<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Tcpdump on BrainBit Latest Articles</title><link>https://brainbit.uk/tags/tcpdump/</link><description>Recent content in Tcpdump on BrainBit Latest Articles</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Thu, 24 Nov 2016 09:27:49 +0000</lastBuildDate><atom:link href="https://brainbit.uk/tags/tcpdump/index.xml" rel="self" type="application/rss+xml"/><item><title>Tcpdump inner works #1</title><link>https://brainbit.uk/posts/tcpdump-inner-works-sharp/</link><pubDate>Thu, 24 Nov 2016 09:27:49 +0000</pubDate><guid>https://brainbit.uk/posts/tcpdump-inner-works-sharp/</guid><description>I use tcpdump a lot , we all do , but if someone tells you to explain how it works what would you say?
Well we know that tcpdump applies a number of rules (if told) to filter traffic before the kernel(iptables or similar) drops it , that’s why if you do something like
tcpdump -i any dst port 21 and you start some connections against port 21 you will see traffic even tho you might not have port 21 bound by any process (some ftp server or what not).</description></item><item><title>Containers but not Docker</title><link>https://brainbit.uk/posts/containers-but-not-docker/</link><pubDate>Mon, 21 Nov 2016 20:47:08 +0000</pubDate><guid>https://brainbit.uk/posts/containers-but-not-docker/</guid><description>I’m not docker’s biggest fan , but i do see its benefits , although i think somehow it has managed to sort of hide what docker really is and what it really does, but this post isn’t about docker , but about namespaces.
Docker/lxc use a kernel feature that , in simplest terms , allows a process to have isolation a multiple levels (pids / fs / hostnames / etc)</description></item></channel></rss>