Tuesday, January 1, 2019

ss command within Linux

The ss (socket statistics) command provides information by displaying details on socket activity.  Some command line switch examples would be:

ss -ta dumps all TCP socket

ss -ua dumps all UDP sockets

ss -wa dumps all RAW sockets

ss -xa dumps all UNIX sockets

ss -4a dumps all IPV4 sockets

ss -6a dumps all IPV6 sockets

ss –lt displays only listening sockets

ss_lt

ss-ltn displays the same data with port numbers

ss_ltn

ss-t displays established TCP connections

ss_t

https://www.networkworld.com/article/3327557/linux/using-ss-to-examine-network-connections.html

Microsoft Windows and Office ISO Download Tool

This tool allows an easy and comfortable way to download genuine Windows 7, Windows 8.1 and Windows 10 disk images (ISO) directly from Microsoft's servers, as well as Office 2010, Office 2013, Office 2016, Office 2019, Expression Studio and Office for Mac.

https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-and-office-iso-download-tool

LiveTcpUdpWatch

LiveTcpUdpWatch is a tool for Windows that displays live information about all TCP and UDP activity on your system. Every line in the main table of LiveTcpUdpWatch displays the protocol (TCP/UDP/IPv4/IPv6), local/remote IP address, local/remote port, number of sent/received bytes, number of sent/received packets, connect/disconnect time (For TCP only), and the process (ID and path) responsible for this activity.  LiveTcpUdpWatch uses event tracing API to get live information from Windows Kernel about every TCP/UDP packet sent/received. It captures all UDP activity with process information but without the need of using a network sniffer.

http://www.nirsoft.net/utils/live_tcp_udp_watch.html

image

Tcpreplay

Tcpreplay is a suite of GPLv3 licensed utilities for UNIX (and Win32 under Cygwin) operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal/Wireshark. It allows you to classify traffic as client or server, rewrite Layer 2, 3 and 4 packets and finally replay the traffic back onto the network and through other devices such as switches, routers, firewalls, NIDS and IPS's. Tcpreplay supports both single and dual NIC modes for testing both sniffing and in-line devices.

https://github.com/appneta/tcpreplay

https://www.kitploit.com/2018/12/tcpreplay-pcap-editing-and-replay-tools.html

Passer

Passer is a passive sniffer and inventory tool.

https://www.activecountermeasures.com/passer-a-passive-sniffer-and-inventory-tool/

https://github.com/activecm/passer/

EventSentry SysAdmin Tools

The EventSentry SysAdmin Tools is a set of command-line and graphical utilities designed to help network administrators with their daily administrative tasks.

https://www.eventsentry.com/sysadmintools

Sndbox.com

SNDBOX is a web site that utilizes artificial intelligence and a hardened virtual environment to perform static and dynamic analysis of malware samples.

https://www.sndbox.com/

Azure Data Studio

Azure Data Studio is a cross-platform database tool for data professionals using the Microsoft family of on-premises and cloud data platforms on Windows, MacOS, and Linux.

Previously released under the preview name SQL Operations Studio, Azure Data Studio offers a modern editor experience with Intellisense, code snippets, source control integration, and an integrated terminal. It is engineered with the data platform user in mind, with built in charting of query result sets and customizable dashboards.

https://docs.microsoft.com/en-us/sql/azure-data-studio/what-is?view=sql-server-2017

https://docs.microsoft.com/en-us/sql/azure-data-studio/download?view=sql-server-2017