Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [packets]

54 questions
0
votes
1 answer

tcpdump: can't create rx ring on packet socket: Cannot allocate memory

I've been using tcpdump without any issues before this error popped up. I use the following two commands with variations as soon as my server is attacked so the packets automatically get dumped if the packet rate is high. tcpdump -i eth0 -p -nn -s0…
Asad Moeen
  • 419
  • 3
  • 11
  • 22
0
votes
1 answer

How to get syn flags, ack flags, sequence number and acknowledgement number in tcp packets with nfqueue?

I am working on a project which can redirect the network traffic in tcp (packets sent by client to server1 will be redirected to server2) with netfilterqueue, so I need to classify the packets by their syn and ack flags, and I also needs to modify…
Alive
  • 1
0
votes
2 answers

Do routers need to have assigne IP from given VLAN to foward VLAN packages?

(sorry for my basic question but I had noone to ask) Does routers/smart-switches that foward/pass vlan packets inside same network need to have assign IP from that given VLAN that they foward packets (thru TRUNK port) or they only need one IPfrom…
Va_ni_tas
  • 26
  • 2
0
votes
1 answer

TCP/IP packet transmission through NAT

Why my TCP packets do not reach the destination? I send http requests from one PC to another PC, both behind NAT: PC1 behind NAT1, runs Wireshark. PC2 behind NAT2, this one sends http requests. To open access on NAT1 from outside, in the browser…
user3013157
  • 1
-1
votes
1 answer

iptables matching pattern followed by 4 random values followed by another pattern

I'm trying to create a iptables rule that matches the following pattern in this UDP packet: 0x0000: 0000 030a 0000 0000 0000 0000 0000 0800 ................ 0x0010: 4500 0027 5d30 0000 6c11 232a 5164 585d E..']0..l.#*QdX] 0x0020: c0a8 6402 fe25…
Tryhard3r
  • 1
-1
votes
1 answer

How to prevent Source Engine Query DDoS Attack?

I recently started a game hosting company and one of my boxes is being hit very hard by what i believe is a botnet(getting thousands of ip addresses sending traffic to a port where a game server is located.) I managed to log onto the server and…
Jack
  • 1
  • 1
-1
votes
1 answer

the MAC header of captured wireshark packets

I have been reading about the IEEE 802.11 and especially on the MAC layer, and i noticed that it contains a lot of informations, but when i start to capture with wireshark with my wireless card, the MAC (Ethernet) header showing in wireshak contains…
Sidahmed
  • 141
  • 1
  • 1
  • 7
-2
votes
1 answer

I need to block all but one IP address from access to Mongo running on my local Mac using packet filter

Could someone help me block all incoming traffic on my network which has port forwarding set up on the router to allow incoming requests on port 27017 to be sent to the Mac running Mongo internally except for one IP address which I can specify? I…
rdiddly
  • 101
  • 1
-3
votes
2 answers

What is the reason to use SSL on websites if it can be decrypted easily?

Since SSL can be decrypted easily using a basic man in the middle node, whats the reason to continue using it? Don't most ISPs decrypt on a daily basis using Deep Packet Inspection? And isn't it possible to put a MITM node at any hop along the…
Matt B
  • 99
  • 1
  • 1
  • 8
1 2 3
4