This section contains general information, tips and tricks, light reading, entertainment and other general fodder. Enjoy!
So often in Wireshark videos and classes we spend a lot of time on TCP behavior. But what I am about to discuss is hardly ever brought up. The answer to version is simple right? Version 4. OK, kind of right, but overlooking too much. The truth is that there are multiple “versions” of TCP, […]
Which Version of TCP are you using? Read More »
Retransmissions of frames in WLANs (Wireless Local Area Networks) can become problematic for several reasons, primarily due to the nature of the wireless medium. While retransmissions are a necessary part of ensuring data integrity in unreliable networks, they can cause inefficiencies and degrade network performance. I will get to the details below, but let’s start
Recognizing WLAN Retransmissions is a Critical Skill Read More »
As most of my readers, students, and clients know, I absolutely love Wireshark. I deeply am infatuated with Wireshark’s Profiles, more properly called configuration profiles. So much so that many years ago now, I set up the first Wireshark Profiles Repository. 100’s of thousands of downloads have resulted, and I hope I have helped the
Automatically Switch Configuration Profiles in Wireshark Read More »
It’s always tough to do these Top 10 posts. I mean, depending on your job, where you access the network, what it is you are trying to do, you may have some favorite tcpdump commands that I don’t show here. That said, lets take a look at some great tcpdump commands. By the way, you
Top 10 Tcpdump commands Read More »
That’s right folks. I have been searching and searching. I actually gave up for a while as the only thing available was PCIe based adapters. Well that all changed with a search today and this showed up: Here is the link. Keep in mind you need a Wi-Fi 7 router as well to get the
A Wi-Fi 7 Tri-Band USB Adapter now available on Amazon Read More »
A CLEAR WORD OF CAUTION – ONLY USE THIS TOOL WHERE YOU HAVE PERMISSION. THIS ARTICLE IS OFFERRED FOR LEARNING PURPOSES ONLY. Hping3 is a network tool designed for packet crafting and analysis, similar to Scapy but with a more command-line-oriented interface. It is often used for testing and troubleshooting network infrastructure, performing security assessments,
What is, and how can you use hping3? Read More »
Windows Firewall allows you to control the traffic entering and leaving your system through various rules. You can create and configure firewall rules to permit or block specific network activities. Below are some examples of Windows Firewall rules, including inbound and outbound rules: Example 1: Allow Inbound Traffic on a Specific Port (e.g., HTTP –
Configuring Windows Firewall Rules using netsh Read More »
Configuring a firewall rule in Ubuntu typically involves using iptables or nftables. I have written a separate article on iptables here. What if we wanted to make life a little less involved. The answer is ufw (Uncomplicated Firewall), which is a user-friendly front-end for managing iptables firewall rules. Here’s how you can do it: Step
A Simple Linux Firewall – ufw Read More »
iptables is a command-line utility in Linux that allows you to configure the rules of the packet filtering and NAT (Network Address Translation) framework, known as netfilter, within the Linux kernel. It is a key tool for managing network traffic and implementing a firewall on Linux systems. Here’s an overview of what iptables does and
How to Configure iptables in Linux Read More »
So many folks use Windows and they want to capture Wi-Fi traffic in Monitor Mode using their onboard Wi-Fi adapter, and, for those of us who have tried, we all know how problematic that is. The answer as discussed in my post here is to use an external adapter. Check out these great references as
A List of USB Wi-Fi Adapters that support Monitor Mode Read More »
The whois command is a tool commonly used on various operating systems, including Linux, MacOS, and Windows, to query databases that store the registered users or assignees of an Internet resource, such as a domain name, an IP address block, or an autonomous system. It can provide information such as the domain owner, contact information,
What is the ‘whois’ command? Read More »
Let’s say you wanted to view our site back in 2001. Could you do it? The answer is yes! That’s right, someone has been crawling the web called the Wayback Machine (https://web.archive.org). The Wayback Machine is a digital archive of the World Wide Web and other information on the Internet created by the Internet Archive,
View Historical Web Pages with Wayback! Read More »
In our prior article on companion tools for Wireshark (link), we provided a list of tools that network analysts, operations, maintainers or just curious people should consider. All these were stand alone tools. What about Internet/Web Browser based sites that you may find useful? This thought raises certain issues, like this scenario: the network is
Web Sites that can be Companion Tools to Wireshark Read More »
Wireshark is a powerful network protocol analyzer used by network professionals for troubleshooting, analysis, development, and education. Companion tools can enhance its functionality or help in related tasks. Here are some websites and tools that can be seen as companions to Wireshark: Each of these tools has its unique strengths and can be used alongside
Stand Alone Companion Tools to Wireshark Read More »
This question comes up all the time, and the answers can be quite varied. Seems simple enough at first glance, right? But the problem is that things are not simple, especially in today’s networking. Here are some issues: Now there are a myriad of reasons any of these issues could exist. This article is not
How to discover what is on your LAN (IPv4 and IPv6) or WLAN Read More »
