Showing posts with label network forensic. Show all posts
Showing posts with label network forensic. Show all posts

30 September 2022

Sejarah ip yg pernah pc ubuntu anda pegang

 history of ip has been assign to your pc


Ada 2 command yg boleh senaraikan IP yg pc anda dapat dari DHCP.


1) sudo cat /var/log/syslog | grep -Ei 'dhcp' | grep ip_address

2) sudo journalctl | grep -Ei 'dhcp' | grep ip_address

05 February 2021

Nyahkod (decode) packet capture by ids

 Biasanya IDS akan simpan packet dalam bentuk base64.


Utk lihat packet dalam bentuk asal:

1) decode base64 ke format HEX (eg: https://cryptii.com/pipes/base64-to-hex)

2) Parse hex dan display dalam proper network layer (eg: https://hpd.gasmi.net/ ,  http://packetor.com/)




Eg:

https://cryptii.com/pipes/base64-to-hex




https://hpd.gasmi.net/