SolarScale Blog

central to intelligence

Network Map

May 26th, 2009

As you can see this is my network at home all contained within one computer using vmware. The load on uranus (the vmware host) is a constant 20% with all these other vm's on. I created the map with xfig.


Random Hackepedia

May 22nd, 2009

A broadcast is likened to radio and is by definition one sender and multiple receivers. Ethernet can broadcast, IP can broadcast. Broadcasting is stateless, meaning you cannot use TCP with it. Most broadcasts are done with datagrams.

To read more about Broadcasting go here.


Bug fix

May 22nd, 2009

I've made a bugreport for OpenBSD's tcpdump.

At a later time I found out that another similar bug was in the print-icmp6.c code and did a fix for that as well:

--- print-icmp6.c-orig  Fri May 22 13:09:27 2009
+++ print-icmp6.c       Fri May 22 13:10:10 2009
@@ -125,6 +125,7 @@
                        TCHECK(oip->ip6_nxt);
                        hlen = sizeof(struct ip6_hdr);
                        ouh = (struct udphdr *)(((u_char *)oip) + hlen);
+                       TCHECK(ouh->uh_dport);
                        dport = ntohs(ouh->uh_dport);
                        switch (oip->ip6_nxt) {
                        case IPPROTO_TCP:


ICMP Timestamp

May 21st, 2009

Today someone mentioned ICMP timestamps and how they should be firewalled. So I did a bit of research on this. I had the sourcecode handy on BSD and the timestamp returned is seconds since midnight and milliseconds from the microtime clock. The code for this looks somethign like this:

n_time
iptime(void)
{
        struct timeval atv;
        u_long t;

        microtime(&atv);
        t = (atv.tv_sec % (24*60*60)) * 1000 + atv.tv_usec / 1000;
        return (htonl(t));
}
Now all BSD's (Open, Net, Free) allowed ICMP timestamps by default, and OpenBSD had a sysctl where you can turn it off. Darwin had it turned off by default and tweakable by sysctl. I wrote a small module to my codeblue program and tested ICMP timestamps on Windows and Solaris and they don't seem to reply to it:
# ./cb  -s 172.16.0.3 -d 172.16.0.13 -I 13.0 -F timestamp -vv 
--> interface_gateway: looking up gateway mac for 172.16.0.13
--> interface_gateway: resolved to mac address 0.c.29.4b.46.1e
1 packet written at 60 bytes totalling 60 bytes
Now then, someone who wants insight on the time of day on some box can get a fairly accurate count which may help them with programs to attack a host. But this isn't guaranteed. In the old days, for example, TCP sequence numbers were based on the time of day and thus someone could make a good guess at what those sequence numbers are and be malicious. Today that's not possible anymore and someone even emphasized in OpenBSD that "Time is not a secret". That's true but, then again, if it's not a secret then why does OpenBSD's traceroute.c convolute the time in a trace packet. That's a nice idea but if time is not a secret it doesn't fit in the overall policy (just an observation). A good policy, that I like, is that time is nowhere used to seed random number generators, or cryptographic salts. If PRNG (Pseudo Random Number Generators) are seeded with time and time is readable over the network accurately then that PRNG is no good.

I was sorta surprised that NetBSD and FreeBSD had no sysctl to turn this off and especially FreeBSD with it's millions of sysctl's didn't have a knob that turned ICMP timestamps off. I guess the best formula that may make someone feel better about this is just to firewall it locally. I'm tired now, good night.

PS: Oh yes I tested Linux (OpenSuse 10.3) as well and it also replies ICMP timestamps.


Lots of installer movies

May 18th, 2009

Here are some installs that I have done in vmware and made a movie of it. I personally like the installers best in the order openbsd, netbsd, freebsd. I like OpenBSD because you can go back easily which I show in the fourth movie with install tricks.

Make sure you mirror it if you want to share it around. Also if you run windows remember there is codecs found here.


4.5-current install movie #2

May 15th, 2009

I made another movie with vmware. This time it's an install with the latest OpenBSD snapshot. If you saw the movie below this is the same but it's sped up and you'll have to press pause to follow what I did. I tested 2 things. One was whether adding a user was allowed as digits..as you'll see (it did allow digits the last snapshot before that), and the other was escaping out of the installer and checking whether another host was up.

There was one pleasant surprise in that there was a SHA256 checksum on downloaded packages and it reported it being false (as I used the packages from the previous snap on the local ftp site).


Random Hackepedia

May 15th, 2009

A process covers the entire address space for the size of a pointer (32 bit in 32 bit architectures, 64 bit for 64 bit architectures). Since virtual memory is being used, not all areas of a process have real memory assigned to it, only some parts...

To read more about stack on hackepedia click here.


Astronomy question: Spaceship Sun

May 11th, 2009

I'm looking for this information online but I can't find it. We orbit the sun and each quarter orbit we call seasons such as, spring, summer, autumn and winter. The sun also moves into some direction around the galactic center, and I'm wondering into which season does it currently move? How can this be proven? I live in the northern hemisphere so I go by northern directions.

PS: Some progress. We are heading towards the star Vega in the constellation lyra.

PSS: The direction we are moving is also called the solar apex.


4.5-current install movie

May 7th, 2009

I have made a movie with the newest snapshot of OpenBSD. If you've installed OpenBSD before you'll notice some changes in this installer. I don't always go with the defaults but custom install (the partitions).

I tried watching the .avi with windows xp and it didn't work, but it works with mplayer available on linux and openbsd.

I read up on this and there is a driver for windows which is found here right near the bottom (2nd last).

OK the windows installer works when installed as administrator on an XP box. I'm sure it will work on Vista as well. If you've never seen the install of OpenBSD before perhaps this is worth watching.


Random Hackepedia

May 7th, 2009

Ports are identifiers of protocols that work on the transport layer (layer 4) of the OSI model. TCP and UDP are transport layer protocols that have ports. In TCP and UDP a port is represented by a 16 bit unsigned integer. Thus, the possible port range is 0 through 65535. Port 0 is illegal and no service resides on it.

Read more about Ports at Hackepedia.


Keyword Search

Older Blog Entries

20092009 20102010
16 1218
27 1319
38 14index
49 15
510 16
11 17

Other links

Have feedback?

Send mail to pjp [at] centroid [dot] eu
Do disclose whether you would like this private or else I may post it on this blog.