https://www.trisul.org/devzone/ 2026-04-20T10:33:12+00:00 https://www.trisul.org/devzone/ https://www.trisul.org/devzone/ww.trisul.org/devzone/lib/tpl/dokuwiki/images/favicon.ico text/html 2017-11-15T23:27:31+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/articles:livevspcap?rev=1510768651&do=diff Live capture vs PCAP files Network Security Monitoring aka NSM involves the collection of a variety of information elements by passive observation of network traffic. There are essentially two ways to run packet analytics, Live Capture vs Reading PCAP files. They may appear to be the same, but there are some crucial differences that are hidden only to surface when you try to read in PCAP files. text/html 2018-03-03T20:34:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/articles:memcached?rev=1520089473&do=diff Create sample file Create a sample text file cat /proc/* >> /tmp/memcached.txt Using a Dalli ruby gem to set a value for memcached . f=File.read(" /tmp/memcached.txt") dc = Dalli::Client.new('192.168.2.99:11211',{}) dc.set('test6',f) Use a netcat to get value from memcached . text/html 2021-04-21T17:20:05+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/articles:portvlanid?rev=1619005805&do=diff How to map port name from ifTable to a dot1QVLAN ID and Name THe following steps can be used to map an ifIndex to a dot1QVLAN ID. This helps with ISP customers of Trisul who also want to see the VLAN ID in the same table as the interface names. * text/html 2018-04-27T17:52:17+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/articles:proxmox_span?rev=1524831737&do=diff Configuring a Port Mirror on Proxmox VE for Trisul NSM Proxmox VE is a leading enterprise virtualization platform that uses a KVM based hypervisor along with a nice web based management interface. We like Proxmox for NSM (Network Security Monitoring) applications due to its higher performance. text/html 2018-08-24T23:18:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.trisul.org/devzone/doku.php/articles:segmentsmack?rev=1535132883&do=diff Trisul Script to detect TCP SegmentSmack attack SegmentSmack CVE-2018-5390 is a vulnerability in the Linux TCP/IP stack. It can only be detected by traffic monitoring and not by a single signature. We just released a PoC script on our Github page that shows you how you can use Trisul to detect the attack.