PfSense RA

The pfSense page here does a good job of explaining what router advertisements are and some of the settings, but I had to play around to make it work. If you have a flat uncomplicated network at home, the defaults will probably work fine.  Clients would pull IPv6 + the default Read more…

OpenELEC VPN

1. Install openvpn on OpenELEC: In Kodi select SYSTEM / File Manager Select Add Source / Select None Type http://fusion.tvaddons.ag and select Done Highlight the box underneath and type “fusion” Select OK Go back to your Home Screen and Select SYSTEM Select Add-Ons / Select Install from zip file / Read more…

STIX and TAXII for Bro IDS

1. Install prereqs on Debian 8.6 apt-get install libxml2-dev libxslt1-dev python-dev zlib1g-dev python-pycurl python-pip 2. Install libtaxii pip install libtaxii 3. Cron this script to pull different TAXII feeds from hailataxii.com, and convert them into lists that bro can put into the Intel Framework. #!/bin/sh ## TAXII feed script ## Read more…

Bro 2.5 beta

Lots of new features https://www.bro.org/documentation/beta/NEWS.bro.html Installed a test instance on FreeBSD 10.3. pkg install wget swig mkdir /opt wget https://www.bro.org/downloads/beta/bro-2.5-beta.tar.gz tar zxvf bro-2.5-beta.tar.gz ./configure –prefix=/opt/bro && make && make install Get some coffee. I edited /opt/bro/share/bro/site/local.bro and uncommented VLAN logging, Mac logging, and SMB analyzer for testing. I also edited /opt/bro/etc/node.cfg Read more…