tcpdump: reading the wire
There is no substitute for actually looking at what your machine is sending and receiving. tcpdump has been around forever, and it is still the best tool for the job.
Long-form thinking on cyber defence, detection, and resilience — from Slackware-era honeypots through to AI-driven SOC analytics.
Showing posts tagged networking — 2 results.
There is no substitute for actually looking at what your machine is sending and receiving. tcpdump has been around forever, and it is still the best tool for the job.
A walk through my very first packet filtering rules on Slackware, written deliberately badly so I can explain what was wrong with each one.