I just discovered tcpdump. I almost had an orgasm. Think of the 3-year-
old kid that just discovered his penis.

When I show this to the PHB - I mean, my god! Got Firewall?


Cheers!
Rich

On Sat, 06 Mar 2004 07:27:48 +0000, Rich Grise wrote:

> I just discovered tcpdump. I almost had an orgasm. Think of the 3-year-
> old kid that just discovered his penis.
>
> When I show this to the PHB - I mean, my god! Got Firewall?
>
>

Wait until you go wireless with airsnort. In the meantime, try wired
snort and dsniff. You'll have to take the week off of work after playing
with dsniff.

on 2004-03-06, in <pan.2004.03.06.08.40.48.220139@nospammerz.ucdavis .edu>,
these words of wisdom from Ryan did appear:
> On Sat, 06 Mar 2004 07:27:48 +0000, Rich Grise wrote:
>
>> I just discovered tcpdump. I almost had an orgasm. Think of the 3-year-
>> old kid that just discovered his penis.
>>
>> When I show this to the PHB - I mean, my god! Got Firewall?
>>
>>
>
> Wait until you go wireless with airsnort. In the meantime, try wired
> snort and dsniff. You'll have to take the week off of work after playing
> with dsniff.

Well, I showed the boss the output of tcpdump this morning, and he didn't
like it. He said, "If I want to spy on people, I'll put fuckin' cameras
all over and watch what they're doing all the time." Frankly, I was kind
of surprised. But I guess "reject anybody else's idea" has a higher
priority in his neuron than "find out who's cheating me." His partner Don,
the Luddite, asked me specifically if it's possible to do something like
that, so I ass-u-med that he'd want to to. I'll have to tell him to not
let Joe (the PHB) find out I'm doing it, of course, but uncommunication
between those two is the norm.

I want to run a log, primarily because I'm the one paying the DSL bill.

But I ramble.

Cheers!
Rich

On Sat, 06 Mar 2004 16:33:07 +0000, Rich Grise wrote:

> on 2004-03-06, in <pan.2004.03.06.08.40.48.220139@nospammerz.ucdavis .edu>,
> these words of wisdom from Ryan did appear:
>> On Sat, 06 Mar 2004 07:27:48 +0000, Rich Grise wrote:
>>
>>> I just discovered tcpdump. I almost had an orgasm. Think of the 3-year-
>>> old kid that just discovered his penis.
>>>
>>> When I show this to the PHB - I mean, my god! Got Firewall?

tcpdump doesn't do switched networks I don't think, snort doesn't from
what I could tell and it is a modification of tcpdump. dsniff I haven't
actually tried yet but I am almost positive that it can sniff switched
networks. Careful though, breaking into a switched network is cake to do
and cake to detect an intrusion.

-ryan

Rich Grise wrote:

> I just discovered tcpdump. I almost had an orgasm. Think of the 3-year-
> old kid that just discovered his penis.
>
> When I show this to the PHB - I mean, my god! Got Firewall?
>
>
> Cheers!
> Rich
>
Recently I bought a book named "Network Intrusion Detection" (written by
Stephen Northcutt / Judy Novak). It's really interesting for getting
familar with all that stuff. It's especially focused on tcpdump.