www.m00nie.com

SSH Unable to negotiate

SSH Unable to negotiate

Trying to connect to some older Cisco routers from a reasonabley modern linux machine gave me the following errors: Unable to negotiate with 1.1.1.1 port 22: no matching host key type found. Their offer: ssh-rsa Unable to negotiate with 1.1.1.1 port 22: no matching

Install Wireguard on Fire stick

Install Wireguard on Fire stick

Recently its been handy to have some traffic from fire sticks to traverse VPNs using wireguard. The below was found to be working well for me using 4k fire stick (Fire stick lite did not work at all for me :(). I also used adb to install the wireguard package just

Simple traffic control tester (traffic mangling)

Simple traffic control tester (traffic mangling)

This post covers how to make a nice simple (cheap!) but still powerful traffic ‘mangler’ :) It can quite granularly control the bandwidth, latency, loss and error injection levels without having to re-plumb or reconfigure the network you are trying to test. To do this we’ll use two nice features

Batch re-encode videos based on resolution, filetype and codec

Batch re-encode videos based on resolution, filetype and codec

Its been quite handy recently to re-encode some old videos to x265/HEVC to save a bit (actually a fair bit :o) of disk space now that most devices at home can playback x265 videos in hardware. The main downside is its realtivly slow and finding the videos I wanted

Specifically disable certificate verification in lftp

Specifically disable certificate verification in lftp

LFTP is a great FTP program that I use quite regularly. I recently had a problem connecting to a server (that I didnt control) and getting the following error due to the cert being self signed:

Eggdrop URL title grabbing script

Eggdrop URL title grabbing script

Another simple script similar to the youtube title grabber that will attempt to grab the title for any HTTP(s) URL spammed into the chan. Includes some basic throttling for per user/nick, channel and specific URLs that can be tweaked. Just requires the http & TLS packages and will attempt

Send break with minicom

Send break with minicom

Getting old and not something I typically have to do much these days but short reminder to myself of how to send a break command to a serial port or console using minicom. Usually this is me knobbing around when I forget some Cisco device login and need to do

Install and verify softflowd for Netflow on OpenWrt

Install and verify softflowd for Netflow on OpenWrt

softflow is a great opensource Netflow exporter that is support on OperWrt :) This allows us to sample the flows running through our OpenWrt router, export them to a netflow analyzer (more on those in a future post) and "see" our traffic. Netflow is much richer in information than just SNMP

openweathermap script for eggdrop

openweathermap script for eggdrop

Recently wunderground announced the end of new registrations for "free" API access making an earlier eggdrop weather script [here] somewhat less useful. The script below attempts to replicate the functionality but using the very nice people over at openweathermap.org API. It also makes use of a second API from

movie search script for eggdrop bot using api

movie search script for eggdrop bot using api

Recently another script I used to search for film information got broken. After a quick look around I found the nice people over at OMDb (http://www.omdbapi.com/) who have a good API to expose things like IMDB rating and other information regarding movies. Its a simple script (as

Twitter Eggdrop script

Twitter Eggdrop script

I've started to play around the the Twitter API a little and created a small script to grab the contents of a spammed tweet link and display it in the channel. Requires a v1 API key etc for Oauth which you can request here: https://apps.twitter.com/ Take a

News script for eggdrop bot

News script for eggdrop bot

This script uses the API from newsapi.org to return the latest headlines from a users preselected news site. Requires +news set on the channel and your own free API key Any comment or suggestions more then welcome :) Example screenshot: Script can be grabbed [here]. Script: ################################################################################################ # Name m00nie::news # Description

kodi-pvr-mythtv addon for Fedora (25)

kodi-pvr-mythtv addon for Fedora (25)

Kodi MythTV PVR automated packages from rpmfusion. and unitedrpms. sadly haven't been working on my Fedora 24 or 25 systems for quite sometime with crashes and failures to load that I couldnt figure out easily. I've manually built the addon using the following commands (on a 64bit Fedora 25 system)

Subnet Calculator

Subnet Calculator

A simple subnet calculator that will accept either an IPv4 or IPv6 subnet in CIDR notation For example 192.168.10.0/29 or beef::/112 is acceptable. The tool (should) automatically detect the IP version and output accordingly (broadcast for v4 etc). It will output info like first/last

Gif search script for eggdrop bot

Gif search script for eggdrop bot

Just another small script that uses the nice API over at giphy to return gif links based on the query from a user. Requires +giphy set on the channel but hopefully a very simple and straight forward script although as ever any comment or suggestions more then welcome :) Script can

EIGRP Filtering (GNS3 lab)

EIGRP Filtering (GNS3 lab)

In this GNS3 lab we're looking as the various options on how we can filter updates between EIGRP speakers and then how that affects the traffic flow (as EIGRP is a distance vector protocol we can filter updates :))This is just a lab to look at the different methods of

Juniper SRX IPv6 (VDSL or FFTC)

Juniper SRX IPv6 (VDSL or FFTC)

Recently ZEN announced an open IPv6 trial in the UK and first impressions are very good (just like the rest of their service :D ) DHCPv6 using prefix delegation (RFC 3633) is being used to issue each subscriber with a /48 range. Its maybe a small step but a nice one

Image search script for eggdrop (Bing API)

Image search script for eggdrop (Bing API)

***BING have since closed their API so this script no longer works :( Sadly one of the few APIs that still provides access to image search now the Bing API provides all the results for this script. Again a very simple script (it has a simple function? :)) Users can trigger and

Weather eggdrop script for wunderground.com API

Weather eggdrop script for wunderground.com API

*** This API has since been closed by Wunderground :( Please look HERE for an more modern alternative This is a simple script tcl script for an eggdrop that will allow users to set a default location and then grabs current conditions or a 3 day forecast using that default location or

6to4 Tunnelling (GNS3 Lab)

6to4 Tunnelling (GNS3 Lab)

This is a quick lab to look over how 6to4 tunnelling can be implemented using GNS3 1.3 and 3725 (running c3725-adventerprisek9-mz124-15.image). The topology will be as below but the important part if the colouring of the network segments and noticing the middle/core is purely IPv4 only! Our

Install GNS3 1.x on Fedora 22

Install GNS3 1.x on Fedora 22

Quick guide to installing the quite awesome GNS3. Very similar process to Fedora 20 but this time using DNF and a small adjustment on some package names with some extras included now for dynamips to compile since it now uses cmake. Install dependencies sudo dnf install git gcc python3-devel python-pip

Decrypt HTTPS (SSL/TLS) with Wireshark

Decrypt HTTPS (SSL/TLS) with Wireshark

Wireshark has some very nice SSL/TLS decryption features tucked away although you need either of the following two: * Access to the servers private pki key * Access to the client machines and its (pre)master secrets (also need Firefox or Chrome) Unfortunately, dumping the premaster secret was removed in FireFox

GET VPN (GNS3 Lab)

GET VPN (GNS3 Lab)

Group Encrypted Transport (GET) VPN is slightly different and has quite different use cases from more traditional point to point IPSEC VPN where each point to point VPN is quite distinct in its own right. The most import thing to remember at GET VPN is the "G" means group and

DMVPN setup with PSK (GNS3 Lab)

DMVPN setup with PSK (GNS3 Lab)

Dynamic Multipoint VPNs (DMVPN) offer a low admin overhead and scalable VPN solution. It is also efficient at routing traffic as it can dynamically reconfigure itself from a hub and spoke to a partial or full mesh topology! This means that not all traffic has to pass through the hub

Disable ASA TCP State tracking (make my ASA a router)

640-553 CCNA Security

Disable ASA TCP State tracking (make my ASA a router)

Recently had to use this (useful?) feature to help a customer with an asymmetric traffic flow via an ASA. The ASA would only see the out bound traffic from a host with the return traffic going via an alternative path not visible to the ASA.This simple diagram is an