I executed this command out of curiosity:

ettercap -T -i wlan0

After a couple of seconds, it started flooding my terminal emulator with loads of data (sniffed data, I guess). I think this data is going into some kind of cache memory or something. I want to know where is this data saved?

Is this data really saved somewhere? Or does it vanish after the operation?

closed as off-topic by forest, Tom K., Steffen Ullrich, Teun Vink, Neil Smithline Apr 16 '18 at 1:00

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – forest, Tom K., Steffen Ullrich, Teun Vink, Neil Smithline
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Do you mean the data used by ettercap or the data generated by ettercap? – Limit Apr 11 '18 at 21:44
  • Data generated by ettercap. – Sohan Arafat Apr 11 '18 at 22:05
  • 4
    In that case, this question has nothing to do with security. To answer your question, it just gets redirected to stdout(terminal) by default. You can redirect it to a file if you want to save the results – Limit Apr 11 '18 at 22:30
  • This means it is never saved anywhere? – Sohan Arafat Apr 11 '18 at 22:50
  • It is not permanently saved anywhere unless you explicitly ask it to. – Limit Apr 12 '18 at 1:39

As per basic bash syntax you can use ettercap -T -i wlan0 > dump.pcap to redirect the output to a file instead of printing to stdout.

  • Where is this stdout? i am not that good in linux. – Sohan Arafat Apr 11 '18 at 22:50
  • Is it saved somewhere?Is it using memory permanently? – Sohan Arafat Apr 11 '18 at 22:53
  • 2
    @SohanArafat stdout just means it is printed to your terminal. It is kept in memory temporarily until that memory gets used up again. Remember that memory vanishes when you reboot too. – forest Apr 11 '18 at 23:05

Not the answer you're looking for? Browse other questions tagged or ask your own question.