This section contains general information, tips and tricks, light reading, entertainment and other general fodder. Enjoy!
In our previous articles on nmap ( Getting Started with nmap and Deeper Scanning with nmap and Even Deeper Scanning with nmap and Advanced nmap Scripting Engine) we ran everything from the command line interface of various Linux distributions. When you install nmap, you also get something called ‘Zenmap’ which is the graphical user interface front end […]
Zenmap – the nmap GUI Read More »
In this article we continue our nmap series (just click on the nmap tag at the bottom of the article to see the other articles), this time we discuss an advanced nmap feature called the NSE: nmap Scripting Engine. There are series of nmap scripting categories that are installed as a baseline set when you
Advanced nmap – the nmap Scripting Engine (NSE) Read More »
Check out these great references as well: Our Wireless custom profile for Wireshark Our Udemy course on Wireless Packet capture Our other Wi-Fi related articles Let’s talk about Wi-Fi Network Monitoring & Manipulation in Parrot Linux. If you are doing anything regarding security or penetration testing you know Linux is the only way to go.
Wi-Fi Network Monitoring & Manipulation in Parrot Linux Read More »
Check out these great references as well: Our custom profiles repository for Wireshark Our Udemy course on Wireshark Our Udemy course on Wireless Packet capture Teaching a Wireshark class with some cellular company employees, I was asked how to integrate the GeoIP IP Address resolution. I had not done this for years, so we stayed
GeoIP Add In for Wireshark 2.6 and Later Read More »
We have previously published two articles on Google’s QUIC protocol (note: Google originally called this protocol “QUIC” as you can tell by the original logo, but now that original version is referred to as gQUIC, whereas the IETF has chosen to call the newer version they are working on as “QUIC” – confusing – yes
How much QUIC Traffic is there? Read More »
Since we published the Linux Networking Commands article in October 2017, I have had several comments that I should have included the “My Trace Route” command. Ofcourse, readers were correct, but I felt that this tool deserved its own article. Some of you, depending on what version of Linux you use may not have even
My Traceroute in Linux Read More »
As a follow on to our DNS In Depth article, we wanted to provide a reference to a great tool. One of the important impacts to how fast the Internet works for users is how fast the Domain Name Service responds to database requests. For example, if you type www.cellstream.com into your URL and it takes
Testing/Baselining DNS Server Performance Read More »
Ansible is a tool used to automate Server provisioning and network provisioning. Ansible is completely free! You can dive deep into Ansible at their web site. A great way to learn Ansible as a network automation tool is to use it in an emulated network environment. GNS3 fits that requirement perfectly. GNS3 is also completely free!
Using Ansible for Network Automation Read More »
Have you noticed a lot of QUIC protocol in your packet captures? I certainly have, and we had better talk about what this is. What is QUIC (now more recently called gQUIC)? QUIC is a new protocol created by the fine folks at Google. It stands for Google Quick UDP Internet Connections. It is an
Is there a lot of QUIC in your Packet Captures? Read More »
As explained in our prior article on QUIC, you may be seeing a lot of QUIC traffic in your packet captures. Assuming you have read that article, and understand that all QUIC traffic is encrypted, you know the only way to see some of the details is using Chrome itself. That does not mean that
Using Wireshark to Analyze QUIC Traffic Read More »
Check out these great references as well: Our custom profiles repository for Wireshark Our Udemy course on Wireshark Our Udemy course on Wireless Packet capture As those who have studied our Wireless Profile (available from the Profile Repository) know, there are a number of great display filters used to hunt down issues on Wireless LAN’s.
tshark Use in Wireless Networking Read More »
Check out these great references as well: Our custom profiles repository for Wireshark Our Udemy course on Wireshark Our Udemy course on Wireless Packet capture Perhaps…. Of course you can edit these with appropriate addresses and numbers. The ones used are just examples. Unlike Wireshark’s Display Filter syntax, Capture filters use Berkley Packet
Perhaps a top 15 Wireshark Capture Filter List Read More »
Check out these additional Routing Resources: Our IP Routing course at Udemy Our Custom Profiles for Wireshark Classes at the Online School This is commonly asked question from our routing courses and routing discussions in other courses. Let’s explain this command in this article. To start, you have to know that OSPF supports different areas.
What is the ‘area range’ command in OSPF? Read More »
Check out these additional Routing Resources: Our IP Routing course at Udemy Our Custom Profiles for Wireshark Classes at the Online School In a recent course on IPv6, one of my students asked what the “network” command did as we were beginning to study the routing commands used in Cisco IOS when configuring OSPF. In
What is the “network” Command in OSPF and BGP? Read More »
If you attend our WLAN Operations course, one of the things we discuss is Active Scanning. Your system uses your saved Wi-Fi networks to actively scan for those networks (probing). There are potential security risks in this, especially with free networks. Most students conclude they should not remember networks in this way. The burning question
Deleting Remembered Wi-Fi Networks in Windows, MAC OSx, and Linux (Debian) Read More »
