Johannes Weber 🎸

This is it: The Ultimate PCAP. A single downloadable #pcap with more than 50 network protocols! Use it as your single #Wireshark sample file. weberblog.net/the-ultimate-p…

If you want to follow the blog, you can do so via the classic RSS feed, weberblog.net/feed/, or via my LinkedIn profile, linkedin.com/in/johannes-we…. I hope to see you again elsewhere. Bye-bye, Twitter.

I had hoped that Twitter would recover. But after Elon's latest actions, I will avoid this platform as well. What a pity. I have enjoyed spending the last decade here, but now it's over!

Interesting #IPv6 bug on FortiOS (at least 7.6.1): "get router info6 routing-table" does not show the default route (same in the GUI), learned via an RA on wan1, while "diagnose ipv6 route list" does. 🤔

#IPv6-related bug on FortiOS 7.6.1 (at least): RSs are not replied by RAs. Clients have no working IPv6 until the first regular RA kicks in. Workaround: Lowering the ip6-min-interval and ip6-max-interval values.

I tried FortiOS 7.6.1, and it IS working. ✅ Don't know why. ;) The 3-second delay is still there, but the Fritzbox now sends a valid reply. 🤷🏼

I'm facing a weird problem related to DHCPv6 between a FortiGate (client) and a Fritzbox (server). The final Reply has a "NoBinding" status code. All messages seem valid to me. Maybe because of the 3-second delay before the Request? Any thoughts? @ehorley @AVM_DE @Fortinet

"This may require a reboot. I am not sure of that, and it might depend on FortiOS version. I think FortiOS 6.0.1, where I tested that, just needs a couple minutes time to assign the interface its address, but I’m not 100% certain of that." thorsten-on-tech.blog/2018/06/08/ipv…

Configuring IPv6 on a Palo: Setting exactly what you want, commit, works✅ Configuring IPv6 on a Forti: GUI vs. CLI, which commands are needed?, testing, validation error, typing again, googling, next end next, GUI vs CLI, reading docs vs. blog posts, Wiresharking, not working❌

Has anyone of you ever heard of SCION, the "Scalability, Control, and Isolation On Next-Generation Networks"? en.wikipedia.org/wiki/SCION_(In…

Eine Lektüre fürs Wochenende. ;) #DNS

@ScottEmpson @wiresharkfest Sure. How many do you need? Please dm me.

Introduced my students to @webernetz and his #UltimatePCAP file as they begin their @wiresharkfest journey into packet analysis. Now I want his stickers. They look awesome. I have money for postage!

It’s Always #DNS! @ SharkFest’23 EU weberblog.net/its-always-dns…

It’s Always #DNS – Poster weberblog.net/its-always-dns…

It's always #DNS, isn't it? Here's my at-a-glance poster showing the most common DNS message types and servers. A little more than the common "query-response" sketches. ;) weberblog.net/its-always-dns…

Fact!

"Currently, Palo Alto firewalls do not support IPv6 geo-location, which is why the traffic logs show the location as 'unknown'." Palo Alto Networks, Nov. 2024. #IPv6

@awlnx: Du schreibst ja auch immer wieder was über E-Autos. Ich habe meine ersten Ladeerfahrungen hier mal zusammengeschrieben. Bestimmt hast du auch was dazu zusagen. weberblog.net/laden-an-offen…

*DEATH*: Detection Engineering and Threat Hunting Haha, yet another acronym, learned from Stephen Donnelly, at @wiresharkfest '24 EU.

@it__security Naja, bitte die Kirche im Dorf lassen. Es handelt sich hierbei um eine Schwachstelle von "Expedition", einem reinen Migrationwerkzeug, was wohl kaum von irgendjemandem public über das Internet erreichbar sein dürfte.

🚨 Die amerikanische Behörde für Cybersicherheit #CISA hat am Donnerstag Alarm geschlagen: Eine schwerwiegende Sicherheitslücke in der #Software des IT-Sicherheitsunternehmens #PaloAlto Networks werde bereits aktiv von Angreifern ausgenutzt. it-daily.net/shortnews/sich…

Whoever was on the "Packet Doctors" session at @wiresharkfest this day: There was a discussion concerning TCP RSTs and how they are "spoofed" by intermediate firewalls. Here are some more information about those scenarios: weberblog.net/who-sends-tcp-…