@webernetz

IT-security, networks, #IPv6, #VPN, #DNSSEC, #NTP. Christian, husband and father of three. 🇩🇪

 Butzbach, Deutschland
weberblog.net
Joined October 2013
  • Tweets6K
  • Following263
  • Followers1.9K
728Media
This is it: The Ultimate PCAP. A single downloadable #pcap with more than 50 network protocols! Use it as your single #Wireshark sample file. weberblog.net/the-ultimate-p…
10
85
16
271
I had hoped that Twitter would recover. But after Elon's latest actions, I will avoid this platform as well. What a pity. I have enjoyed spending the last decade here, but now it's over!
2
1
423
If you want to follow the blog, you can do so via the classic RSS feed, weberblog.net/feed/, or via my LinkedIn profile, linkedin.com/in/johannes-web…. I hope to see you again elsewhere. Bye-bye, Twitter.
1
239
Interesting #IPv6 bug on FortiOS (at least 7.6.1): "get router info6 routing-table" does not show the default route (same in the GUI), learned via an RA on wan1, while "diagnose ipv6 route list" does. 🤔
4
2
6
948
#IPv6-related bug on FortiOS 7.6.1 (at least): RSs are not replied by RAs. Clients have no working IPv6 until the first regular RA kicks in. Workaround: Lowering the ip6-min-interval and ip6-max-interval values.
1
3
7
1,027
I'm facing a weird problem related to DHCPv6 between a FortiGate (client) and a Fritzbox (server). The final Reply has a "NoBinding" status code. All messages seem valid to me. Maybe because of the 3-second delay before the Request? Any thoughts? @ehorley @AVM_DE @Fortinet
2
1
2
595
I tried FortiOS 7.6.1, and it IS working. ✅ Don't know why. ;) The 3-second delay is still there, but the Fritzbox now sends a valid reply. 🤷🏼
2
4
543
Configuring IPv6 on a Palo: Setting exactly what you want, commit, works✅ Configuring IPv6 on a Forti: GUI vs. CLI, which commands are needed?, testing, validation error, typing again, googling, next end next, GUI vs CLI, reading docs vs. blog posts, Wiresharking, not working❌
1
2
342
"This may require a reboot. I am not sure of that, and it might depend on FortiOS version. I think FortiOS 6.0.1, where I tested that, just needs a couple minutes time to assign the interface its address, but I’m not 100% certain of that." thorsten-on-tech.blog/2018/0…
1
167
Has anyone of you ever heard of SCION, the "Scalability, Control, and Isolation On Next-Generation Networks"? en.wikipedia.org/wiki/SCION_…

SCION (Internet architecture) - Wikipedia

en.wikipedia.org
2
227
Eine Lektüre fürs Wochenende. ;) #DNS
Weberblog.net@weberblog_net6 Dec 2024
Das Domain Name System #DNS weberblog.net/das-domain-nam…
2
2
312
Johannes Weber 🎸 retweeted
Weberblog.net@weberblog_net27 Nov 2024
It’s Always #DNS! @ SharkFest’23 EU weberblog.net/its-always-dns…
1
4
4
267
Johannes Weber 🎸 retweeted
Weberblog.net@weberblog_net21 Nov 2024
It’s Always #DNS – Poster weberblog.net/its-always-dns…
4
6
469
It's always #DNS, isn't it? Here's my at-a-glance poster showing the most common DNS message types and servers. A little more than the common "query-response" sketches. ;) weberblog.net/its-always-dns…
2
7
316
Fact!
Kaon Thana
@kaonthana11 Nov 2024
ipv6 is just a theory
1
335
"Currently, Palo Alto firewalls do not support IPv6 geo-location, which is why the traffic logs show the location as 'unknown'." Palo Alto Networks, Nov. 2024. #IPv6
5
2
2
45
5,330
*DEATH*: Detection Engineering and Threat Hunting Haha, yet another acronym, learned from Stephen Donnelly, at @wiresharkfest '24 EU.
1
3
277
Whoever was on the "Packet Doctors" session at @wiresharkfest this day: There was a discussion concerning TCP RSTs and how they are "spoofed" by intermediate firewalls. Here are some more information about those scenarios: weberblog.net/who-sends-tcp-…
2
3
289
Heute mal Off-Topic unterwegs: Laden an öffentlichen Ladesäulen - Ein Erfahrungsbericht. (Spoiler: unterirdisch!) weberblog.net/laden-an-offen…
1
2
232
Johannes Weber 🎸 retweeted
WireSharkFest@wiresharkfest30 Oct 2024
Here's the last round of #sf24eu agenda highlights! - Dissect malware by collecting syscalls with #eBPF(Thomas Labarussias) - Deep Dive into #ICMP 'Destination Unreachable' Messages(@webernetz) - Dissector dev design notes(Jaap Keuter) See you in Vienna! sharkfest.wireshark.org/sfeu
3
5
304
Alongside my classical "NAT -> IPv6" sticker, I’ve created a new one for the "Ultimate PCAP." It arrived just in time for the SharkFest @wiresharkfest next week. See you in Vienna – hopefully. ;) A #PCAP is worth a thousand words!
1
2
14
547
Load more