Recently I was asked how to take a pcap and replay it through a firewall doing NAT. This is actually quite complicated since you’ve got to keep in your head about 4 different variables as well as a complicated test bed configuration. Continue reading
I just made a number of small tweaks to the site layout and format which I think cleans things up a bit. The biggest change is the new Archives widget which makes organization a lot cleaner.
On a side note, I’ve switched gears a little and put tcpreplay on hold while I start a new project called Cabernet. One of my guilty pleasures in life is wine and I have so many bottles that it’s actually hard to know what I have and where various bottles are. I hope Cabernet becomes an easy to use wine management system for individuals who have a few hundred to a few thousand bottles.
Dan Rather’s excellent investigative report on electronic voting asks questions which haven’t gotten a lot of press lately. Ignoring the continued problems with the software running on these voting machines, Dan Rather looks at the hardware itself. Continue reading
So I was flying out of LaGuardia, NY (LGA) this morning on my way home to San Jose, Ca (SJC). After checking in, I was directed by the nice woman at American Airlines to take my checkin bags to the x-ray machine.
There were a lot of bags piling up at the machine and 2-4 TSA agents processing the bags thru the x-ray machine and loading them onto the conveyer belt to the plane. What struck me odd though was that none of the TSA agents actually sat at the x-ray machine console to examine the x-ray images of the bags!
I watched for about 10 minutes as the rest of my party went through the long lines to get their boarding passes. Every few minutes one of the TSA agents would press a button on the computer to restart the x-ray machine and/or check off a form on a piece of paper. He or she would sometimes look at the computer screens for a few seconds, but anywhere from 5-15 bags would be processed in between… hardly enough time for the TSA agent to be able to examine the bags for any dangerous items or contraband.
Just released tcpreplay 3.1. Mostly a bug fix release, but there are some minor enhancements including support for 802.11 and Radiotap DLT types. As always, check out the changelog for a specific list of changes.
Update: 3.1.1 was just released which fixes a serious compile issue for most people. *sigh*
How many ways do I hate thee? Let me count the ways:
Not sure what’s up with python, but it’s not able to find all the libraries anymore, hence the tcpreplay website is down until I get things back together… [Update] Well DarwinPorts completely screwed things up and had two different versions of python installed with mod_python built against one version and everything else against another. Basically had to rebuild everything, but finally got it back up. Continue reading
So there’s an on-going argument about Stillsecure’s use of Snort.
Continue reading
So I’ve been working on the bits and bytes of SSL a lot lately which has required me to look at the OpenSSL code. Long story short, it’s not the prettiest code I’ve ever seen (by a long shot). But it does have a few gems. This gem is going to one of my new interview questions:
void update(unsigned char *buf) {
int i;
for (i = 7; i >= 0; i--) {
++buf[i];
if (buf[i] != 0) break;
}
}
I needed some fast disk space for working on my photos and after some research settled on a pair of Western Digital My Book Premium ES 500GB drives and a Siig eSATA ExpressCard/34 card to connect them to my Mac Book Pro. Continue reading