Sunday, December 9, 2007
Needham Schroeder
Step 1,2 and 3 seems to be compulsory cos all the text has described these three steps , but some text have Omitted the step 4 and 5 , and has described that lack of step 4 and 5 makes Needham Schroeder symmetric key protocol vulnerable cos "A" cannot know whether the message 3 was delivered to the intended recipient "B" ...
Tuesday, October 30, 2007
CC error
Two weeks a go I was in a meeting – the issue was about CC error , since no one really knew what is "cc error" , I was asked to figure out what is CC error , well … this was a task with no real information in hand , actually I knew its something to do with video multicasting , so I was looking for some clue about cc error in UDP/RTP header , but ,,, found basically nothing , the problem was I did not know what 'cc' stands for . Then I assumed that may be CC error is related to the MPEG-2 frame - ..ha ha … yha I was correct , cc = 'continuity counter' …. so the cc error is "continuity counter error" , this is used for keeping a track of the sequence of the MPEG-2 frames , and if you are seeing "cc error" at the clients end when you are using some video stream analyzer like "IQmedia" , the error can be mainly due to ,
1) one packet repeat more than twice
2) packets out of sequence
3) packet loss
each UDP packet of 1316 bytes carry 7 MPEG-2 frames of 188bytes each – each MPEG-2 frames has 4 byte header and the last byte is for continuity counter .
ETH | IP | UDP | FR-1 | FR-2 | FR-3 | FR-4 | FR-5 | FR-6 | FR-7 | Eth… |
Frame – 1 (FR-1)
SYN(8) | TEI(1) | PUSI(1) | TP(1) | PID(13) | TSC(2) | AF(2) | CC (4) | Video |
DHCP infinite lease
Found something interesting , This happened with Many major DOCSIS 2.0 cable modem brands. The problems is if you set the DHCP lease time to infinite – that is the 32-bits in the DHCP header (option-51) that defines the DHCP lease time is set to
FF FF FF FF
if it is set to the maximum value , the cable modem will fail to register with the CMTS , the maximum value you can use is 7F FF FF FF , yha the most significant bit is made zero ,
0111 | 1111 | 1111 | 1111 | 1111 | 1111 | 1111 | 1111 |
7 | F | F | F | F | F | F | F |
I used the DHCP-turbo server where there is an option to set an infinite lease .
DHCP infinite lease ,
I wrote a small MATLAB code to calculate how many Days , hours , minutes and seconds is 7F FF FF FF
--------------------------------------------
format long
x=hex2dec('7fffffff');
days = fix(x/(3600*24))
y = x - days*3600*24;
hours = fix(y/3600)
z = y - hours*3600;
minutes = fix(z/60)
seconds = z - minutes*60
---------------------------------------------
answer :
>> dhcplease
days = 24855
hours = 3
minutes = 14
seconds = 7
Sunday, July 8, 2007
IP multicasting
in my environment I already simulated the IGMP part , for that I used following equipment :
to set up the IGMP environment :
Wednesday, June 27, 2007
SIP
SIP server : http://www.brekeke.com/download/download_sip_2_0.php ( SIP server 2.0)
SIP client : http://www.counterpath.com/index.php?menu=Products&smenu=xlite (X-lite 3.0)
first : you need three PCs ( or two PCs also is oki ) and a Small Hub to make a small network
*** may be u can use VMware to run Three OS in the same PC so you do not need a network
install the SIP server in Server- Windows XP is the best for this ( get Academic licence - the process is bit long but it works and its free ) ...
Install the SIP server : to an easy and trouble free installation ,
1) make you IP address fixed ( Manually assigned - NO DHCP) - if the IP address is "assigned by DHCP" the server will refuse to start !!
2) MAke sure that you can acess internet through the same IP address.
*** even if u cannot access internet through the same IP you can get this working but ... kind of .... can cause u trouble . . . just follow the instructions on http://www.brekeke.com/products/products_sip_quickstart.php
username : sa
password : sa
add two user account :
* better to user numbers as user accounts - eg : 101 , but you can use names as well , eg : "ruwan" ...
Friday, June 15, 2007
Active FTP vs Passive FTP
tools :
Fedora core 6 - FTP server
Fedora core 4 - FTP client
I actually tried to use Windows client but could not find the command to disable "passive mode FTP " ...but I found one artical about how to disable passve FTP in internet explorer
suprizingling I found a bug in Fedora Core 4 - when the FTP client send "PORT" command or "Passive" comand etc the pkt sent has a check sum error - in the TCP section !!!
the first problem I faced - how can I initiate an Active FTP session because all FTP clients use passive FTP by default !!! .... after lot of search I figuredout that its not that difficult ,
open linux shell , tupe "ftp" and then type "passive" - then u will see the message "passive mode is off"
shell> ftp
ftp> passive
Passive mode off
ftp>
then just use get command to download some file !!! u have ur self an ACTIVE FTP connetion !!!
ftp> get test.txt
and use "etheral to capture pkts " ... then u can see for sure that it was an Active FTP session !!!
Saturday, June 2, 2007
PPPoE / PPPoA / IPoE
PPPoE - the PPPoE client can be in the PC or in the modem , the diagram below is the case when PPPoE client is built in the modem. The user name and password will be set in the modem. For IP DSLAM there is nothing much to do about the PPPoE pkts than pass-through. According to TR-101 the DSLAM should add a tag to identify the ADSL port from which the PPPoE session is initiated.
Sunday, May 27, 2007
PPPoE Circuit ID tagging feature in DSLAM
In an Ethernet access network, there is no unique mapping between the subscriber and the ADSL port. This cause problems in RADIUS access and accouting because the RADIUS server expect the BRAS to send information about the ADSL port it is authenticating and accoring for.
How this work - During the authentication phase the BRAS includes the NAS-Port-Id attribute(Radius attribute 87) in RADIUS authentication and RADIUS Accounting request that identifies the DSL line of the subscriber.
To over come this problem DSL Forum TR-101 proposes that the DSLAM sends the DSL Line-Id in the PPP over Ethernet (PPPoE) discovery phase pkts.
TR – 101 specifies that the Vender specific TAG 0x0105 in PPPoE Discovery pkts should be added by the DSLAM :
----------------------------------------------------------------
----------------------------------------------------------------
Vender specific TAG 0x0105 will look like this after DSLAM TAG the PPPoE pkt with the Circuit-ID
-------------------------------------------------------------
--------------------------------------------------------------
to come up with above content I referred the documents given below :
rfc4679 - Vendor-Specific RADIUS Attributes
rfc2865 – RADIUS Authentication
rfc2866 - RADIUS Accounting
rfc2869 - RADIUS Extensions
rfc2516 - A Method for Transmitting PPP Over Ethernet (PPPoE)
TR-101 - Migration to Ethernet-Based DSL Aggregation
http://www.cisco.com/en/US/products/ps6441/products_feature_guide09186a00804fc456.html
Sunday, May 20, 2007
ADSL ???
this is the case when you are using an IP DSLAM , but if you are using a DSLAM with ATM uplink the communication from Modem to the aggregater can be over ATM or even from PC to the aggregate cab be ATM , but the now many ISPs are using IP DSLAMs .
DHCP relay & Option 82
DHCP option 82 - provides a method to send relay agent information and the DHCP client's port information to the DHCP server, according to my experience this feature is quite popular in IP DSLAMs .
well , I tried few DHCP servers :
Windows 2000 advanced server - DHCP option 82 not available originally but when the service pack 4 was installed DHCP option 82 was available due to lack of explanation about how to set up the option 82 I could not still setup option 82 in win 2000 advanced server.
Linux , Fedora core 4 - By default the DHCP server supports DHCP option 82 , I did not have to configure anything . When received a DHCP discovery with the option 82 the FC4 server reply with the Option 82.
DHCP turbo - I downloaded DHCP Turbo form Internet (trial version) , well this software support option 82 but the sofware was not that stable , after some time it stops responding to any DHCP discovery ... then I had to restart my PC to make the DHCP server work again. Hope they will fix the stability issues . Anyway it was very easy to configure and don't need any special server platform to work , so it was very useful.
http://www.weird-solutions.com/weirdSolutions/pages/02products/02turbo/dhcpTurbo/index.php
will write more about DHCP , special my experience with DHCP server responding unicast or Broadcast !!!
Ruwan Indika