|
Written by Paul Stewart
|
|
Saturday, 13 June 2009 |
|
Last night I had the opportunity to experiment a bit with Cisco's Flexible Packet matching. What really happened was I was going through IPExpert's Security Workbook 7a and found a task that I thought would fit the bill for something that was posted on Group Study a couple of weeks ago. I took an hour or so messing around with the two scenarios and it really helped me understand how Cisco's new and very special "class and policy type access-control" works. I really think getting sidetracked helped me understand this flexible way of parsing traffic. This post, while admittedly crude, will show how easy it is to match on strings inside a packet. |
|
Read more...
|
|
|
Written by Paul Stewart
|
|
Friday, 08 May 2009 |
|
I am later than many to follow all of the trends of social networking. I do use a little bit of Twitter, Facebook, LinkedIn as well as do some Blogging and Forum Posting. The purpose of this page is to simply explain how I use the Internet and Social Networking sites. This is not a page providing recommendation of how others should use such sites. I just wanted a place to list all of the sites in which I am involved in one way or another. |
|
Read more...
|
|
|
Written by Paul Stewart
|
|
Thursday, 07 May 2009 |
|
How many times have you been using Wireshark to capture traffic and wanted to narrow down to a range or subnet of IP addresses? There is an “ip net” capture filter, but nothing similar for a display filter. Unfortunately, this functionality is often needed after the traffic has been captured. With a little bit of familiarity with the display filters, this goal can be easily achieved anyway. |
|
Read more...
|
|
|
Written by Paul Stewart
|
|
Saturday, 18 April 2009 |
|
I was introduced to the ASA "VPNSETUP" command by a Matt over on IPExeperts "Online Study List". Its a different type of command that whan we normally find in Cisco gear. Basically it allows you to see all of the commands necessary to build a very basic VPN. If you find yourself in a position where documentation is not readily available, you can output this command to a text file. Then just tweak it around to your liking and paste it back into the configuration. Thanks Matt. Take a look below for the full output of this command. |
|
Read more...
|
|
|
Written by Paul Stewart
|
|
Friday, 17 April 2009 |
|
I have worked in technology full-time for about eleven years. Prior to this, I built PCs and was somewhat of a technical hobbyist. Occasionally, I am faced with the question, “How does one get into computers?” or “How can I get into computer networking?” There are many paths and correct answers to these questions. However, the question that the individual should first ask is the uncomfortable question, “Should, I get into technology?”. The general field of technology can be rewarding both personally and financially. However, it is not a field that everyone is well suited. I would encourage those asking questions about how to get into this field to first make sure that their personal traits fit well with the career choice and that their motivation is not misguided. |
|
Read more...
|
|
|
Written by Paul Stewart
|
|
Sunday, 28 December 2008 |
|
Roughly a week ago, The Packet University posed the following question in the form of a poll, "I am pursuing or will likely pursue the following CCIE Track". I was quite pleased to have 15 CCIE Candidates respond to the poll. Although this is not a large enough pool of participants to establish a trend, it did give a small sampling of what tracks are being pursued. Within the poll, the following answers were permitted:
|
|
Read more...
|
|
|
Written by Paul Stewart
|
|
Sunday, 28 December 2008 |
|
NTP Authentication was introduced in NTP Version 3 with RFC1305. The reason I placed “Cisco’s Implementation” in parenthesis is due to the fact that RFC did not specify the hashing algorithm that was to be used to compute the hash that is used to verify the NTP message. Microsoft does not provide authentication using MD5 in the same manner that Cisco does. In this article, I would like to show two things. First, I will show how an authenticated NTP Client/Server relationship differs in configuration from a non authenticated client server relationship. Second, I will provide a look at the packet captures and illustrate how to easily identify Authenticated NTP versus NTP that lacks authentication. |
|
Read more...
|
|
|
Written by Paul Stewart
|
|
Wednesday, 24 December 2008 |
|
The CCIE Security (and all CCIE Tracks for that matter) are certifications of a different breed. There are no books that inclusively cover the entire blueprint. However, I am sure there are books and other materials that stand out in the minds of those who are pursuing or have recently received their CCIE Security Certification. I would love to hear what others are doing, so if anyone has recomendations, please comment below.
|
|
Read more...
|
|
|
<< Start < Prev 1 2 3 Next > End >>
|
| Results 1 - 8 of 21 |