Debugging with Strace and Sysdig
•Download as PPTX, PDF•
2 likes•235 views
This document discusses system level debugging tools Strace and Sysdig for debugging PHP applications. Strace allows seeing system calls with low overhead, while Sysdig provides protocol awareness and container visibility. Both tools can help debug slow scripts, PHP-FPM issues, and network problems. Sysdig integrates chisels for parsing raw data and supports debugging containers and network traffic. The document recommends using Strace when you lack root access and Sysdig when watching network activity or containers.
Report
Share
Report
Share
Recommended
Elastix4.0 High Availability without ElastixHA module
Explained one of many way for setup High Availability on Elastix 4.0 without "Elastix High Availability Module"
Fundamentals of TCP, and dump analysis
Slides of the talk intended to explain fundamental of TCP, common (most useful) TCP scenarios, obtaining and analyzing of TCP dumps and practical usages of TCP analysis.
St Louis Linux Users Group Wireguard (for Fun and Networking)
This document discusses different VPN protocols and presents Wireguard as a new option. It provides an overview of older protocols like PPTP and OpenVPN, noting their security weaknesses. The document then introduces Wireguard as very fast with low overhead, using standardized encryption algorithms and having no known major vulnerabilities. It demonstrates how to install and set up Wireguard on different platforms like the Raspberry Pi, Ubuntu, MacOS, and Android to securely connect networks.
China.z / Trojan.XorDDOS - Analysis of a hack
Analyzing the hack of a Debian based system with the Trojan.XorDDOS witg some China.z thrown in the mix.
Central Iowa Linux Users Group May 2020 Meeting: WireGuard
This document summarizes a presentation about the Wireguard VPN protocol given to the Central Iowa Linux Users Group. It begins with introductions and background about the presenter and organization. The bulk of the document discusses and compares existing VPN protocols like PPTP, OpenVPN, and IPSec and their security issues. It focuses on introducing Wireguard as a newer, more lightweight VPN protocol that uses standardized encryption and has no known vulnerabilities. It concludes with demos of installing Wireguard on Ubuntu, MacOS, and Android.
Powering up on PowerShell - BSides Charleston - Nov 2018
This document provides an overview of PowerShell and discusses various techniques for using PowerShell, including: moving around the filesystem and accessing system components; hashing files; storing data in alternate locations like the registry, Active Directory, and event logs; creating custom event logs; enabling remote management (WinRM) and logging; port scanning; and achieving persistence through PowerShell profiles. The speaker is an experienced cybersecurity professional and PowerShell enthusiast who develops tools and teaches classes related to PowerShell.
BlueHat v17 || TLS 1.3 - Full speed ahead... mind the warnings - the great, t...
BlueHat v17 || TLS 1.3 - Full speed ahead... mind the warnings - the great, t...BlueHat Security Conference
Joseph Salowey, Tableau Software
Transport Layer Security (TLS) 1.3 is almost here. The protocol that protects most of the Internet secure connections is getting the biggest ever revamp, and is losing a round-trip. We will explore differences between TLS 1.3 and previous versions in detail, focusing on the performance and security improvements of the new protocol as well as some of the challenges we face around securely implementing new features such as 0-RTT resumption.
Network Address Translation - pfSense Hangout July 2014
The document discusses network address translation (NAT) and its uses. It covers topics like outbound NAT, 1:1 NAT, port forwarding, NAT reflection, and VPN NAT. The last section invites feedback to be sent to gold@pfsense.org.
Recommended
Elastix4.0 High Availability without ElastixHA module
Explained one of many way for setup High Availability on Elastix 4.0 without "Elastix High Availability Module"
Fundamentals of TCP, and dump analysis
Slides of the talk intended to explain fundamental of TCP, common (most useful) TCP scenarios, obtaining and analyzing of TCP dumps and practical usages of TCP analysis.
St Louis Linux Users Group Wireguard (for Fun and Networking)
This document discusses different VPN protocols and presents Wireguard as a new option. It provides an overview of older protocols like PPTP and OpenVPN, noting their security weaknesses. The document then introduces Wireguard as very fast with low overhead, using standardized encryption algorithms and having no known major vulnerabilities. It demonstrates how to install and set up Wireguard on different platforms like the Raspberry Pi, Ubuntu, MacOS, and Android to securely connect networks.
China.z / Trojan.XorDDOS - Analysis of a hack
Analyzing the hack of a Debian based system with the Trojan.XorDDOS witg some China.z thrown in the mix.
Central Iowa Linux Users Group May 2020 Meeting: WireGuard
This document summarizes a presentation about the Wireguard VPN protocol given to the Central Iowa Linux Users Group. It begins with introductions and background about the presenter and organization. The bulk of the document discusses and compares existing VPN protocols like PPTP, OpenVPN, and IPSec and their security issues. It focuses on introducing Wireguard as a newer, more lightweight VPN protocol that uses standardized encryption and has no known vulnerabilities. It concludes with demos of installing Wireguard on Ubuntu, MacOS, and Android.
Powering up on PowerShell - BSides Charleston - Nov 2018
This document provides an overview of PowerShell and discusses various techniques for using PowerShell, including: moving around the filesystem and accessing system components; hashing files; storing data in alternate locations like the registry, Active Directory, and event logs; creating custom event logs; enabling remote management (WinRM) and logging; port scanning; and achieving persistence through PowerShell profiles. The speaker is an experienced cybersecurity professional and PowerShell enthusiast who develops tools and teaches classes related to PowerShell.
BlueHat v17 || TLS 1.3 - Full speed ahead... mind the warnings - the great, t...
BlueHat v17 || TLS 1.3 - Full speed ahead... mind the warnings - the great, t...BlueHat Security Conference
Joseph Salowey, Tableau Software
Transport Layer Security (TLS) 1.3 is almost here. The protocol that protects most of the Internet secure connections is getting the biggest ever revamp, and is losing a round-trip. We will explore differences between TLS 1.3 and previous versions in detail, focusing on the performance and security improvements of the new protocol as well as some of the challenges we face around securely implementing new features such as 0-RTT resumption.
Network Address Translation - pfSense Hangout July 2014
The document discusses network address translation (NAT) and its uses. It covers topics like outbound NAT, 1:1 NAT, port forwarding, NAT reflection, and VPN NAT. The last section invites feedback to be sent to gold@pfsense.org.
Securing OPC Classic Communications in Industrial Systems
This presentation decribes what OPC Classic (aka OLE for Process Control) is and why it can be a challenge to secure using traditional firewall technology. It then describes how to use Tofino OPC Enforcer's deep packet inspection technology to easily secure PLC and other control systems.
Firewalls and Virtualization - pfSense Hangout June 2014
This document summarizes a hangout on firewalls and virtualization. It discusses types of virtualization, virtual networking options like bridged, NAT, and host-only, and considerations for virtualizing firewalls in production and for testing. Virtual networking is demonstrated for VirtualBox, VMware, ESX, and Hyper-V. While virtual firewalls can work well, having a physical firewall manage the virtualization environment is recommended. Performance and high availability considerations are also covered.
CNIT 50: 7. Graphical Tools & 8. NSM Consoles
For a college class in Network Security Monitoring at CCSF.
Instructor: Sam Bowne
Course website: https://samsclass.info/50/50_F17.shtml
Based on "The Practice of Network Security Monitoring: Understanding Incident Detection and Response" by Richard Bejtlich, No Starch Press; 1 edition (July 26, 2013), ASIN: B00E5REN34
Sullivan randomness-infiltrate 2014
Many information security systems rely on cryptographic schemes that need truly random numbers be secure. In recent months there have been several high profile news stories about weaknesses or potential compromises in both software and hardware random number generators. A compromised random number generator is difficult to catch because it can output random looking data that is predictable to an attacker only. In this talk I describe how to go from knowledge of a weakness in a random number generator to a full security compromise.
We will look at examples including how to fully decrypt a TLS stream, how to compromise a bitcoin wallet by looking at the ECDSA signatures on the public block chain, how to factor improperly generated RSA keys, and more. There will be live demos and discussions of interesting ways to pull off these attacks.
wolfSSL TLS 1.3 Support in 2018
This presentation covers the current status of TLS 1.3 in the wolfSSL embedded TLS library (as of the time it was presented). It talks about the Draft status of TLS 1.3, middlebox compatibility, extensions, RSA-PSS negotiation and the specification's progress in the TLSWG (TLS Working Group).
www.wolfssl.com
www.wolfssl.com/tls13
wolfSSL and TLS 1.3
This document summarizes a talk given by Chris Conlon from wolfSSL on September 15, 2017 in Tokyo, Japan about TLS 1.3. It provides background on Chris Conlon and his role at wolfSSL, an overview of wolfSSL's products and services including their lightweight SSL/TLS library. It also discusses the history and components of the SSL/TLS protocol, common vulnerabilities, and the goals of the new TLS 1.3 specification.
Firewall and NAT Fundamentals - pfSense Hangout January 2014
The document summarizes updates from a January 2014 pfSense Hang Out. It discusses the launch of an online store for pfSense merchandise, a new website, and an updated pfSense book. An upcoming 2.1.1 release was outlined which will contain bug and security fixes. Development of the 2.2 release was also mentioned, including using FreeBSD 10.0 as the base and new features like improved wireless support and NAT ordering options. The hang out included tutorials on firewall and NAT fundamentals and basic network setups. Future tutorial topics and questions were solicited by email.
Machinekit - The Python Machinetalk Bindings
The open source motion control software Machinekit has excellent Python bindings for different API. Machinetalk, the middleware stack, pymachinetalk, the client API for Machinetalk and the Python configuration API.
Learn more at https://machinekoder.com/ and http://machinekit.io
10 palo alto nat policy concepts
https://www.facebook.com/MostafaElLathyIT
mostafa.it@hotmail.com
https://www.youtube.com/channel/UCAEiVvBP3DbIKUcoZBcaHvQ
Network scanning
A network consists of 3 parts: IP addresses, services, and ports. An IP address has a network and host address determined by the subnet mask. Services are network protocols that link server and client applications, typically running on specific ports, though any service can run on any port. Ports allow different services to be available from one location, with common services using well-known ports. Network scanning includes host scanning to locate hosts, port scanning to determine services, and vulnerability scanning to find known flaws using signature-based tools like Nmap, Nessus, GFI LANguard, and SuperScan.
Ch 5: Port Scanning
Slides for a college course at City College San Francisco. Based on "Hands-On Ethical Hacking and Network Defense, Third Edition" by Michael T. Simpson, Kent Backman, and James Corley -- ISBN: 9781285454610.
Instructor: Sam Bowne
Class website: https://samsclass.info/123/123_S17.shtml
SSRF vs. Business-critical applications. XXE tunneling in SAP
Any information an attacker might want is stored in a company’s ERP. This information can include financial, customer or public relations, intellectual property, personally identifiable information and more. Industrial espionage, sabotage and fraud or insider embezzlement may be very effective if targeted at the victim’s ERP system and cause significant damage to the business.
The presentation describes the history of SSRF attack, or Server Side Request Forgery, its types and different kinds of attacks on SAP.
Remote Console: Say goodbye to RDP
This document provides an overview of the components and architecture of Veeam's Remote Console software. It discusses key concepts like availability, security and stability. It describes the various services that make up the software such as the Remote Console, Remote PS, Explorers and Mount Server. It also outlines the network connections and ports used, diagnostic and logging functions, and how the software can improve restore performance and support remote mounting and explorers.
Internet and world wide web protocol (draft 2)
This document discusses internet protocols and network analysis tools. It covers how web pages are served from servers to clients using HTTP and IP addresses. It then explains common network protocols like TCP, IP, HTTP, and routing protocols. The document proceeds to describe the secure shell client Putty, differences between Telnet and SSH, and finally the network packet analyzer Wireshark including its uses and functionality.
CNIT 123 Ch 10: Hacking Web Servers
For a college class in Ethical Hacking and Network Defense at CCSF, by Sam Bowne. More info at https://samsclass.info/123/123_F17.shtml
Based on this book
Hands-On Ethical Hacking and Network Defense, Third Edition by Michael T. Simpson, Kent Backman, and James Corley -- ISBN: 9781285454610
SIP :: Half outbound (random notes)
This document discusses problems with SIP outbound and proposes a "half-outbound" approach to allow connection reuse for SIP over TLS. It notes that SIP UAs often use TCP for TLS or mobile networks, but this prevents servers from reusing connections for outbound requests. A half-outbound approach would allow the client to indicate support for connection reuse after a TLS connection is established, and the server could then reuse that connection for outbound SIP requests associated with the registration. This would simplify connection reuse compared to full SIP outbound while still addressing issues with SIP over TLS.
Developing SDN apps in Ryu
This document discusses developing SDN applications in Ryu. It provides an overview of OpenFlow, introduces Ryu application development, describes the OpenFlow API in Ryu, and demonstrates a hub application that floods ICMP packets and sends other protocols to the controller. The presenter is John-Lin from National Tsing Hua University researching network security in SDN using the Ryu controller.
Terminal Access Controller
This document provides an overview of TACACS+ (Terminal Access Controller Access Control System Plus), which is a protocol and software that provides AAA (authentication, authorization, and accounting) services to network devices. It discusses how TACACS+ separates AAA functions, encrypts traffic between devices, and uses TCP port 49 for communication. Key aspects of TACACS+ authentication, authorization, and accounting are outlined. The document also demonstrates TACACS+ in action using Cisco IOS XR Virtual and CentOS and provides references for further information.
Open Source Networking
Can a set of open source technologies and tools developed by a loosely affiliated community of developers, offered for free over the Internet, compete with proprietary products from multi-billion dollar companies in building networks? Would you be insane to try to run your business on this stuff, or insanely smart? Either way, open source is going to have a huge impact on network operations over the coming decade. Large networks can be built and managed with open source components and tools. Learn about the benefits of using open source.
IX 2020 - Internet Security & Mitigation of Risk Webinar: Linux Malware and D...
APNIC's Senior Security Specialist Adli Wahid gave a presentation on Linux malware, DDoS agents and bots, based on observations from the Honeynet project at the IX 2020 – Internet Security and Mitigation of Risk Webinar, held online on 15 June 2020.
Network troubleshooting
This document provides an overview of network troubleshooting techniques and tools. It discusses focusing on understanding basics and standard troubleshooting tools like ping first before trying more advanced methods. Documentation of network configurations, changes, and issues is emphasized. A variety of Linux command line tools are also introduced for examining network connectivity and performance issues like netstat, ifconfig, route, traceroute, and packet capture tools.
XFLTReaT: A New Dimension in Tunnelling (HITB GSEC 2017)
XFLTReaT presentation from Hack In The Box GSEC 2017
https://www.youtube.com/watch?v=6EU_RLb2YxI
XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
More Related Content
What's hot
Securing OPC Classic Communications in Industrial Systems
This presentation decribes what OPC Classic (aka OLE for Process Control) is and why it can be a challenge to secure using traditional firewall technology. It then describes how to use Tofino OPC Enforcer's deep packet inspection technology to easily secure PLC and other control systems.
Firewalls and Virtualization - pfSense Hangout June 2014
This document summarizes a hangout on firewalls and virtualization. It discusses types of virtualization, virtual networking options like bridged, NAT, and host-only, and considerations for virtualizing firewalls in production and for testing. Virtual networking is demonstrated for VirtualBox, VMware, ESX, and Hyper-V. While virtual firewalls can work well, having a physical firewall manage the virtualization environment is recommended. Performance and high availability considerations are also covered.
CNIT 50: 7. Graphical Tools & 8. NSM Consoles
For a college class in Network Security Monitoring at CCSF.
Instructor: Sam Bowne
Course website: https://samsclass.info/50/50_F17.shtml
Based on "The Practice of Network Security Monitoring: Understanding Incident Detection and Response" by Richard Bejtlich, No Starch Press; 1 edition (July 26, 2013), ASIN: B00E5REN34
Sullivan randomness-infiltrate 2014
Many information security systems rely on cryptographic schemes that need truly random numbers be secure. In recent months there have been several high profile news stories about weaknesses or potential compromises in both software and hardware random number generators. A compromised random number generator is difficult to catch because it can output random looking data that is predictable to an attacker only. In this talk I describe how to go from knowledge of a weakness in a random number generator to a full security compromise.
We will look at examples including how to fully decrypt a TLS stream, how to compromise a bitcoin wallet by looking at the ECDSA signatures on the public block chain, how to factor improperly generated RSA keys, and more. There will be live demos and discussions of interesting ways to pull off these attacks.
wolfSSL TLS 1.3 Support in 2018
This presentation covers the current status of TLS 1.3 in the wolfSSL embedded TLS library (as of the time it was presented). It talks about the Draft status of TLS 1.3, middlebox compatibility, extensions, RSA-PSS negotiation and the specification's progress in the TLSWG (TLS Working Group).
www.wolfssl.com
www.wolfssl.com/tls13
wolfSSL and TLS 1.3
This document summarizes a talk given by Chris Conlon from wolfSSL on September 15, 2017 in Tokyo, Japan about TLS 1.3. It provides background on Chris Conlon and his role at wolfSSL, an overview of wolfSSL's products and services including their lightweight SSL/TLS library. It also discusses the history and components of the SSL/TLS protocol, common vulnerabilities, and the goals of the new TLS 1.3 specification.
Firewall and NAT Fundamentals - pfSense Hangout January 2014
The document summarizes updates from a January 2014 pfSense Hang Out. It discusses the launch of an online store for pfSense merchandise, a new website, and an updated pfSense book. An upcoming 2.1.1 release was outlined which will contain bug and security fixes. Development of the 2.2 release was also mentioned, including using FreeBSD 10.0 as the base and new features like improved wireless support and NAT ordering options. The hang out included tutorials on firewall and NAT fundamentals and basic network setups. Future tutorial topics and questions were solicited by email.
Machinekit - The Python Machinetalk Bindings
The open source motion control software Machinekit has excellent Python bindings for different API. Machinetalk, the middleware stack, pymachinetalk, the client API for Machinetalk and the Python configuration API.
Learn more at https://machinekoder.com/ and http://machinekit.io
10 palo alto nat policy concepts
https://www.facebook.com/MostafaElLathyIT
mostafa.it@hotmail.com
https://www.youtube.com/channel/UCAEiVvBP3DbIKUcoZBcaHvQ
Network scanning
A network consists of 3 parts: IP addresses, services, and ports. An IP address has a network and host address determined by the subnet mask. Services are network protocols that link server and client applications, typically running on specific ports, though any service can run on any port. Ports allow different services to be available from one location, with common services using well-known ports. Network scanning includes host scanning to locate hosts, port scanning to determine services, and vulnerability scanning to find known flaws using signature-based tools like Nmap, Nessus, GFI LANguard, and SuperScan.
Ch 5: Port Scanning
Slides for a college course at City College San Francisco. Based on "Hands-On Ethical Hacking and Network Defense, Third Edition" by Michael T. Simpson, Kent Backman, and James Corley -- ISBN: 9781285454610.
Instructor: Sam Bowne
Class website: https://samsclass.info/123/123_S17.shtml
SSRF vs. Business-critical applications. XXE tunneling in SAP
Any information an attacker might want is stored in a company’s ERP. This information can include financial, customer or public relations, intellectual property, personally identifiable information and more. Industrial espionage, sabotage and fraud or insider embezzlement may be very effective if targeted at the victim’s ERP system and cause significant damage to the business.
The presentation describes the history of SSRF attack, or Server Side Request Forgery, its types and different kinds of attacks on SAP.
Remote Console: Say goodbye to RDP
This document provides an overview of the components and architecture of Veeam's Remote Console software. It discusses key concepts like availability, security and stability. It describes the various services that make up the software such as the Remote Console, Remote PS, Explorers and Mount Server. It also outlines the network connections and ports used, diagnostic and logging functions, and how the software can improve restore performance and support remote mounting and explorers.
Internet and world wide web protocol (draft 2)
This document discusses internet protocols and network analysis tools. It covers how web pages are served from servers to clients using HTTP and IP addresses. It then explains common network protocols like TCP, IP, HTTP, and routing protocols. The document proceeds to describe the secure shell client Putty, differences between Telnet and SSH, and finally the network packet analyzer Wireshark including its uses and functionality.
CNIT 123 Ch 10: Hacking Web Servers
For a college class in Ethical Hacking and Network Defense at CCSF, by Sam Bowne. More info at https://samsclass.info/123/123_F17.shtml
Based on this book
Hands-On Ethical Hacking and Network Defense, Third Edition by Michael T. Simpson, Kent Backman, and James Corley -- ISBN: 9781285454610
SIP :: Half outbound (random notes)
This document discusses problems with SIP outbound and proposes a "half-outbound" approach to allow connection reuse for SIP over TLS. It notes that SIP UAs often use TCP for TLS or mobile networks, but this prevents servers from reusing connections for outbound requests. A half-outbound approach would allow the client to indicate support for connection reuse after a TLS connection is established, and the server could then reuse that connection for outbound SIP requests associated with the registration. This would simplify connection reuse compared to full SIP outbound while still addressing issues with SIP over TLS.
Developing SDN apps in Ryu
This document discusses developing SDN applications in Ryu. It provides an overview of OpenFlow, introduces Ryu application development, describes the OpenFlow API in Ryu, and demonstrates a hub application that floods ICMP packets and sends other protocols to the controller. The presenter is John-Lin from National Tsing Hua University researching network security in SDN using the Ryu controller.
Terminal Access Controller
This document provides an overview of TACACS+ (Terminal Access Controller Access Control System Plus), which is a protocol and software that provides AAA (authentication, authorization, and accounting) services to network devices. It discusses how TACACS+ separates AAA functions, encrypts traffic between devices, and uses TCP port 49 for communication. Key aspects of TACACS+ authentication, authorization, and accounting are outlined. The document also demonstrates TACACS+ in action using Cisco IOS XR Virtual and CentOS and provides references for further information.
Open Source Networking
Can a set of open source technologies and tools developed by a loosely affiliated community of developers, offered for free over the Internet, compete with proprietary products from multi-billion dollar companies in building networks? Would you be insane to try to run your business on this stuff, or insanely smart? Either way, open source is going to have a huge impact on network operations over the coming decade. Large networks can be built and managed with open source components and tools. Learn about the benefits of using open source.
IX 2020 - Internet Security & Mitigation of Risk Webinar: Linux Malware and D...
APNIC's Senior Security Specialist Adli Wahid gave a presentation on Linux malware, DDoS agents and bots, based on observations from the Honeynet project at the IX 2020 – Internet Security and Mitigation of Risk Webinar, held online on 15 June 2020.
What's hot (20)
Securing OPC Classic Communications in Industrial Systems
Securing OPC Classic Communications in Industrial Systems
Firewalls and Virtualization - pfSense Hangout June 2014
Firewalls and Virtualization - pfSense Hangout June 2014
Firewall and NAT Fundamentals - pfSense Hangout January 2014
Firewall and NAT Fundamentals - pfSense Hangout January 2014
SSRF vs. Business-critical applications. XXE tunneling in SAP
SSRF vs. Business-critical applications. XXE tunneling in SAP
IX 2020 - Internet Security & Mitigation of Risk Webinar: Linux Malware and D...
IX 2020 - Internet Security & Mitigation of Risk Webinar: Linux Malware and D...
Similar to Debugging with Strace and Sysdig
Network troubleshooting
This document provides an overview of network troubleshooting techniques and tools. It discusses focusing on understanding basics and standard troubleshooting tools like ping first before trying more advanced methods. Documentation of network configurations, changes, and issues is emphasized. A variety of Linux command line tools are also introduced for examining network connectivity and performance issues like netstat, ifconfig, route, traceroute, and packet capture tools.
XFLTReaT: A New Dimension in Tunnelling (HITB GSEC 2017)
XFLTReaT presentation from Hack In The Box GSEC 2017
https://www.youtube.com/watch?v=6EU_RLb2YxI
XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
Vorontsov, golovko ssrf attacks and sockets. smorgasbord of vulnerabilities
This document summarizes vulnerabilities related to server-side request forgery (SSRF) attacks and how they can be exploited. It discusses how external network access and internal network access can be obtained through SSRF. It provides examples of vulnerabilities in various protocols like HTTP, FTP, TFTP, and protocols used by services like Memcached, databases, and file uploads. It also describes how file descriptors can be used to write to open sockets or files to forge server responses or inject malicious content. Overall, the document is an overview of real-world SSRF attacks and exploitation techniques.
CNIT 152: 10 Enterprise Services
Slides for a college course based on "Incident Response & Computer Forensics, Third Edition" by by Jason Luttgens, Matthew Pepe, and Kevin Mandia, at City College San Francisco.
Website: https://samsclass.info/152/152_F18.shtml
CNIT 121: 10 Enterprise Services
Slides for a college course based on "Incident Response & Computer Forensics, Third Edition" by by Jason Luttgens, Matthew Pepe, and Kevin Mandia.
Teacher: Sam Bowne
Twitter: @sambowne
Website: https://samsclass.info/121/121_F16.shtml
Trick or XFLTReaT a.k.a. Tunnel All The Things
XFLTReaT presentation from RuxCon 2017
This presentation will sum up how to do tunnelling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
XFLTReaT: a new dimension in tunnelling (BruCON 0x09 2017)
XFLTReaT presentation from BruCON 0x09 2017
https://www.youtube.com/watch?v=0hnxgu8lkfc
This presentation will sum up how to do tunnelling with different protocols and will have different perspectives detailed. For example, companies are fighting hard to block exfiltration from their network: they use http(s) proxies, DLP, IPS technologies to protect their data, but are they protected against tunnelling? There are so many interesting questions to answer for users, abusers, companies and malware researchers. Mitigation and bypass techniques will be shown you during this presentation, which can be used to filter any tunnelling on your network or to bypass misconfigured filters.
Our new tool XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and gives users the capability to take care of only the things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP type 0 or HTTPS TLS v1.2 with a special header, then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 33000ft on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. While we needed to use different tunnels and VPNs for different protocols in the past like OpenVPN for TCP and UDP, ptunnel for ICMP or iodined for DNS tunnelling, it changes now. After taking a look at these tools it was easy to see some commonality, all of them are doing the same things only the means of communication are different. We simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
Adding Support for Networking and Web Technologies to an Embedded System
These are the slides for a presentation we gave at Device Developer Conference 2014 in the UK. The presentation discusses the work done, experiences, and lessons learnt from adding an open source TCP/IP network stack and web server to an existing industrial control system running on an ARM Cortex M3-based processor from TI.
The presentation covers the following:
· Integrating the network stack into the existing software base
· Configuring and using the network stack and web server
· Adding support for HTTP basic authentication to restrict user access
· Using HTTP to remotely access the target system and retrieve operational data
· Debugging hints and tips
· Pitfalls to avoid and other lessons learnt
Balázs Bucsay - XFLTReaT: Building a Tunnel
XFLTReaT is an open-source tunnelling framework that handles all the boring stuff and offers the capability to the users to take care of only those things that matter. It provides significant improvements over existing tools. From now on there is no need to write a new tunnel for each and every protocol or to deal with interfaces and routing. Any protocol can be converted to a module, which works in a plug-and-play fashion; authentication and encryption can be configured and customised on all traffic and it is also worth mentioning that the framework was designed to be easy to configure, use and develop. In case there is a need to send packets over ICMP, RDP or SSH then this can be done in a matter of minutes, instead of developing a new tool from scratch. The potential use (or abuse) cases are plentiful, such as bypassing network restrictions of an ISP, the proxy of a workplace or obtaining Internet connectivity through bypassing captive portals in the middle of the Atlantic Ocean or at an altitude of 12km on an airplane.
This framework is not just a tool; it unites different technologies in the field of tunnelling. It will be show how to tunnel data over a Windows jumpbox utilising RDP (including the dirty low level "secrets") or how to exfiltrate data over ICMP from barely secured networks. We have simplified the whole process and created a framework that is responsible for everything but the communication itself, we rethought the old way of tunnelling and tried to give something new to the community. After the initial setup the framework takes care of everything. With the check functionality we can even find out, which module can be used on the network, there is no need for any low-level packet fu and hassle. I guarantee that you won’t be disappointed with the tool and the talk, actually you will be richer with an open-source tool.
CNIT 152: 9 Network Evidence
Slides for a college course based on "Incident Response & Computer Forensics, Third Edition" by by Jason Luttgens, Matthew Pepe, and Kevin Mandia, at City College San Francisco.
Website: https://samsclass.info/152/152_F18.shtml
Guide to protecting networks - Eric Vanderburg
The document provides an overview of various network security devices and concepts. It describes routers and how they use access control lists to filter network traffic. It also explains firewalls, how they can be implemented as hardware or software, and the technologies they use including network address translation, packet filtering, and access control lists. Finally, it covers intrusion detection systems, the differences between network-based and host-based IDS, and how honeypots are used to detect attackers on a network.
OSDC 2016 - Unifying Logs and Metrics Data with Elastic Beats by Monica Sarbu
The Beats are a friendly army of lightweight agents that installed on your servers capture operational data and ship it to Elasticsearch for analysis. They are open source, written in Golang, and maintained by Elastic, the company behind Elasticsearch, Logstash, and Kibana.
This talk will present the first three Beats: Topbeat for system level metrics, Filebeat for log files and Packetbeat for wire data. It will also demonstrate how to combine them with Logstash and Kibana in one advanced monitoring solution, unifying log management, metrics monitoring and system stats. Finally, you will learn how to create a new Beat from scratch using Golang and the libbeat framework to capture any type of information and ship it to Elasticsearch.
A Byte of Software Deployment
- What's Software Deployment
- A Minimal Python Web Application
- Trouble Shoot
- Interface between Web Server and Application
- Standardization/Automation/Monitoring/Availability
Oracle WebLogic Diagnostics & Perfomance tuning
This document discusses troubleshooting Oracle WebLogic performance issues. It outlines various tools that can be used for troubleshooting including operating system tools like sar and vmstat, Java tools like jps and jstat, and WebLogic-specific tools like the WebLogic Diagnostics Framework. It also covers taking thread dumps, configuring WebLogic logging and debugging options, and using the Oracle Diagnostic Logging framework.
GraphDay Paris - Intégrer des flux de données dans Neo4j avec l'ETL Open Sour...
The document discusses Kettle, an open source ETL tool, and its integration with Neo4j through plugins. It provides an overview of Kettle and its architecture, then describes several Neo4j plugins that allow loading and extracting data from Neo4j using Kettle. It demonstrates loading nodes, updating graphs, and continuously updating Neo4j from Kafka through data loading transformations. It also shows sourcing data from Neo4j through simple reads and JDBC queries, and extracting the data to Excel. The document emphasizes that the Kettle and Neo4j plugins allow users to work faster, tackle harder problems, and reduce maintenance costs.
Cloud Foundry Monitoring How-To: Collecting Metrics and Logs
This webinar covered logging and metrics in Cloud Foundry. It discussed collecting logs from applications and platforms using the Firehose and syslog. Logs are typically stored in Elasticsearch and parsed by Logstash. Kibana provides visualization. Metrics are collected at various levels including IaaS, BOSH, CF, and applications. Common tools discussed were Graphite, InfluxDB, and Grafana. Upcoming webinars would dive deeper into Logsearch, examples, and advanced metrics uses like capacity planning.
CNIT 152 10 Enterprise Service
This document provides information about DHCP and DNS logging. It discusses:
- Microsoft DHCP logs location and format, with limitations like one week retention
- ISC DHCP logs to syslog and examples of log entries
- DNS logging using DNSCAP or network packet captures
- Microsoft and ISC BIND DNS logging configurations and limitations
It recommends searching DHCP logs by IP address or MAC address to identify devices, and DNS logs to see domains visited and querying IPs. The document also notes attackers may change IP addresses, and malware may strip version information to evade detection.
BSides Rochester 2018: Esteban Rodriguez: Ducky In The Middle: Injecting keys...
This document summarizes Esteban Rodriguez's talk on injecting keystrokes into plaintext protocols. It discusses how protocols like VNC, HippoRemote, and early versions of Synergy sent keystrokes in plaintext, allowing them to be intercepted using tools like Wireshark. It then demonstrates how intercepted keystrokes could be cracked, monitored, or injected using tools like Metasploit, custom Python scripts, and rogue Synergy servers implemented with Dissonance. Mitigations discussed include encrypting protocols with SSL and verifying server fingerprints. The overall message is that encryption is important and security research helps improve protocols.
CNIT 121: 9 Network Evidence
Slides for a college course based on "Incident Response & Computer Forensics, Third Edition" by by Jason Luttgens, Matthew Pepe, and Kevin Mandia.
Teacher: Sam Bowne
Twitter: @sambowne
Website: https://samsclass.info/121/121_F16.shtml
501 ch 3 network technologies tools
This chapter reviews basic networking concepts like protocols, ports, and network devices. It discusses how switches prevent flooding attacks and use protocols like STP. Routers are covered, including how they route traffic and use ACLs to filter traffic. Firewalls are also summarized, including the differences between stateful and stateless configurations and how firewall rules work. Network segmentation methods like DMZs, proxies, and VLANs are also introduced.
Similar to Debugging with Strace and Sysdig (20)
XFLTReaT: A New Dimension in Tunnelling (HITB GSEC 2017)
XFLTReaT: A New Dimension in Tunnelling (HITB GSEC 2017)
Vorontsov, golovko ssrf attacks and sockets. smorgasbord of vulnerabilities
Vorontsov, golovko ssrf attacks and sockets. smorgasbord of vulnerabilities
XFLTReaT: a new dimension in tunnelling (BruCON 0x09 2017)
XFLTReaT: a new dimension in tunnelling (BruCON 0x09 2017)
Adding Support for Networking and Web Technologies to an Embedded System
Adding Support for Networking and Web Technologies to an Embedded System
OSDC 2016 - Unifying Logs and Metrics Data with Elastic Beats by Monica Sarbu
OSDC 2016 - Unifying Logs and Metrics Data with Elastic Beats by Monica Sarbu
GraphDay Paris - Intégrer des flux de données dans Neo4j avec l'ETL Open Sour...
GraphDay Paris - Intégrer des flux de données dans Neo4j avec l'ETL Open Sour...
Cloud Foundry Monitoring How-To: Collecting Metrics and Logs
Cloud Foundry Monitoring How-To: Collecting Metrics and Logs
BSides Rochester 2018: Esteban Rodriguez: Ducky In The Middle: Injecting keys...
BSides Rochester 2018: Esteban Rodriguez: Ducky In The Middle: Injecting keys...
Recently uploaded
Cost-Effective Strategies For iOS App Development
In this infographic, we have explored cost-effective strategies for iOS app development, focusing on building high-quality apps within a budget. Key points covered include prioritizing essential features, leveraging existing tools and libraries, adopting cross-platform development approaches, optimizing for a Minimum Viable Product (MVP), and integrating with cloud services and third-party APIs. By implementing these strategies, businesses and developers can create functional and engaging iOS apps while minimizing development costs and time-to-market.
Boost Your Savings with These Money Management Apps
A money management app can transform your financial life by tracking expenses, creating budgets, and setting financial goals. These apps offer features like real-time expense tracking, bill reminders, and personalized insights to help you save and manage money effectively. With a user-friendly interface, they simplify financial planning, making it easier to stay on top of your finances and achieve long-term financial stability.
All you need to know about Spring Boot and GraalVM
All you need to know about Spring Boot and GraalVM 🐰
Ensuring Efficiency and Speed with Practical Solutions for Clinical Operations
Clinical operations professionals encounter unique challenges. Balancing regulatory requirements, tight timelines, and the need for cross-functional collaboration can create significant internal pressures. Our upcoming webinar will introduce key strategies and tools to streamline and enhance clinical development processes, helping you overcome these challenges.
一比一原版(USF毕业证)旧金山大学毕业证如何办理
USF硕士毕业证成绩单【微信95270640】一比一伪造旧金山大学文凭@假冒USF毕业证成绩单+Q微信95270640办理USF学位证书@仿造USF毕业文凭证书@购买旧金山大学毕业证成绩单USF真实使馆认证/真实留信认证回国人员证明
#一整套旧金山大学文凭证件办理#—包含旧金山大学旧金山大学本科毕业证成绩单学历认证|使馆认证|归国人员证明|教育部认证|留信网认证永远存档教育部学历学位认证查询办理国外文凭国外学历学位认证#我们提供全套办理服务。
一整套留学文凭证件服务：
一：旧金山大学旧金山大学本科毕业证成绩单毕业证 #成绩单等全套材料从防伪到印刷水印底纹到钢印烫金
二：真实使馆认证（留学人员回国证明）使馆存档
三：真实教育部认证教育部存档教育部留服网站永久可查
四：留信认证留学生信息网站永久可查
国外毕业证学位证成绩单办理方法：
1客户提供办理旧金山大学旧金山大学本科毕业证成绩单信息：姓名生日专业学位毕业时间等（如信息不确定可以咨询顾问：我们有专业老师帮你查询）；
2开始安排制作毕业证成绩单电子图；
3毕业证成绩单电子版做好以后发送给您确认；
4毕业证成绩单电子版您确认信息无误之后安排制作成品；
5成品做好拍照或者视频给您确认；
6快递给客户（国内顺丰国外DHLUPS等快读邮寄）。
教育部文凭学历认证认证的用途：
如果您计划在国内发展那么办理国内教育部认证是必不可少的。事业性用人单位如银行国企公务员在您应聘时都会需要您提供这个认证。其他私营 #外企企业无需提供！办理教育部认证所需资料众多且烦琐所有材料您都必须提供原件我们凭借丰富的经验帮您快速整合材料让您少走弯路。
实体公司专业为您服务如有需要请联系我: 微信95270640奈一次次令他失望山娃今年岁上五年级识得很多字从走出小屋开始山娃就知道父亲的家和工地共有一个很动听的名字——天河工地的底层空空荡荡很宽阔很凉爽在地上铺上报纸和水泥袋父亲和工人们中午全睡在地上地面坑坑洼洼山娃曾多次绊倒过也曾有长铁钉穿透凉鞋刺在脚板上但山娃不怕工地上也常有五六个从乡下来的小学生他们的父母亲也是高楼上的建筑工人小伙伴来自不同省份都操着带有浓重口音的普通话可不知为啥山娃不仅很快与他们熟识了
Penify - Let AI do the Documentation, you write the Code.
Penify automates the software documentation process for Git repositories. Every time a code modification is merged into "main", Penify uses a Large Language Model to generate documentation for the updated code. This automation covers multiple documentation layers, including InCode Documentation, API Documentation, Architectural Documentation, and PR documentation, each designed to improve different aspects of the development process. By taking over the entire documentation process, Penify tackles the common problem of documentation becoming outdated as the code evolves.
https://www.penify.dev/
Baha Majid WCA4Z IBM Z Customer Council Boston June 2024.pdf
IBM watsonx Code Assistant for Z, our latest Generative AI-assisted mainframe application modernization solution. Mainframe (IBM Z) application modernization is a topic that every mainframe client is addressing to various degrees today, driven largely from digital transformation. With generative AI comes the opportunity to reimagine the mainframe application modernization experience. Infusing generative AI will enable speed and trust, help de-risk, and lower total costs associated with heavy-lifting application modernization initiatives. This document provides an overview of the IBM watsonx Code Assistant for Z which uses the power of generative AI to make it easier for developers to selectively modernize COBOL business services while maintaining mainframe qualities of service.
🏎️Tech Transformation: DevOps Insights from the Experts 👩💻
Connect with fellow Trailblazers, learn from industry experts Glenda Thomson (Salesforce, Principal Technical Architect) and Will Dinn (Judo Bank, Salesforce Development Lead), and discover how to harness DevOps tools with Salesforce.
The Rising Future of CPaaS in the Middle East 2024
Explore "The Rising Future of CPaaS in the Middle East in 2024" with this comprehensive PPT presentation. Discover how Communication Platforms as a Service (CPaaS) is transforming communication across various sectors in the Middle East.
Alluxio Webinar | 10x Faster Trino Queries on Your Data Platform
Alluxio Webinar
June. 18, 2024
For more Alluxio Events: https://www.alluxio.io/events/
Speaker:
- Jianjian Xie (Staff Software Engineer, Alluxio)
As Trino users increasingly rely on cloud object storage for retrieving data, speed and cloud cost have become major challenges. The separation of compute and storage creates latency challenges when querying datasets; scanning data between storage and compute tiers becomes I/O bound. On the other hand, cloud API costs related to GET/LIST operations and cross-region data transfer add up quickly.
The newly introduced Trino file system cache by Alluxio aims to overcome the above challenges. In this session, Jianjian will dive into Trino data caching strategies, the latest test results, and discuss the multi-level caching architecture. This architecture makes Trino 10x faster for data lakes of any scale, from GB to EB.
What you will learn:
- Challenges relating to the speed and costs of running Trino in the cloud
- The new Trino file system cache feature overview, including the latest development status and test results
- A multi-level cache framework for maximized speed, including Trino file system cache and Alluxio distributed cache
- Real-world cases, including a large online payment firm and a top ridesharing company
- The future roadmap of Trino file system cache and Trino-Alluxio integration
ppt on the brain chip neuralink.pptx
A neural network is a machine learning program, or model, that makes decisions in a manner similar to the human brain, by using processes that mimic the way biological neurons work together to identify phenomena, weigh options and arrive at conclusions.
Unlock the Secrets to Effortless Video Creation with Invideo: Your Ultimate G...
Unlock the Secrets to Effortless Video Creation with Invideo: Your Ultimate G...The Third Creative Media
"Navigating Invideo: A Comprehensive Guide" is an essential resource for anyone looking to master Invideo, an AI-powered video creation tool. This guide provides step-by-step instructions, helpful tips, and comparisons with other AI video creators. Whether you're a beginner or an experienced video editor, you'll find valuable insights to enhance your video projects and bring your creative ideas to life.Operational ease MuleSoft and Salesforce Service Cloud Solution v1.0.pptx
Operational ease MuleSoft and Salesforce Service Cloud Solution v1.0
42 Ways to Generate Real Estate Leads - Sellxpert
Generate hot real estate leads with these simple strategies. 42 innovative ways to attract clients in the real estate industry.
WMF 2024 - Unlocking the Future of Data Powering Next-Gen AI with Vector Data...
Vector databases are transforming how we handle data, allowing us to search through text, images, and audio by converting them into vectors. Today, we'll dive into the basics of this exciting technology and discuss its potential to revolutionize our next-generation AI applications. We'll examine typical uses for these databases and the essential tools
developers need. Plus, we'll zoom in on the advanced capabilities of vector search and semantic caching in Java, showcasing these through a live demo with Redis libraries. Get ready to see how these powerful tools can change the game!
Software Test Automation - A Comprehensive Guide on Automated Testing.pdf
Moving to a more digitally focused era, the importance of software is rapidly increasing. Software tools are crucial for upgrading life standards, enhancing business prospects, and making a smart world. The smooth and fail-proof functioning of the software is very critical, as a large number of people are dependent on them.
Recently uploaded (20)
Boost Your Savings with These Money Management Apps
Boost Your Savings with These Money Management Apps
All you need to know about Spring Boot and GraalVM
All you need to know about Spring Boot and GraalVM
Ensuring Efficiency and Speed with Practical Solutions for Clinical Operations
Ensuring Efficiency and Speed with Practical Solutions for Clinical Operations
Penify - Let AI do the Documentation, you write the Code.
Penify - Let AI do the Documentation, you write the Code.
Baha Majid WCA4Z IBM Z Customer Council Boston June 2024.pdf
Baha Majid WCA4Z IBM Z Customer Council Boston June 2024.pdf
🏎️Tech Transformation: DevOps Insights from the Experts 👩💻
🏎️Tech Transformation: DevOps Insights from the Experts 👩💻
The Rising Future of CPaaS in the Middle East 2024
The Rising Future of CPaaS in the Middle East 2024
Alluxio Webinar | 10x Faster Trino Queries on Your Data Platform
Alluxio Webinar | 10x Faster Trino Queries on Your Data Platform
Unlock the Secrets to Effortless Video Creation with Invideo: Your Ultimate G...
Unlock the Secrets to Effortless Video Creation with Invideo: Your Ultimate G...
Operational ease MuleSoft and Salesforce Service Cloud Solution v1.0.pptx
Operational ease MuleSoft and Salesforce Service Cloud Solution v1.0.pptx
Computer Science & Engineering VI Sem- New Syllabus.pdf
Computer Science & Engineering VI Sem- New Syllabus.pdf
Migration From CH 1.0 to CH 2.0 and Mule 4.6 & Java 17 Upgrade.pptx
Migration From CH 1.0 to CH 2.0 and Mule 4.6 & Java 17 Upgrade.pptx
WMF 2024 - Unlocking the Future of Data Powering Next-Gen AI with Vector Data...
WMF 2024 - Unlocking the Future of Data Powering Next-Gen AI with Vector Data...
Software Test Automation - A Comprehensive Guide on Automated Testing.pdf
Software Test Automation - A Comprehensive Guide on Automated Testing.pdf
Debugging with Strace and Sysdig
- 1. DEBUGGING PHP WITH STRACE AND SYSDIG JOSHUA EICHORN CTO PAGELY
- 2. WHAT • System level debugging tools • See system calls • See network/disk io
- 3. WHY • IO is the most common cause of problems • No overhead when not in use • Much lower overhead then newrelic/etc • Easy install
- 4. STRACE • Easy install • Apt-get install etc • See system calls • Lots of filters • Output is raw
- 5. SYSDIG • Needs a kernel module • Easy install on anything new • Protocol aware http etc • Container aware • Easy to see all the traffic on port 80 or 9000
- 6. DEBUGGING A CLI SCRIPT • Trace script • Watch a script with no status • See mysql queries
- 7. DEBUGGING PHP-FPM • Broken config, see fpm headers • Log messages with broken logging • Finding a slow http request
- 8. SYSDIG AND CHISELS • Scripts to parse raw data • Protocol decoding • Summary
- 9. NETWORK DEBUGGING WITH SYSDIG • Http traffic/http chisel • PHP-fpm traffic • Filter to just POST requests • From a specific IP • Using with SSL
- 10. SYSDIG AND CONTAINERS • See network io in a container • See disk io in a container • Snoop on tty activity
- 11. SYDIG LINKS • http://www.sysdig.org/wiki/sysdig-user-guide/ • http://www.sysdig.org/wiki/sysdig-examples/
- 12. WHEN TO USE EACH TOOL • Strace • When you don’t have root • Finding general slowness • Broken configs • What is that script doing • Sysdig • Watching network traffic • What is that container doing • You want tcpdump
- 13. IS HIRING DEVOPS ENGINEERS • Want to use Strace and Sysdig on the job • Join Pagely’s Devops Team • https://pagely.com/careers/devops-engineer-remote-jr-mid/