHandler:
    'DO NOTHING
End Sub
'CLOSE SPLASH WHEN CLICKED
Private Sub Picture1_Click()
    formSplash.Hide
    Form1.Visible = True
End Sub
'CLOSE SPLASH WHEN CLICKED
Private Sub Form_Click()
    formSplash.Hide
    Form1.Visible = True
End Sub
[/size]

[kraa26]

could be wrong, but isn't the 'phone home' just a counter to track usage?

It could be Verge, but it might also be set up to automaticly update itself at a later date. I would just take it out of the code.

[blackwave]

hmm, I am wondering why everyone is still wondering what this "might be" since the code is freely available in the link provided above... :) highlighted even! :D