Differences

This shows you the differences between two versions of the page.

--- networking [2008/11/29 12:17]
a + UCSniff
+++ networking [2012/01/17 21:51] (current)
greebo old revision restored
@@ Line 2: / Line 2: @@
 <html><div float=right></html>
 <box 60% round orange right|**Networking links else where**>
+  * **[[http://netalyzr.icsi.berkeley.edu/index.html|Debug your Internet - The ICSI Netalyzr Beta]]**
   * [[http://dsd.lbl.gov/TCP-tuning/|TCP Tuning guide]]
   * [[http://www.speedguide.net/sg_tools.php| Speed guides and tools]]
@@ Line 13: / Line 14: @@
 </box>
+<box 60% round red right|**RFC and other stuff on need to know basis**>
+   * [[http://tools.ietf.org/html/rfc5375|IPv6 Unicast Address Assignment Considerations]]
+   * [[http://tools.ietf.org/html/rfc1930|Guidelines for creation, selection, and registration of an Autonomous System (AS)]]
+</box>
 <html></div></html>
@@ Line 21: / Line 28: @@
 |[[ipsec:swan-cisco|*swan & Cisco]]|Some tips with *swan projects and Cisco|
 |[[linux:networking|Linux networking]]|stuff that you can do in network with linux|
@@ Line 28: / Line 36: @@
 ^ filename ^ description ^
 |{{:config_guide.pdf|config_guide.pdf}}|AMS-IX Port Configuration Hints 1.24 (mirror) ([[http://www.ams-ix.net/technical/config_guide/|original]]) |
+<note tip>
+**MTU diferences between JUNIPER and CISCO** - Cisco includes ip and icmp header size in the total specified packet size. Payload in the case is 1510-20-8 = 1482 bytes. Juniper adds icmp and ip header to the payload size you specify. So 1510 becomes 1538 bytes of ip packet.
+</note>
 **Useful tools**
@@ Line 43: / Line 56: @@
 | **[[http://freeworld.thc.org/thc-hydra/|THC-Hydra]]** | A very fast network logon cracker which support many different services|
 | **[[http://www.nta-monitor.com/tools/ike-scan/|ike-scan]]** | ike-scan is a command-line tool that uses the IKE protocol to discover, fingerprint and test IPsec VPN servers. It is available for Linux, Unix, MacOS and Windows under the GPL license. |
+| **[[http://tcpick.sourceforge.net/index.php|Tcpick Tcp Stream Sniffer and Connection Tracker]]** | tcpick is a textmode sniffer libpcap-based that can track, reassemble and reorder tcp streams. Tcpick is able to save the captured flows in different files or displays them in the terminal, and so it is useful to sniff files that are transmitted via ftp or http. It can display all the stream on the terminal, when the connection is closed in different display modes like hexdump, hexdump + ascii, only printable charachters, raw mode and so on. Available a color mode too, helpful to read and understand better the output of the program. Actually it can handle several interfaces, including ethernet cards and ppp. It is useful to keep track of what users of a network are doing, and is usable with textmode tools like grep, sed, awk. |
+| **[[http://www.brendangregg.com/chaosreader.html|Chaosreader]]** | A open source tool to trace TCP/UDP/... sessions and fetch application data from snoop or tcpdump logs. This is a type of "any-snarf" program, as it will fetch telnet sessions, FTP files, HTTP transfers (HTML, GIF, JPEG, ...), SMTP emails, ... from the captured data inside network traffic logs. A html index file is created that links to all the session details, including realtime replay programs for telnet, rlogin, IRC, X11 or VNC sessions; and reports such as image reports and HTTP GET/POST content reports. Chaosreader can also run in standalone mode - where it invokes tcpdump or snoop (if they are available) to create the log files and then processes them. |