Archive for the ‘Network Engineering’ Category

PHP IPv6 address to Decimal Format Conversion

Storing IP addresses in database as decimal have several advantages on storing as a string (storing, efficiency, processing… etc). But my goal was to be able to easily query if an IP address is in a block or between a given IP range. The following two functions are often handy for converting a string IPV6 [...]

Large Scale Bayesian Inference for Network Tomography

1 Introduction Major goal of network tomography is to infer the internal characteristics of network by only using data from the end nodes. Each node can either be a computer, router or a subnetwork. Broadly speaking large-scale network inference involves estimating network parameters (can be performance or other) based on traffic measurements at a limited subset of nodes [...]

Reverse Engineering Tools for Linux

objdump – displays information from object files. strace – trace system calls and signals ltrace – A library call tracer etrace – is a configurable static port network tracing tool, similar to traceroute, but supporting ICMP, TCP, UDP and other IP protocols. gdb –  The GNU debugger valgrind – a suite of tools for debugging [...]

Strange Request For Comments

Below I list some of the RFC’s that I find interesting: I wondered about the first RFC written and found out that it is entitled as Host Softwares dating back to 1969. If you have a look at the RFC 1 you’lI notice that how RFC’s were simpler in that era. In June 1973 RFC [...]

Measure the temperature of the system in Linux

In linux you can use lm-sensors to measure the temperature and the pc health of the system. Via the following snippet you can monitor the system by refreshing the statistics every 2 seconds: #!/bin/bash while [ 1 ]; do sensors; sleep 2; clear; done; Related Posts:No Related Posts

Network Anomaly Detection

Anomaly detection is one of the most important aspect of Network Security Monitoring. Most of the current approaches in Network Intrusion Detection Systems use signature based techniques. Recently data-mining approaches become popular and many paper published about that topic. Supervised data-mining approaches rely on some kind of training data. But for network traffic, it is [...]

A Brief Guide to Socket Programming in C

This brief guide is prepared for the people who knows C and have some knowledge about computer networks and protocols. This guide is mainly a summary of several resources indicated in the resources part. For the folks who want to get more information related to some fundemental knowledge related to essentials of computer networks. Please [...]

Stateful and Stateless Firewalls

Firewalls are one of  the most important part of your network defense because most of your traffic data flows through them. Stateless Firewalls Stateless Firewalls are the most basic and they are the most common type of firewalls. Stateless Firewalls(SlF) basically watch the traffic and compares the packets with the rules from its rules database. [...]

nfdump and its tools

nfdump is a wonderful tool(or set of tools) for netflow data. nfdump basically used for capturing netflow data and processing them. nfdump comes with the following tools: nfcapd – netflow capture daemon. Reads the netflow data from the network and stores the data into files. Automatically rotate files every n minutes. ( typically ever 5 [...]