132 reputation
16
bio website
location
age
visits member for 5 years, 5 months
seen Oct 6 at 20:35

May
8
comment Server Log Format
How does %h have 3 different values in the example John has given?
May
8
awarded  Organizer
May
8
revised Server Log Format
Trying to add some tags to help get answers
May
8
suggested approved edit on Server Log Format
May
1
comment How to separate PCAP by unique IP address
Awesome. I need to get better at using the tools at my disposal. This helps immensely.
May
1
accepted How to separate PCAP by unique IP address
May
1
comment How to separate PCAP by unique IP address
Thanks, this is simple and easy way to go about it. Do you know a way to pull the time from the last occurrence of a particular IP?
May
1
revised How to separate PCAP by unique IP address
added 124 characters in body
May
1
comment How to separate PCAP by unique IP address
@mgorven The pcap is from the entrance router to a /24 subnet which is communicating with several other subnets on the network. The attacks are coming from a unique /24, but I want to include the non-attack traffic in each individual pcap and not just the traffic from the unique attacking IP.
May
1
comment How to separate PCAP by unique IP address
@resmon6 Yes, I want to separate them into timeframes, but I don't have consistent time intervals which work for this. I've looked at tshark and editcap, but neither provide the functionality I need. I ended up manually finding good times to cut the pcap and then using tshark to cut at those times.
Apr
30
asked How to separate PCAP by unique IP address
Mar
30
asked OpenNHRP configuration without IPsec
Mar
15
awarded  Notable Question
Nov
25
awarded  Supporter
Jun
3
awarded  Popular Question
Jul
21
awarded  Scholar
Jul
21
awarded  Student
Jul
21
comment Changing pam.d/system_auth?
is there any reason that authconfig could be run by something else and nullify my changes?
Jul
21
accepted Changing pam.d/system_auth?
Jul
21
asked Changing pam.d/system_auth?