'urlsnarf' sniffer fails with "undefined symbol: ip_fast_csum"

[Fernando Cassia]

32-bit F23 Mate spin, here

I install the dsniff package to use urlsnarf...

# dnf install dsniff

Last metadata expiration check performed 0:35:54 ago on Tue Jan 12 08:24:21
2016.
Dependencies resolved.
================================================================================
 Package          Arch          Version                   Repository
Size
================================================================================
Installing:
 dsniff           i686          2.4-0.20.b1.fc23          fedora
134 k
 libnet           i686          1.1.6-10.fc23             fedora
65 k
 libnids          i686          1.24-10.fc23              fedora
43 k

Transaction Summary
================================================================================
Install  3 Packages

Total download size: 243 k
Installed size: 570 k
Is this ok [y/N]: y
Downloading Packages:
(1/3): libnids-1.24-10.fc23.i686.rpm             32 kB/s |  43 kB
00:01
(2/3): libnet-1.1.6-10.fc23.i686.rpm             49 kB/s |  65 kB
00:01
(3/3): dsniff-2.4-0.20.b1.fc23.i686.rpm          81 kB/s | 134 kB
00:01
--------------------------------------------------------------------------------
Total                                            72 kB/s | 243 kB
00:03
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Installing  : libnet-1.1.6-10.fc23.i686
1/3
  Installing  : libnids-1.24-10.fc23.i686
2/3
  Installing  : dsniff-2.4-0.20.b1.fc23.i686
3/3
  Verifying   : dsniff-2.4-0.20.b1.fc23.i686
1/3
  Verifying   : libnet-1.1.6-10.fc23.i686
2/3
  Verifying   : libnids-1.24-10.fc23.i686
3/3

Installed:
  dsniff.i686 2.4-0.20.b1.fc23             libnet.i686
1.1.6-10.fc23
  libnids.i686 1.24-10.fc23

Complete!
[root@localhost]#

So I launch it
# urlsnarf
urlsnarf: listening on wlp2s0 [tcp port 80 or port 8080 or port 3128]

All is well until I go to Firefox 41 and enter any url, then urlsnarf
panics and ends.

urlsnarf: symbol lookup error: /lib/libnids.so.1.24: undefined symbol:
ip_fast_csum
[root@localhost]#

FC

[stan]

On Tue, 12 Jan 2016 09:17:48 -0500
Fernando Cassia  wrote:
> 32-bit F23 Mate spin, here
>
> I install the dsniff package to use urlsnarf...

[snip]
> So I launch it
> # urlsnarf
> urlsnarf: listening on wlp2s0 [tcp port 80 or port 8080 or port 3128]
>
> All is well until I go to Firefox 41 and enter any url, then urlsnarf
> panics and ends.
>
> urlsnarf: symbol lookup error: /lib/libnids.so.1.24: undefined symbol:
> ip_fast_csum

Looks like a bug.  I think something in the library has changed.  Your
best bet is to open a bugzilla at
https://bugzilla.redhat.com/
for libnids.  There are no open tickets for libnids right now, so no
one else has reported this error.  None for urlsnarf either.

Your firefox version seems to be a few out of date; I think the current
production version is 43, as the current nightly / devel version is 46.
I don't think that is relevant to your problem, but since the browser
is so critical to web security, I thought I'd mention it.

[Fernando Cassia]

On Tue, Jan 12, 2016 at 4:36 PM, stan  wrote:
> Looks like a bug.  I think something in the library has changed.  Your
> best bet is to open a bugzilla at
> https://bugzilla.redhat.com/
> for libnids.  There are no open tickets for libnids right now, so no
> one else has reported this error.  None for urlsnarf either.

Thanks! I will!

FC