在eve-ng capture 接口例如e0/0,没有正常抓包,
弹出2个窗口,一个是命令行窗口,一个是wireshark的程序窗口,
在命令行窗口中,显示:
The server’s host key is not cached in the registry. You have no
guarantee that the server is the computer you think it is. The
server’s rsa2 key fingerprint is: ……
connection abandoned.
如果是这种情况,说明没有正确的执行
Store key in cache
这一步,
If you trust this host, enter “y” to add the key to PuTTY’s cache and
carry on connecting. adding the key to the cache, enter “n”. If you do
not trust this host, press Return to abandon the connection.
Store key in cache? (y/n)
此时需要手工执行,
打开一个新的命令行窗口,
进入EVE-NG的安装路径,我的环境中的EVE-NG路径是C:\Program Files\EVE-NG
dir进行查看,有否plink.exe这个文件,如果有 就输入
plink 192.168.231.138 这个地址是我的环境中eve-ng 的服务器地址,你的环境里eve-ng 服务器的地址可能不同。
C:\Program Files\EVE-NG>plink 192.168.231.138 The server’s host key is
not cached in the registry. You have no guarantee that the server is
the computer you think it is. The server’s ssh-ed25519 key fingerprint
is: ssh-ed25519 255 75:e2:a0:d7:92:3a:ce:95:5f:ff:85:f8:fd:59:a2:7e If
you trust this host, enter “y” to add the key to PuTTY’s cache and
carry on connecting. If you want to carry on connecting just once,
without adding the key to the cache, enter “n”. If you do not trust
this host, press Return to abandon the connection.
Store key in cache? (y/n) y
login as:
root
root@192.168.231.138’s password: Access
granted. Press Return to begin session. Welcome to Ubuntu 16.04.4 LTS
(GNU/Linux 4.9.40-eve-ng-ukms-2+ x86_64)
然后输入eve-ng服务器的用户名和密码
就完成了手工信任的工作,
接下来就可以正常使用eve-ng 的web管理页面进行抓包的工实验了。
may the 16th 2022 Monday