Wireshark - www.m00nie.com

Wireshark

A collection of 5 posts

6to4 Tunnelling (GNS3 Lab)

6to4 Tunnelling (GNS3 Lab)

This is a quick lab to look over how 6to4 tunnelling can be implemented using GNS3 1.3 and 3725 (running c3725-adventerprisek9-mz124-15.image). The topology will be as below but the important part if the colouring of the network segments and noticing the middle/core is purely IPv4 only! Our

Decrypt HTTPS (SSL/TLS) with Wireshark

Decrypt HTTPS (SSL/TLS) with Wireshark

Wireshark has some very nice SSL/TLS decryption features tucked away although you need either of the following two: * Access to the servers private pki key * Access to the client machines and its (pre)master secrets (also need Firefox or Chrome) Unfortunately, dumping the premaster secret was removed in FireFox

DMVPN setup with PSK (GNS3 Lab)

DMVPN setup with PSK (GNS3 Lab)

Dynamic Multipoint VPNs (DMVPN) offer a low admin overhead and scalable VPN solution. It is also efficient at routing traffic as it can dynamically reconfigure itself from a hub and spoke to a partial or full mesh topology! This means that not all traffic has to pass through the hub

Use tcpdump to analyse HTTP POST data

Use tcpdump to analyse HTTP POST data

Today it has been useful to look at POST data being sent to this webserver. A nice filter to do this at the console with tcpdump is: tcpdump -s 0 -A 'tcp dst port 80 and (tcp[((tcp[12:1] & 0xf0) >> 2):4] = 0x504f5354)' This will capture and output

Create graph of bytes/s in open office from a Wireshark trace file

Create graph of bytes/s in open office from a Wireshark trace file

Since Im not studying for anything "official" at the moment I'm trying to learn more about the various tools I use most days. Hopefully there will be some useful posts in the coming days to help me stretch my memory muscle a bit :p This post shows how you can