| ##TCP FLAGS## | |
| Unskilled Attackers Pester Real Security Folks | |
| ============================================== | |
| TCPDUMP FLAGS | |
| Unskilled = URG = (Not Displayed in Flag Field, Displayed elsewhere) | |
| Attackers = ACK = (Not Displayed in Flag Field, Displayed elsewhere) | |
| Pester = PSH = [P] (Push Data) | |
| Real = RST = [R] (Reset Connection) | |
| Security = SYN = [S] (Start Connection) |
This Document roughly describes a HAProxy Cluster Setup on Ubuntu 16.04 based on an example Configuration with 3 Nodes
This Document is still work in Progress the Following Stuff still needs to be done:
(from Understanding Nginx Server and Location Block Selection Algorithms - https://goo.gl/YyzshP)
server {
| Signal | Value | Action | Comment |
|---|---|---|---|
| SIGHUP | 1 | Term | Hangup detected on controlling terminal or death of controlling process |
| SIGINT | 2 | Term | Interrupt from keyboard |
| SIGQUIT | 3 | Core | Quit from keyboard |
| SIGILL | 4 | Core | Illegal Instruction |
| SIGABRT | 6 | Core | Abort signal from abort(3) |
| SIGFPE | 8 | Core | Floating point exception |
| SIGKILL | 9 | Term | Kill signal |
| SIGSEGV | 11 | Core | Invalid memory reference |
| SIGPIPE | 13 | Term | Broken pipe: write to pipe with no readers |
| # local port forwarding | |
| # the target host 192.168.0.100 is running a service on port 8888 | |
| # and you want that service available on the localhost port 7777 | |
| ssh -L 7777:localhost:8888 user@192.168.0.100 | |
| # remote port forwarding | |
| # you are running a service on localhost port 9999 | |
| # and you want that service available on the target host 192.168.0.100 port 12340 |
| sudo dpkg-reconfigure wireshark-common #Select "Yes" | |
| chmod +x /usr/bin/dumpcap | |
| sudo setcap 'CAP_NET_RAW+eip CAT_NET_ADMIN+eip' /usr/bin/dumpcap | |
| or | |
| `sudo setcap 'CAP_NET_RAW+eip CAT_NET_ADMIN+eip' $(which dumpcap)' |
References:
From man page: man apt_preferences
| #!/usr/bin/env bash | |
| # NOTE: This will let anyone who belongs to the 'pcap' group | |
| # execute 'tcpdump' | |
| # NOTE2: User running the script MUST be a sudoer. It is | |
| # convenient to be able to sudo without a password. | |
| sudo groupadd pcap | |
| sudo usermod -a -G pcap $USER |