Posts

Showing posts from May, 2020

Set up a OpenVPN access server with free resources on Oracle Cloud Infrastructure

Image
A easier approach of setting the whole thing up https://blogs.oracle.com/developers/post/launching-your-own-free-private-vpn-in-the-oracle-cloud#:~:text=Launching%20Your%20Own%20Free%20Private%20VPN%20In%20The,5%20Testing%20The%20VPN%20...%206%20Summary%20 Apply for a free Oracle Cloud free tier Sign up at https://www.oracle.com/cloud/free/ When asked to select a region, pick up that states "always free". After you sign up, sign in at https://www.oracle.com/cloud/sign-in.html Create a new virtual machine instance After log in, click on the hamburger icon on the top left. Then select "Compute" -> "Instances". Click on the "Create Instance" button. In the subsequent screen, name the virtual machine, select an image (recommend: Ubuntu 16.04), select a shape (select a always free one if needed), upload your ssh public key. Then click the "Create" button to create the VM. In the next page, wait until you see the publ

Traffic analysis using tcpdump and wireshark

Useful capture filters To and from a particular IP host x.x.x.x All traffic in a particular subnet net 192.168.0.0/24 Focus on a particular mac ether dst xx:xx:xx:xx:xx To a particular IP dst host x.x.x.x Capture traffic on particular port only port 53 Capture all traffic except DNS and ARP traffic port not 53 and not arp Useful wireshark display filters Focus on traffic between x.x.x.x and y.y.y.y (ip.src == x.x.x.x and ip.dst == y.y.y.y) || (ip.src = y.y.y.y and ip.dst == x.x.x.x) Focus on particular port tcp.port eq 25 Focus on particular protocol icmp See if there are any retransmitted packets (due to previous loss) tcp.analysis.retransmission or tcp.analysis.fast_retransmission Look at ip traffic only ip Look at vlan traffic only vlan Parts of packets to look at  14:02:09.181190 specto.ksl.com.33248 > quasi.ksl.com.ftp: S 1191864640:1191864640(0) win 5840 (DF) win * 2^wscale: receive buffer size. You could find them in SYN and SYN/ACK