Tshark Packet Analysis

<MEDIUM:https://raaki-88.medium.com/tshark-packet-analysis-5d0dcc96e56a >

Commands used in the below post. If you wish for a quick reference instead of going through the post 

sudo tshark -f "tcp port 80" -F pcap -w /var/tmp/port_80_cap.pcap -c 10

sudo tshark -r /var/tmp/port_80_cap.pcap

sudo tshark -r /var/tmp/port_80_cap.pcap -Tfields -e ip.src -e tcp.port -e ip.ttl -e ip.dst

sudo tshark -f "tcp port 80" -F pcap -w /var/tmp/port_80_cap.pcap -c 10

sudo tshark -r /var/tmp/port_80_cap.pcap -Tfields -Y 
ip.dst==172.31.33.25 -e ip.dst -e tcp.dstport

sudo tshark -r capture_ospf.cap

sudo tshark -r capture_ospf.cap -Y "frame.number == 4"

sudo tshark -r capture_ospf.cap -Y "frame.number == 4" -V

Wireshark is famous for packet capture and analysis of various packet-capture files. Basically, if you never used Wireshark before it’s a sophisticated and popular GUI tool for doing packet captures and analysis.

While not every time you need a GUI tool or most importantly you don’t have access to a GUI environment, eg: you are running an EC2 cloud instance of ubuntu, typically you would not install a GUI extension to this, it is meant to run server workloads.

This is where Tshark Continue reading

Cleanup/Delete Transit-Gateway and Transit-Gateway-attachments

<MEDIUM: https://raaki-88.medium.com/cleanup-delete-transit-gateway-and-transit-gateway-attachments-42dac2dfb52a >

Am pasting my notes on cleaning up Transit-Gateway and Transit-gateway attachments, this is readily available on AWS documentation but thought I will paste it here if anyone wants to quickly copy and paste the steps instead of going through the documentation. We can be more sophisticated using Python / Ansible / Terraform and parse the outputs for now this is what I did to clean up some practice, do not forget this as it incurred good cost for but got saved by AWS credits!

1. list out available transit-gateway attachments as they are to be deleted first before deleting transit-gateway

aws ec2 describe-transit-gateway-attachments --region us-east-1 | egrep -i TransitGatewayAttachmentI -> This will list out TGW attachments in us-east-1

➜  ~ aws ec2 describe-transit-gateway-attachments --region us-east-1 | egrep -i TransitGatewayAttachmentId
            "TransitGatewayAttachmentId": "tgw-attach-01b7c8d7d3bd4e2ca",
            "TransitGatewayAttachmentId": "tgw-attach-050c87ef9fb703c98",
            "TransitGatewayAttachmentId": "tgw-attach-079921a8810f490ab",

2. Delete the available attachments

aws ec2 delete-transit-gateway-vpc-attachment \
    --transit-gateway-attachment-id tgw-attach-01b7c8d7d3bd4e2ca --region us-east-1

aws ec2 delete-transit-gateway-vpc-attachment \
    --transit-gateway-attachment-id tgw-attach-050c87ef9fb703c98 --region us-east-1

aws ec2 delete-transit-gateway-vpc-attachment \
    --transit-gateway-attachment-id tgw-attach-079921a8810f490ab --region us-east-1

3. ➜  List available Transit gateways

~ aws ec2 describe-transit-gateways --region us-east-1 | egrep -i "Transitgatewayid"
            "TransitGatewayId": "tgw-08dfd0c519456953d"

4. Delete transit-gateway

aws ec2  delete-transit-gateway \
    --transit-gateway-id tgw-08dfd0c519456953d --region us-east-1

{
    "TransitGateway":  Continue reading

Site Category Changes

This weekend I made a couple of small changes to the categories on the site, in an effort to make navigation a bit more intuitive. In the past, readers had expressed some confusion over the “Education” and “Explanation” categories, and—to be frank—their confusion was warranted. I also wasn’t clear on the distinction between those categories, so this post explains the changes I’ve made.

The following category changes are now in effect on the site:

  • First, the “Education” category has been completely removed. I try to make almost everything on this site educational in nature, so why have an “Education” category? This really only affects you if you’d subscribed to that category’s RSS feed. (Did you know that every category and every tag has its own RSS feed?)
  • A lot of the content from the “Education” category has been moved into the “Explanation” category. This is the category that will contain posts where I provide some level of explanation around a concept, technology, product, or project.
  • The “Tutorial” category also picked up some new articles from the now-eliminated “Education” category. The “Tutorial” category contains walkthroughs or step-by-step instructions for doing something. There’s most likely going to be explanation along the Continue reading

1.1.1.1 + WARP: More features, still private

1.1.1.1 + WARP: More features, still private
1.1.1.1 + WARP: More features, still private

It’s a Saturday night. You open your browser, looking for nearby pizza spots that are open. If the search goes as intended, your browser will show you results that are within a few miles, often based on the assumed location of your IP address. At Cloudflare, we affectionately call this type of geolocation accuracy the “pizza test”. When you use a Cloudflare product that sits between you and the Internet (for example, WARP), it’s one of the ways we work to balance user experience and privacy. Too inaccurate and you’re getting pizza places from a neighboring country; too accurate and you’re reducing the privacy benefits of obscuring your location.

With that in mind, we’re excited to announce two major improvements to our 1.1.1.1 + WARP apps: first, an improvement to how we ensure search results and other geographically-aware Internet activity work without compromising your privacy, and second, a larger network with more locations available to WARP+ subscribers, powering even speedier connections to our global network.

A better Internet browsing experience for every WARP user

When we originally built the 1.1.1.1+ WARP mobile app, we wanted to create a consumer-friendly way to connect to Continue reading

Why 2023 is the Year of Wi-Fi 6E

If you’re like me, you chuckle every time someone tells you that next year is the year of whatever technology is going to be hot. Don’t believe me? Which year was the Year of VDI again? I know that writing the title of this post probably made you shake your head in amusement but I truly believe that we’ve hit the point of adoption of Wi-Fi 6E next year.

Device Support Blooms

There are rumors that the new iPhone 14 will adopt Wi-Fi 6E. There were the same rumors when the iPhone 13 was coming out and the iPhone rumor mill is always a mixed bag but I think we’re on track this time. Part of the reason for that is the advancements made in Wi-Fi 6 Release 2. The power management features for 6ER2 are something that should appeal to mobile device users, even if the name is confusing as can be.

Mobile phones don’t make a market. If they were the only driver for wireless adoption the Samsung handsets would have everyone on 6E by now. Instead, it’s the ecosystem. Apple putting a 6E radio in the iPhone wouldn’t be enough to tip the scales. It would take Continue reading

PingPlotter’s Internet Troubleshooting Helps Ruby Receptionists

The following post is by PingPlotter. We thank PingPlotter for being a sponsor. An internet connection monitoring tool, PingPlotter constantly tests the connection from the end-user’s perspective, provides visual proof of the problem, and recommends how to solve it. You can find issues — like packet loss, high latency, and bad jitter — fast. “Most […]

The post PingPlotter’s Internet Troubleshooting Helps Ruby Receptionists appeared first on Packet Pushers.

Heavy Networking 641: Network Design For NVMe Over Fabric

Today on Heavy Networking, we discuss NVMe over fabric, where your Ethernet and IP network is the fabric. Many NVMe over fabric discussions focus on what’s happening inside the storage packets themselves. This conversation focuses on the network. What does the topology need to be? What are the latency and loss characteristics of an NVMe transport fabric? What QoS tools should you be considering, how do they work, and when should you use them? Our guest for this vendor-neutral conversation is J Metz.

Heavy Networking 641: Network Design For NVMe Over Fabric

Today on Heavy Networking, we discuss NVMe over fabric, where your Ethernet and IP network is the fabric. Many NVMe over fabric discussions focus on what’s happening inside the storage packets themselves. This conversation focuses on the network. What does the topology need to be? What are the latency and loss characteristics of an NVMe transport fabric? What QoS tools should you be considering, how do they work, and when should you use them? Our guest for this vendor-neutral conversation is J Metz.

The post Heavy Networking 641: Network Design For NVMe Over Fabric appeared first on Packet Pushers.

Build your next big idea with Cloudflare Pages

Build your next big idea with Cloudflare Pages
Build your next big idea with Cloudflare Pages

Have you ever had a surge of inspiration for a project? That feeling when you have a great idea – a big idea — that you just can’t shake? When all you can think about is putting your hands to your keyboard and hacking away? Building a website takes courage, creativity, passion and drive, and with Cloudflare Pages we believe nothing should stand in the way of that vision.

Especially not a price tag.

Big ideas

We built Pages to be at the center of your developer experience – a way for you to get started right away without worrying about the heavy lift of setting up a fullstack app.  A quick commit to your git provider or direct upload to our platform, and your rich and powerful site is deployed to our network of 270+ data centers in seconds. And above all, we built Pages to scale with you as you grow exponentially without getting hit by an unexpected bill.

The limit does not exist

We’re a platform that’s invested in your vision – no matter how wacky and wild (the best ones usually are!). That’s why for many parts of Pages we want your experience to be Continue reading

Building scheduling system with Workers and Durable Objects

Building scheduling system with Workers and Durable Objects
Building scheduling system with Workers and Durable Objects

We rely on technology to help us on a daily basis – if you are not good at keeping track of time, your calendar can remind you when it's time to prepare for your next meeting. If you made a reservation at a really nice restaurant, you don't want to miss it! You appreciate the app to remind you a day before your plans the next evening.

However, who tells the application when it's the right time to send you a notification? For this, we generally rely on scheduled events. And when you are relying on them, you really want to make sure that they occur. Turns out, this can get difficult. The scheduler and storage backend need to be designed with scale in mind - otherwise you may hit limitations quickly.

Workers, Durable Objects, and Alarms are actually a perfect match for this type of workload. Thanks to the distributed architecture of Durable Objects and their storage, they are a reliable and scalable option. Each Durable Object has access to its own isolated storage and alarm scheduler, both being automatically replicated and failover in case of failures.

There are many use cases where having a reliable scheduler can come Continue reading

Notes from IETF114

IETF114 was held in the last week of July 2022 as a hybrid meeting, with the physical meeting being held in Philadelphia. Here’s my notes on topics that attracted my interest from the week.

Weekend Reads 080422


Hackers are now ​​moving faster than ever when it comes to scanning vulnerability announcements from software vendors.


However, open source has an urgent security problem. Open source is more ubiquitous and susceptible to persistent threats than ever before.


You’ve done everything to secure your network, and you still face threats. That’s what most enterprises say about their network security, and they’re half right.


The largest datacenter market in the US is running into trouble: There isn’t enough power transmission capacity in the region to handle all the bit barn projects.


While Prometheus has been the current standard for monitoring your systems, OpenTelemetry is quickly gaining ground, especially in the cloud-native landscape, which was traditionally Prometheus’ stronghold.


A phishing campaign is underway that uses mirror images of target organizations’ landing pages to trick victims into entering login credentials.


It’s been about a decade since the hype for bug-bounty programs first started going supernova, but the jury is still out on the effectiveness of them.


There is an interesting new trend in fiber construction. Some relatively large cities are getting fiber networks using microtrenching.


Despite the area, cost, and power challenges designers face when integrating FPGAs into devices, they provide significant security Continue reading

Ansible For Network Automation Lesson 11: Ansible For Meraki – Video

In this final episode of the Ansible For Network Automation course, Josh VanDeraa explores how to gather network information, setting up Meraki VLANs with Ansible, and creating and deleting Meraki SSIDs. You can find the full playlist with all the videos in the course on the Packet Pushers’ YouTube channel. You can subscribe to the […]

The post Ansible For Network Automation Lesson 11: Ansible For Meraki – Video appeared first on Packet Pushers.

Ansible For Network Automation Lesson 10: Ansible Configuration And Verification – Video

Course instructor Josh VanDeraa provides more detail on roles in Ansible, and then shows a practical example by configuring and verifying QoS settings on network devices by taking advantage of roles. You can find the full playlist with all the videos in the course on the Packet Pushers’ YouTube channel. You can subscribe to the […]

The post Ansible For Network Automation Lesson 10: Ansible Configuration And Verification – Video appeared first on Packet Pushers.

802.11x: Wi-Fi standards and speeds explained

The term Wi-Fi is synonymous with wireless LANs, despite the fact it’s a specific trademark owned by the Wi-Fi Alliance, a group dedicated to certifying that products meet the IEEE’s wireless standards.In the IEEE’s naming convention, all standards that specify protocols for implementing wireless LANs fall under the 802.11umbrella. Individual standards are assigned alphabetically, 802.11a, 802.11b, etc. Thanks to the widespread acceptance of wireless LANs, new standards continue to be developed at a rapid pace, creating a confusing alphabet soup.To read this article in full, please click here

HPE to ship a dedicated inference server for the edge

Later this month, HP Enterprise will ship what looks to be the first server aimed specifically at AI inferencing for machine learning.Machine learning is a two-part process, training and inferencing. Training is usign powerful GPUs from Nvidia and AMD or other high-performance chips to “teach” the AI system what to look for, such as image recognition. [ Get regularly scheduled insights by signing up for Network World newsletters. ] Inference answers if the subject is a match for trained models. A GPU is overkill for that task, and a much lower power processor can be used.To read this article in full, please click here

1 … 424 425 426 427 428 … 3,806