Meterpreter Sniffer

[hdm at metasploit.com (HD Moore)]

On Mon, 17 Aug 2009 12:30:50 -0500, Bryan Richardson <btricha at gmail.com>  
wrote:

> creating a multi/handler exploit object with Msf::Simple::Framework, I  
> have problems.  I can do "session.run_cmd 'use sniffer'" and I get a  
> 'true'
> returned.  But as soon as I try to start the sniffer I get a false  
> returned.
>
> Any ideas why this is happening?  I know the sniffer stuff is still in  
> the dev trunk, so I was just curious if anyone else has seen this or  
> might now what the problem is.

There should be no difference in the type of object returned or its  
capabilities, but using the "client.run_cmd" and "session.run_cmd" methods  
isn't really supported, all meterpreter scripts currently use the raw  
client.*.api calls to automate meterpreter. As far as the return values  
go, there should be no difference, any chance something went wrong in the  
second session?

-HD