Tips, Articles, Howtos
Articles and Whitepapers related to Unsniff, Trisul, and Unbrowse SNMP

Work with output from snmpwalk
Convert snmpwalk to mib browserSNMPWALK is one of the main tools used by a network engineer to troubleshoot behavior or verify configuration of devices. The output however is pretty hard to understand. In this article, we will talk about how Unbrowse SNMP makes the task of working with SNMPWALK dumps much easier. Snmpwalk is a command line utility available on almost all router platforms. A standalone version is also available for free from the excellent Net-SNMP project.
Read more...
 
How to effectively use a MIB Browser
MIB Browser Tutorial ThemeAre you just beginning to learn the ropes as a network administrator ? Learn how you can effectively use a MIB Browser to retrieve and set configuration data in routers, switches, and servers.
  • What is a MIB Browser ?
  • Working with MIB Modules and enterprise MIBs
  • How to select and read the MIB objects that are most interesting to you ?
Read more...
 
Asterisk Call Analyzer for IAX2
An add-on tool for complete IAX2 (Asterisk Protocol) call analysis
  Click for Whitepaper "IAX2 Call Analyzer for Unsniff" (900 kb)IAX2 Call Analyzer
Are you one of the growing number of people deploying the Asterisk VoIP platform ? We present a add-on tool that performs complete VoIP Call Analysis for the Inter Asterisk Exchange (IAX2) protocol. Measure and plot call bandwidth, interarrival delay, jitter, packet loss, and IAX2 events for each direction of call. This tool like others in this series (such as TCP/IP analysis) is written in the excellent Ruby scripting language using the Fox-Ruby toolkit. Full source code of the tool is provided for you to tweak it to your liking. If you are working with Asterisk in any capacity, this is a "must  have" tool on your workbench.
Read more...
 
IAX2 (Asterisk) Analysis using Unsniff

Troubleshoot Asterisk using UnsniffFind out how you can use Unsniff to develop, debug, or test the IAX2 protocol (the native protocol used by the Asterisk open source PBX).  Are you getting disconnected or the wrong codec is being negotiated ? Unsniff can help you debug it. Just hover your mouse over any field for bubble help to pinpoint your problem. You can track calls, playback each direction of a conversation, or save these conversations to a WAV file. If you know a scripting language (VBScript or Ruby) you can easily whip up your own analysis scripts.
Read more...
 
Decrypt SNMPv3 messages

Analyzing encrypted SNMPv3

Decrypt SNMPv3 DES AES-128Unsniff provides excellent support for SNMPv3 analysis such as deep decodes, full bubble help, scriptability, and OID resolution. However SNMPv3 in privacy mode will stump Unsniff because of its encrypted payload. This article explains how you can continue to analyze SNMPv3 using the decryption features provided by Unsniff. By providing Unsniff with the privacy key information, you can automatically decrypt SNMPv3 PDUs which use the CBC-DES and CFB-AES-128 symmetric encyption algorithms.
Read more...
 
Analyzing SSL/TLS

Using Unsniff to analyze SSL and TLS streams

Click for PDF Version "Using Unsniff to analyze SSL / TLS " (694 kb)

A number of applications today use SSL and TLS as a security layer. Unsniff allows authorized users to analyze these applications by decrypting the SSL/TLS streams in real time. This is done without interrupting the SSL streams in any way. Unsniff can also strip out the SSL/TLS layer completely and analyze the application protocols as if the security layer never existed. If you are working with a secure web server, you can analyze the HTTPS protocol, including the ability to reconstruct complete web pages.

Read more...
 
Analyzing HTTP streams

Analyzing HTTP streams

This article will introduce you to various techniques for analyzing HTTP streams.Analyzing HTTP streams

Unsniff has powerful analysis capabilities for HTTP analysis including.
    * Extract content (user objects) from HTTP streams
    * View entire HTML pages, images, flash, and media from within Unsniff
    * View all HTTP headers
    * View color-coded HTTP requests and responses
    * Full web pages including inline images, flash, stylesheets supported
    * Click through to other captured pages
    * Save pages for later analysis 
    * Scripts to extract interesting data from HTTP headers
Read more...
 
<< Start < Prev 1 2 3 Next > End >>

Page 2 of 3