install Suricata in ubuntu instance 1sudo add-apt-repository ppa:oisf/suricata-stable 2sudo apt install suricata 3sudo systemctl enable suricata.service 4sudo systemctl stop suricata.service Config Suricata edit file sudo nano /etc/suricata/suricata.yaml 1# enable/disable the community id feature. 2community-id: true …

read more

View all listener 1lsof -i Login in kubernetes node use ssh Find out the container 1#find process id in specific container 2docker top docker ps|grep "istio-proxy_productpage"|cut -d " " -f1 3# find the pid and use nsenter to container network namespace 4nsenter -n –target PID 5# View the details of …

read more

How to upgrade the some packages 1dpkg -L libssh2-1 # view the package use which files 2dpkg -s libssh2-1 # view the package infos 3# install the checkinstall 4echo "deb http://ftp.de.debian.org/debian bullseye main" >> /etc/apt/sources.list 5apt update 6apt install checkinstall 7tar -zxvf …

read more

Define pattern for log groups in cloudwatch Create filter pattern filter pattern: [action, azid, bytes, dstaddr,dstport,instanceid,protocol,srcaddr,srcport,subnetid] Metric namespaces Name for metric namespace Metric name: bytes Metric value: $bytes Unit: Bytes Dimensions: Dimension Name: dst-addr, Dimension Value: …

read more

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project https://github.com/rofl0r/proxychains-ng Install 1# On macos 2 HOMEBREW_NO_UPDATE=1 brew install …

read more