Security Onion – from traffic to analyst
In the past months I’ve been using Security Onion in relation to one of my school projects and lately to[…]
Read moreInformation Security and Privacy down to technical specifics. Includes research and analysis, projects and more.
In the past months I’ve been using Security Onion in relation to one of my school projects and lately to[…]
Read moreSniffing traffic is relatively easy enough. You just fire Wireshark up and look at the packets. Intercepting traffic and modifying[…]
Read moreI managed to land in Denmarks second largest hospital, the Odense University Hospital (refered as OUH in danish). Since i’ve[…]
Read moreWhen monitoring a network one must keep in mind different known or unknown IP addresses. For a monitoring system setup[…]
Read moreIn a previous article i’ve talked about how you can sniff traffic on LAN using ARP. In this article we[…]
Read moreSnort first started as a packet sniffer. Another common example of a packet sniffer is tcpdump, or its graphical big[…]
Read moreWhat is ARP ARP stands for Adress Resolution Protocol. It is the protocol that associates MAC addresses with IP addresses.[…]
Read morePCAP stands for Packet CAPture. A PCAP file holds network traffic/packet information, captured in a certain period. Uses Network forensics[…]
Read moreWhile looking for the Snort GUI that will suit my needs, i came across various software and linux distros. Two[…]
Read moreIt is basically useless to run great pieces of software if they are not configured according to user/system needs. An out[…]
Read more