{"action":"created","issue":{"url":"https://api.github.com/repos/droe/sslsplit/issues/149","repository_url":"https://api.github.com/repos/droe/sslsplit","labels_url":"https://api.github.com/repos/droe/sslsplit/issues/149/labels{/name}","comments_url":"https://api.github.com/repos/droe/sslsplit/issues/149/comments","events_url":"https://api.github.com/repos/droe/sslsplit/issues/149/events","html_url":"https://github.com/droe/sslsplit/pull/149","id":180979400,"number":149,"title":"Writing/Mirroring clear traffic to pcap-file/network-Interface","user":{"login":"cihankom","id":8180422,"avatar_url":"https://avatars.githubusercontent.com/u/8180422?v=3","gravatar_id":"","url":"https://api.github.com/users/cihankom","html_url":"https://github.com/cihankom","followers_url":"https://api.github.com/users/cihankom/followers","following_url":"https://api.github.com/users/cihankom/following{/other_user}","gists_url":"https://api.github.com/users/cihankom/gists{/gist_id}","starred_url":"https://api.github.com/users/cihankom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cihankom/subscriptions","organizations_url":"https://api.github.com/users/cihankom/orgs","repos_url":"https://api.github.com/users/cihankom/repos","events_url":"https://api.github.com/users/cihankom/events{/privacy}","received_events_url":"https://api.github.com/users/cihankom/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/droe/sslsplit/labels/feature","name":"feature","color":"207de5"}],"state":"open","locked":false,"assignee":{"login":"droe","id":749226,"avatar_url":"https://avatars.githubusercontent.com/u/749226?v=3","gravatar_id":"","url":"https://api.github.com/users/droe","html_url":"https://github.com/droe","followers_url":"https://api.github.com/users/droe/followers","following_url":"https://api.github.com/users/droe/following{/other_user}","gists_url":"https://api.github.com/users/droe/gists{/gist_id}","starred_url":"https://api.github.com/users/droe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/droe/subscriptions","organizations_url":"https://api.github.com/users/droe/orgs","repos_url":"https://api.github.com/users/droe/repos","events_url":"https://api.github.com/users/droe/events{/privacy}","received_events_url":"https://api.github.com/users/droe/received_events","type":"User","site_admin":false},"assignees":[{"login":"droe","id":749226,"avatar_url":"https://avatars.githubusercontent.com/u/749226?v=3","gravatar_id":"","url":"https://api.github.com/users/droe","html_url":"https://github.com/droe","followers_url":"https://api.github.com/users/droe/followers","following_url":"https://api.github.com/users/droe/following{/other_user}","gists_url":"https://api.github.com/users/droe/gists{/gist_id}","starred_url":"https://api.github.com/users/droe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/droe/subscriptions","organizations_url":"https://api.github.com/users/droe/orgs","repos_url":"https://api.github.com/users/droe/repos","events_url":"https://api.github.com/users/droe/events{/privacy}","received_events_url":"https://api.github.com/users/droe/received_events","type":"User","site_admin":false}],"milestone":null,"comments":13,"created_at":"2016-10-04T19:13:57Z","updated_at":"2016-10-21T12:12:07Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/droe/sslsplit/pulls/149","html_url":"https://github.com/droe/sslsplit/pull/149","diff_url":"https://github.com/droe/sslsplit/pull/149.diff","patch_url":"https://github.com/droe/sslsplit/pull/149.patch"},"body":"To dump as pcap format , just use -X [filename] parameter.\r\nTo mirror clear traffic to network interface, just use -M [interface]  parameter.\r\nTo mirror clear traffic to destination host, specify ip address of destination with -T [ip addr]. But destination host should be in same subnet"},"comment":{"url":"https://api.github.com/repos/droe/sslsplit/issues/comments/255364098","html_url":"https://github.com/droe/sslsplit/pull/149#issuecomment-255364098","issue_url":"https://api.github.com/repos/droe/sslsplit/issues/149","id":255364098,"user":{"login":"cihankom","id":8180422,"avatar_url":"https://avatars.githubusercontent.com/u/8180422?v=3","gravatar_id":"","url":"https://api.github.com/users/cihankom","html_url":"https://github.com/cihankom","followers_url":"https://api.github.com/users/cihankom/followers","following_url":"https://api.github.com/users/cihankom/following{/other_user}","gists_url":"https://api.github.com/users/cihankom/gists{/gist_id}","starred_url":"https://api.github.com/users/cihankom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cihankom/subscriptions","organizations_url":"https://api.github.com/users/cihankom/orgs","repos_url":"https://api.github.com/users/cihankom/repos","events_url":"https://api.github.com/users/cihankom/events{/privacy}","received_events_url":"https://api.github.com/users/cihankom/received_events","type":"User","site_admin":false},"created_at":"2016-10-21T12:12:07Z","updated_at":"2016-10-21T12:12:07Z","body":"mirroring to destination host needs target mac  address. And so switch can deliver packet to destination. That why sslsplit send arp request and read arp response. Get mac addres from response and replace ethernet destination mac field of  TCP/IP packet with it.\r\n\r\nNetwork interface should up when sslsplit running. \r\nIf I can set some retrying for arp request, this solution will solve your problem?\r\n"}}
{"actor":{"display_login":"cihankom"}}