Kiran's Blog

Sunday, November 19

Installing a packet analyzer application Wireshark

Wireshark

Wireshark is the world’s foremost and widely-used network protocol analyzer. It lets you see what’s happening on your network at a microscopic level and is the de facto (and often de jure) standard across many commercial and non-profit enterprises, government agencies, and educational institutions.

Features (as listed on the website)

Wireshark has a rich feature set which includes the following:

Deep inspection of hundreds of protocols, with more being added all the time
Live capture and offline analysis
Standard three-pane packet browser
Multi-platform: Runs on Windows, Linux, macOS, Solaris, FreeBSD, NetBSD, and many others
Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility
The most powerful display filters in the industry
Rich VoIP analysis
Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others
Capture files compressed with gzip can be decompressed on the fly
Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platform)
Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2
Coloring rules can be applied to the packet list for quick, intuitive analysis
Output can be exported to XML, PostScript®, CSV, or plain text

Installing Wireshark in terminal of different Linux distro's

Ubuntu and its derivatives

sudo add-apt-repository ppa:wireshark-dev/stable

sudo apt update && sudo apt install wireshark

Opensuse

To install Wireshark in openSUSE Leap 42.3

zypper addrepo https://download.opensuse.org/repositories/network:utilities/openSUSE_Leap_42.3/network:utilities.repo
zypper refresh
zypper install wireshark

To install Wireshark in openSUSE Leap 42.2

zypper addrepo https://download.opensuse.org/repositories/network:utilities/openSUSE_Leap_42.2/network:utilities.repo
zypper refresh
zypper install wireshark

Note : please vist https://software.opensuse.org/download.html?project=network%3Autilities&package=wireshark For more versions

Fedora

sudo dnf install wireshark-qt
or
sudo dnf install wireshark-gtk

Now you need to use a tool called alternatives to switch among them:

$ sudo alternatives --config wireshark
There are 2 programs which provide 'wireshark'.

Selection Command
-----------------------------------------------
*+ 1 /usr/sbin/wireshark-qt
2 /usr/sbin/wireshark-gtk

Enter to keep the current selection[+], or type selection number: 2

Arch Linux and its derivatives

sudo pacman -S wireshark-qt
or
sudo pacman -S wireshark-gtk

Redhat

yum install wireshark wireshark-qt

Download location for Windows and Mac

https://www.wireshark.org/download.html

Visit above link. In that page, click on Stable release and download the application for both 64 bit and 32 bit systems

Please comment on this post. If you like this post please like and share this post.

Sunday, October 1

Format a non-accessible flash drive

Posted by Kiran.BL on Sunday, October 01, 2017 in Microsoft, Windows,

In your daily life, you use your pen drive for a lot of purposes. One such time, when you plug into your PC or laptop for some important work. It will ask you to format the disk or it will say that the drive is not accessible as shown the image below. It will also not show the details of the disk

When you check the properties of the drive, it will show 0 bytes as in the image below

Now go to DISK MANAGEMENT tool of Windows to check what has happened to the drive.

To open the DISK MANAGEMENT tool please follow the below steps:

1. Press Windows logo + R on your keyboard, It will launch the Run window

2. Enter diskmgmt.msc and click OK

When you see in the disk management tool of Windows, It will show that the disk is in the RAW format instead of NTFS or FAT or FAT 32

I will help you with the steps to get your pen drive back in the working condition.

Right-click on the Start button in the lower-left corner of the screen and select the Command Prompt (Admin) option from the Power User menu.

NOTE: You can also press the Windows key + X to access this menu.

Please type diskpart and click on Enter

Type list disk and click on Enter

In my case, the Raw file format disk was Disk 2

Type select disk 2 and press Enter

Type Clean and press enter

The status of the Disk 2 in the Disk Management tool will be UNALLOCATED

Right-click on the un-allocated volume and select New Simple Volume

You will get a New Simple Volume Wizard

You will get the full size of the drive, click on Next

Select your desired drive letter and click on Next

Select your desired from the File system drop-down such as FAT32 and NTFS (Preferred FAT 32)

Leave the Allocation unit size as Default

Enter your desired name beside Volume label

Check Perform a quick format option

Click on Next

Click on Finish

The pen drive is back to its full capacity (in my case 8GB)

Conclusion:

Make sure you follow the exact same steps as described above. After performing all the steps, I can assure you that your pen-drive is back to normal ways

Please comment on this post. If you like this post please like and share this post.

Monday, September 25

Clear old installation files in Windows 10 to free up space

Posted by Kiran.BL on Monday, September 25, 2017 in Microsoft, Windows,

Windows 10 is a beautiful operating system. But sometimes it occupies a lot of space in the OS installation drive. When you upgrade your computer, you will find all the files of the previous version of the operating system in a particular folder called Windows.old.

The size of the previous windows installation will be huge. So the size of the Windows.old folder is large. In order to decrease the size of the Windows installation folder, we need to remove this Windows.old folder.

We can't delete Windows.old folder in the normal way as the operating system will not allow you to delete that folder.

The purpose of Windows.old is: if something bad happens, the operating system can use the backup copy to roll back any change automatically. Or in the case of Windows 10, you also get the option to go back to your previous version of the operating system

So if you are really in need of some space in the windows installation drive and if you don't want to switch to the previous operating system from which you have upgraded to the current operating system, you can use the following steps to remove that folder permanently.

#1. Open Windows Explorer

#2. Locate for the drive in which you have installed the operating system. Usually, the operating system gets installed in C Drive and will have a windows symbol on the icon of the drive.

#3. Right click on the drive. You will get a context menu; in that menu click on properties

#4. You will see the properties of the drive. Now click on DISK CLEANUP.

#5. Click the Clean up system files button.

You will see an option called PREVIOUS WINDOWS INSTALLATION

Click on OK. Click Delete Files on the pop-up dialog to confirm the deletion.

Keep in mind that it's safe to delete the Windows.old folder and related files from your computer. However, you should also consider that after removing these files, you will no longer be able to roll back to the previous version of Windows 10 using the recovery options. After deleting the Windows.old folder, the only way to go back is by performing a clean installation of the operating system.

Conclusion:
So this way you can clear a large chunk of space in the windows installation folder. Use the space wisely and enjoy.

Please comment on this post. If you like this post please like and share this post.