The First Internet Router

Wonderful, explanation and salvage of an original Internet router.

Enjoy the video!

Network Attack Signature List

Intruder Alert!

How did I learn the basics about network attack signatures?

Using the Cisco IOS Firewall IDS Signature List.

59 basic attack signatures
The signatures are categorized into four types:

(Info Atomic) -Information-gathering actions such as a port scans.
Example:
2005 ICMP Time Exceeded for a Datagram (Info, Atomic)
Triggers when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP) and the "type" field in the ICMP header set to 11

(Info Compound)-Attacks attempted into the guarded network.
Example:
3151 FTP SYST Command Attempt (Info, Compound)
Triggers when someone tries to execute the FTP SYST command.

(Attack Atomic) - Simple intrusion patterns
Example:
1101 Unknown IP Protocol (Attack, Atomic)
Triggers when an IP datagram is received with the protocol field set to 101 or greater. These protocol types are undefined or reserved and should not be used

(Attack Compound)- Intricate patterns or series of operations divided across many host over a specific period.
Example:
3050 Half-open SYN Attack/SYN Flood (Attack, Compound)
Triggers when multiple TCP sessions have been improperly initiated

Very good article at http://ciscoarticles.com/CCSP-Cisco-Certified-Security-Professional/CIDS-Log-Files.html

Enjoy!

Wireless Support Call

TechSupport : How can I help?
Caller: My wireless device is broke.
TechSupport: What type of wireless device?
Caller:.( Ding..sounds in the background ) Hold on I have to get my lunch out of the microwave.

Wireshark Source Code Visualization

Wireshark Source Code History from CACE Technologies on Vimeo.

Video graphically depicts the development of Wireshark Source Code History

The video was created with the aid of Codeswarm.
Codeswarm software visualization.
The code is open source and available at http://code.google.com/p/codeswarm.

Have fun!

Wireshark Forensic Quick Bite

"Play as hard as I work with this mouse."


Nicely done wireshark quick reference forensic videos.

http://evilrouters.net/extracting-pdf-from-http-stream.html

http://evilrouters.net/extracting-objects-from-http-streams.html

Enjoy!

Internet malformed packet museum

Very creative and funny  packet museum.

http://lcamtuf.coredump.cx/mobp/

Enjoy!

Internet Warriors -Warriors on the Net

Q: What was the first video about networking that held your interest ?

A: www.warriorsofthe.net

Great graphics and easy to follow dialog.