User Tools

Site Tools


linux

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
linux [2019-09-12 T 17:58]
admin [netstat]
linux [2022-03-28 T 19:07] (current)
admin [dig]
Line 1065: Line 1065:
   * -D to list available interfaces   * -D to list available interfaces
   * -n does not resolve name servers, useful if in a slow devices   * -n does not resolve name servers, useful if in a slow devices
 +  * -e Shows Mac address
   * src [ip] / dst [ip] shows you lines with that source or desitnation ip respectivly.    * src [ip] / dst [ip] shows you lines with that source or desitnation ip respectivly. 
   * proto [protocal] for types of packages   * proto [protocal] for types of packages
Line 1078: Line 1079:
   sudo tcpdump -i eth0 ether host aa:bb:cc:11:22:33   sudo tcpdump -i eth0 ether host aa:bb:cc:11:22:33
 This is an excellent page for more options: https://danielmiessler.com/study/tcpdump/#gs.lU0pRcE This is an excellent page for more options: https://danielmiessler.com/study/tcpdump/#gs.lU0pRcE
 +==== dig===
 +Use dig to easily lookup what the DNS entry of an ip is.
 +  dig [host] [options]
 +Some options
 +  * +short to just show the IP address entry
 +Example to look up what IP google has and what Ip it returns:
 +  User@mend:~#dig google.com +short
 +  142.251.46.238
 ==== SSH ==== ==== SSH ====
 ssh stands for secure shell. It is a service that allows for you to remote access a terminal using encryption. It is very universally standard and exists on most linux systems or can be easly installed ssh stands for secure shell. It is a service that allows for you to remote access a terminal using encryption. It is very universally standard and exists on most linux systems or can be easly installed
Line 1277: Line 1286:
   * The package name in ubuntu/debian is snmp   * The package name in ubuntu/debian is snmp
   * The package name in Centos/RHEL is net-snmp   * The package name in Centos/RHEL is net-snmp
 +=== snmpstatus===
 +To get the status of if snmp and if it is running on a device you need to know the IP of the host, the community string, and the version
 + snmpstatus -c [community] -v [version] [host]
 +For example
 + snmpstatus -c public -v 2c 192.168.0.99
 === snmpwalk and snmpget=== === snmpwalk and snmpget===
 snmpwalk is a tool to scan for snmp. To install you you just install the package called snmp snmpwalk is a tool to scan for snmp. To install you you just install the package called snmp
Line 1358: Line 1372:
   * http://www.net-snmp.org/docs/man/snmpd.conf.html#lbAF << For extended details of the man page for access control of snmpd   * http://www.net-snmp.org/docs/man/snmpd.conf.html#lbAF << For extended details of the man page for access control of snmpd
   * http://net-snmp.sourceforge.net/wiki/index.php/Vacm#VACM_Masks.2C_or_How_to_restrict_access_to_a_particular_index_.28row.29_in_a_Table << More info about masks for access   * http://net-snmp.sourceforge.net/wiki/index.php/Vacm#VACM_Masks.2C_or_How_to_restrict_access_to_a_particular_index_.28row.29_in_a_Table << More info about masks for access
 +  * https://mibs.observium.org/ << A big database of MIBs
 +  * http://www.circitor.fr/Mibs/Mibs.php << Another big databse of MIBs
 ==== iperf ==== ==== iperf ====
 Iperf is a way of transferring bulk benign files to see pure transfer rates. Here is a good tuturial: [[http://openmaniak.com/iperf.php#iperf-w|http://openmaniak.com/iperf.php#iperf-w]] Iperf is a way of transferring bulk benign files to see pure transfer rates. Here is a good tuturial: [[http://openmaniak.com/iperf.php#iperf-w|http://openmaniak.com/iperf.php#iperf-w]]
Line 1384: Line 1400:
   * -p shows PID   * -p shows PID
   * -n shows numerical addresses instead of trying to determine symbolic host, port, or user names   * -n shows numerical addresses instead of trying to determine symbolic host, port, or user names
 +====SSL Cert==== 
 +A secure socket layer certificate is used to authenticate a website with various authorities that give out certificates. It allows for a url to operate has https within a browser or any service that accesses that domain. This is not really a network tool, but rather a security tool for domains within a network. 
 +===Cert basics and location=== 
 +A certificate is a file with an encryption key. It uses public key cryptography between the web client, like your browser, and the server, or the website you are trying to access with https. The file is located in a few different locations depending on what system you have. Ultimately though you will be defining where the file is with the httpd.conf file. More about that below 
 +===Obtain cert=== 
 +First you must obtain the cert. Certs can be found with some hosting providers like godadd, or with a free service like https://letsencrypt.org/ 
 +===conf file=== 
 +There is an ssl.conf file but that just has to do with paramiters of how you want ssl to work. You will need to locate the httpd.conf file and make sure that your cert files are pointed to the right locations. here is an example /etc/httpd/conf/httpd.conf configuration: 
 +  SSLCertificateFile /root/sslcerts/ca.crt 
 +  SSLCertificateKeyFile /root/sslcerts/ca.key 
 +  SSLCertificateChainFile /root/sslcerts/ca.bundle
  
  
linux.1568311090.txt.gz · Last modified: 2019-09-12 T 17:58 by admin