home.social

#packetcapture — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #packetcapture, aggregated by home.social.

  1. I think I've worked out why my string matching in `iptables` hasn't been working.

    When I do get it to log, it's reporting 64 byte packets. For packets that Wireshark says are 78 bytes. Because it's just reporting the IP frame size, not the full Ethernet frame size. And so my offsets have been out by an Ethernet header size that I assumed was in the packet calculations.

    Because it's IP Tables, of course 😑

    #PacketCapture #Networking #SysAdminProblems

  2. Released a new tool, packet-monkey:

    github.com/timb-machine/packet

    Packet Monkey is a tool to filter and classify PCAPs using Wireshark filters. I use it for layer 2/3 traffic analysis on engagements.

    #tool, #code, #packetcapture, #trafficanalysis, #wireshark

  3. So there is an NDIS Capture driver in the virtual switches for Hyper-V... guess what you can do with those? :o) #pcap #packetcapture #networkforensics #dfir

  4. Spyware Discovered on All Samsung Phones - Samsung may have the highest-end options for hardware if you want an Android smartphone, but that ... more: hackaday.com/2020/01/09/spywar #securityhacks #packetcapture #preinstalled #smartphone #security #server #china #osint #phone #virus #app