Re: [tcpdump-workers] Buffer overwrites with pcap_next_ex

2009-02-15 Thread Michael Bernstein
arger - not saying that should not contribute to this mailing list, but we could really use your expertise for larger problems.  You can help us so much, since you are so knowledgeable about code at a low level. Best, Michael Bernstein Sales Engineer & Security Specialist CCIE Security #16

Re: [tcpdump-workers] about this mailing list

2008-06-13 Thread Michael Bernstein
Hey Guy - I respect your talents and devotion, an MIT graduate. That's great, because I could never get into that college, except I make more money than you. MIT sucks, if you don't do anything with it, that pays. Example = Scott Morris 4x CCIE & JNCIE, MIT sucks compared to him!!!  I could put

Re: [tcpdump-workers] about this mailing list

2008-06-12 Thread Michael Bernstein
--- On Wed, 6/11/08, Guy Harris <[EMAIL PROTECTED]> wrote: From: Guy Harris <[EMAIL PROTECTED]> Subject: Re: [tcpdump-workers] about this mailing list To: tcpdump-workers@lists.tcpdump.org Date: Wednesday, June 11, 2008, 10:57 PM On Jun 11, 2008, at 7:32 PM, Michael Bernstein wrote: >

[tcpdump-workers] about this mailing list

2008-06-11 Thread Michael Bernstein
Hi everyone - I've been a member of the mailing list, but haven't had a chance to read all the articles. My main question is based on Libpcap and TCPdump, essential tools in network security analysis. My background in that I'm a CCIE Security, experience with MSSP performing security analysis o

Re: [tcpdump-workers] Taps compatibility

2006-09-05 Thread Michael Bernstein
(this is very handy if you want to make absolutely sure that there's no way a passive monitor can be active. Michael Bernstein replied: >So you want to use a Linux box as an in-line tap. You might have to configure >it for bridging or bonding, not exactly sure how to accompli

Re: [tcpdump-workers] Taps compatibility

2006-08-31 Thread Michael Bernstein
So you want to use a Linux box as an in-line tap. You might have to configure it for bridging or bonding, not exactly sure how to accomplish this, however, i my self am also interested in something like this. David Moron <[EMAIL PROTECTED]> wrote: Hi everyboy, I want to monitor a Gigabit Multim