You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
368 lines
26 KiB
368 lines
26 KiB
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<meta name="cheatsheet for network administrators">
|
|
|
|
<link rel="preload" href="https://fonts.googleapis.com/css2?family=DM+Mono:wght@400;500&display=swap" as="style">
|
|
<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=DM+Mono:wght@400;500&display=swap" onload="this.media='all'">
|
|
<noscript><link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=DM+Mono:wght@400;500&display=swap"></noscript>
|
|
|
|
<link rel="preload" href="/raster2.css" as="style">
|
|
<link rel="stylesheet" href="/raster2.css" media="print" onload="this.media='all'">
|
|
<noscript><link rel="stylesheet" href="/raster2.css"></noscript>
|
|
|
|
<link rel="preload" href="/css.css" as="style">
|
|
<link rel="stylesheet" href="/css.css" media="print" onload="this.media='all'">
|
|
<noscript><link rel="stylesheet" href="/css.css"></noscript>
|
|
|
|
<script defer src="tooltip.js"></script>
|
|
<title>networking cheat sheet</title>
|
|
</head>
|
|
<body>
|
|
<r-grid columns="1" columns-l="1">
|
|
<r-cell span="row">
|
|
<a href="https://github.com/domeniko-gentner/network-cheatsheet">
|
|
<img width="32" height="32" src="/github.png" alt="github logo">
|
|
</a>
|
|
<h1>networking cheat sheet</h1>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid class="panel">
|
|
<r-cell>
|
|
<h2>TOC</h2>
|
|
<ul>
|
|
<li><a href="#ethernet">Ethernet Frame</a></li>
|
|
<li><a href="#v4">IpV4 Header</a></li>
|
|
<li><a href="#v6">IpV6 Header</a></li>
|
|
<li><a href="#tcp">TCP Header</a></li>
|
|
<li><a href="#udp">UDP Header</a></li>
|
|
<li><a href="#tcpdump">tcpdump</a></li>
|
|
<li><a href="#nmap">nmap</a></li>
|
|
<li><a href="#mtr">mtr</a></li>
|
|
<li><a href="#iptables">iptables</a></li>
|
|
<li><a href="#cables">Fibre Colors</a></li>
|
|
<li><a href="#sfp">SFP(+) speeds</a></li>
|
|
<li><a href="#bgp">BGP Table path selection</a></li>
|
|
</ul>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="1" class="wrapper">
|
|
<r-cell class="panel" id="ethernet">
|
|
<h2>Ethernet Frame</h2>
|
|
<r-grid columns="9" class="ethernet-frame-grid">
|
|
<r-cell span="1" data-tooltip title="7 bytes<br>for synchronization" class="ethernet-frame-cell">
|
|
<p class="frame-text">Preamble</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="1 byte<br>Marks end of preamble and start of frame. Always 1." class="ethernet-frame-cell">
|
|
<p class="frame-text">SFD</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="6 bytes<br>destination address" class="ethernet-frame-cell">
|
|
<p class="frame-text">Dest. MAC</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="6 bytes<br>source address" class="ethernet-frame-cell">
|
|
<p class="frame-text">Source MAC</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="4 bytes<br>802.1Q, last 12 bits are VLAN ID, optional" class="ethernet-frame-cell">
|
|
<p class="frame-text">[VLAN]</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="2 bytes<br>0x8808: Flow Control<br>0x8809: LACP<br>0x8000: IPV4,<br>0x8100: Tagged VLAN<br>0x8060: ARP<br>0x86DD: IPV6" class="ethernet-frame-cell">
|
|
<p class="frame-text">EtherType</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="46-1500 bytes<br>can be bigger for jumbo frames" class="ethernet-frame-cell">
|
|
<p class="frame-text">Payload</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="4 bytes<br>FCS/Checksum of the frame" class="ethernet-frame-cell">
|
|
<p class="frame-text">FCS</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="4 bytes<br>gap between frames<br>uses a timed pause equal to 4 bytes" class="ethernet-frame-cell">
|
|
<p class="frame-text">GAP</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
</r-cell>
|
|
<r-cell class="panel" id="v4">
|
|
<h2>IPV4 Header</h2>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="1-2" data-tooltip title="4 bits<br>Protocol version, equals 4" class="ethernet-frame-cell">
|
|
<p class="frame-text">IP version</p>
|
|
</r-cell>
|
|
<r-cell span="3-4" data-tooltip title="4 bits<br>Number of 32 bit words in the header<br>5 x 32b = 160b = 20B" class="ethernet-frame-cell">
|
|
<p class="frame-text">Header Length</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="6 bits<br>Service Type (QOS)<br>Expedited Forwarding: 101110<br>Best Effort: 000000" class="ethernet-frame-cell">
|
|
<p class="frame-text">DSCP</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="2 bits<br>Explicit Congestion Notification<br>Requires support on both ends" class="ethernet-frame-cell">
|
|
<p class="frame-text">ECN</p>
|
|
</r-cell>
|
|
<r-cell span="7-8" data-tooltip title="16 bits<br>Total Length of the header<br>Min size: 20B<br>Max size: 65535B" class="ethernet-frame-cell">
|
|
<p class="frame-text">Total Length</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="1-4" data-tooltip title="16 bits<br>Unique ID, identifies datagram parts.<br>" class="ethernet-frame-cell">
|
|
<p class="frame-text">Identification</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="3 bits<br>First: must be zero<br>Second: no fragments<br>Third: more fragments follow" class="ethernet-frame-cell">
|
|
<p class="frame-text">Flags</p>
|
|
</r-cell>
|
|
<r-cell span="6-8" data-tooltip title="13 bits<br>Byte offset of a fragment, relative to first" class="ethernet-frame-cell">
|
|
<p class="frame-text">Fragment Offset</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="1-2" data-tooltip title="8 bits<br>Amount of hops the package lives" class="ethernet-frame-cell">
|
|
<p class="frame-text">TTL</p>
|
|
</r-cell>
|
|
<r-cell span="3-4" data-tooltip title="8 bits<br>Transport Layer Protocol<br>0x01: ICMP<br>0x06: TCP<br>0x11: UDP<br>0x12: MUX<br>" class="ethernet-frame-cell">
|
|
<p class="frame-text">Protocol</p>
|
|
</r-cell>
|
|
<r-cell span="5-8" data-tooltip title="16 bits" class="ethernet-frame-cell">
|
|
<p class="frame-text">Header Checksum</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="row" data-tooltip title="32 bits<br>Source IPv4 Address" class="ethernet-frame-cell">
|
|
<p class="frame-text">Source address</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="1-8" data-tooltip title="32 bits<br>Destination IPv4 Address" class="ethernet-frame-cell">
|
|
<p class="frame-text">Destination address</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="1-8" data-tooltip title="32 bits<br>Various options, rarely used" class="ethernet-frame-cell">
|
|
<p class="frame-text">Options</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
</r-cell><!-- IPV4 Header -->
|
|
<r-cell class="panel" id="v6">
|
|
<h2>IPv6 Header</h2>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="1-2" data-tooltip title="4 bits<br>IP Version -> 0110 = 6" class="ethernet-frame-cell">
|
|
<p class="frame-text">Version</p>
|
|
</r-cell>
|
|
<r-cell span="3-4" data-tooltip title="8 bits<br>See DSCP and ECN on IPV4" class="ethernet-frame-cell">
|
|
<p class="frame-text">Traffic Class</p>
|
|
</r-cell>
|
|
<r-cell span="5-8" data-tooltip title="20 bits<br>Sequential Flow" class="ethernet-frame-cell">
|
|
<p class="frame-text">Flow Label</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="1-4" data-tooltip title="16 bits<br>Payload length may exceed 65535, in which case it is 0" class="ethernet-frame-cell">
|
|
<p class="frame-text">Payload Length</p>
|
|
</r-cell>
|
|
<r-cell span="5-6" data-tooltip title="8 bits<br>indicates protocol, same identifiers as V4" class="ethernet-frame-cell">
|
|
<p class="frame-text">Next header</p>
|
|
</r-cell>
|
|
<r-cell span="7-8" data-tooltip title="8 bits<br>indicates protocol, same identifiers as V4" class="ethernet-frame-cell">
|
|
<p class="frame-text">TTL</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="row" data-tooltip title="128 bits<br>Source Address" class="ethernet-frame-cell">
|
|
<p class="frame-text">Source Address</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="8" class="ethernet-frame-grid">
|
|
<r-cell span="row" data-tooltip title="128 bits<br>Destination Address" class="ethernet-frame-cell">
|
|
<p class="frame-text">Destination address</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
</r-cell><!-- IPV6 Header -->
|
|
<r-cell class="panel" id="tcp">
|
|
<h2>TCP Header</h2>
|
|
<r-grid columns="16" class="ethernet-frame-grid">
|
|
<r-cell span="1-8" data-tooltip title="16 bits<br>Port segment was sent from" class="ethernet-frame-cell">
|
|
<p class="frame-text">Source port</p>
|
|
</r-cell>
|
|
<r-cell span="9-16" data-tooltip title="16 bits<br>Port segmnent is sent to" class="ethernet-frame-cell">
|
|
<p class="frame-text">Destination port</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="1" class="ethernet-frame-grid">
|
|
<r-cell span="row" data-tooltip title="32 bits<br>If SYN flag is set, this is the initial packet.<br>If SYN is not set, data is at number+1" class="ethernet-frame-cell">
|
|
<p class="frame-text">Sequence number</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="1" class="ethernet-frame-grid">
|
|
<r-cell span="row" data-tooltip title="32 bits<br>If the ACK flag is set,<br>then the value of this field is the next<br>sequence number that the sender of the ACK is expecting." class="ethernet-frame-cell">
|
|
<p class="frame-text">Acknowledgment number</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="16" class="ethernet-frame-grid">
|
|
<r-cell span="1-2" data-tooltip title="4 bits<br>Number of 32 bit words that define the size of the header." class="ethernet-frame-cell">
|
|
<p class="frame-text">Data offset</p>
|
|
</r-cell>
|
|
<r-cell span="3-4" data-tooltip title="3 bits<br>Reserved for future use." class="ethernet-frame-cell">
|
|
<p class="frame-text">Reserved</p>
|
|
</r-cell>
|
|
<r-cell span="5-9" data-tooltip title="9 bits<br>SYN: synchronize, start of connection<br>ACK: acknowledge, confirm connection<br>RST: reset connection<br>FIN: last package from sender<br>URG: urgent bit is significant<br>CWR: congestion window reduced" class="ethernet-frame-cell">
|
|
<p class="frame-text">Flags</p>
|
|
</r-cell>
|
|
<r-cell span="10-16" data-tooltip title="16 bits<br>Number of bytes the sender of this segment is willing to receive" class="ethernet-frame-cell">
|
|
<p class="frame-text">Window size</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="2" class="ethernet-frame-grid">
|
|
<r-cell span="1" data-tooltip title="16 bits<br>Used for error checking. TCP can resend invalid segments." class="ethernet-frame-cell">
|
|
<p class="frame-text">Checksum</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="16 bits<br>If the URG flag is set, then this 16-bit field is an offset from the sequence number indicating the last urgent data byte." class="ethernet-frame-cell">
|
|
<p class="frame-text">Urgent pointer</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="1" class="ethernet-frame-grid">
|
|
<r-cell span="row" data-tooltip title="0-320 bits<br>Optional options. Must be divisable by 32, otherwise 0 padding at the end." class="ethernet-frame-cell">
|
|
<p class="frame-text">Options</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
</r-cell><!-- TCP Header -->
|
|
<r-cell class="panel" id="udp">
|
|
<h2>UDP Header</h2>
|
|
<r-grid columns="2" class="ethernet-frame-grid">
|
|
<r-cell span="1" data-tooltip title="16 bits<br>Port the datagram is sent from (optional in IPv6)." class="ethernet-frame-cell">
|
|
<p class="frame-text">Source Port</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="16 bits<br>Port the datagram is sent to." class="ethernet-frame-cell">
|
|
<p class="frame-text">Destination port</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
<r-grid columns="2" class="ethernet-frame-grid">
|
|
<r-cell span="1" data-tooltip title="16 bits<br>Min Length: 8 bytes<br>Max length: 65535 bytes." class="ethernet-frame-cell">
|
|
<p class="frame-text">Length</p>
|
|
</r-cell>
|
|
<r-cell span="1" data-tooltip title="16 bits<br>Used for error recognition. Optional in V4, mandatatory in V6. All zeroes if unused." class="ethernet-frame-cell">
|
|
<p class="frame-text">Checksum</p>
|
|
</r-cell>
|
|
</r-grid>
|
|
</r-cell><!-- UDP Header -->
|
|
<r-cell>
|
|
<r-grid columns="10" class="panel" id="tcpdump">
|
|
<r-cell span="row"><h2>tcpdump</h2></r-cell>
|
|
<r-cell span="row"><h3>flags</h3></r-cell>
|
|
<r-cell span="1" data-tooltip title="tcpdump -i eth0">-i name</r-cell><r-cell span="2-5">Capture named interfaces, any for all</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="tcpdump -c10">-c integer</r-cell><r-cell span="7-10">Capture amount of packages</r-cell>
|
|
<r-cell span="1" data-tooltip title="tcpdump -D">-D</r-cell><r-cell span="2-5">Show available interfaces</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="tcpdump -n -c10 -i any">-n</r-cell><r-cell span="7-10">Do not resolve host-names</r-cell>
|
|
<r-cell span="1" data-tooltip title="tcpdump -nn -c10 -i eth0">-nn</r-cell><r-cell span="2-5">Do not resolve host-names or services (ports)</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="tcpdump -n -c10 -i eth0 tcp">tcp</r-cell><r-cell span="7-10">Capture tcp</r-cell>
|
|
<r-cell span="1" data-tooltip title="tcpdump -n -c10 -i eth0 tcp">udp</r-cell><r-cell span="2-5">Capture udp, also works with others such as arp</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="tcpdump -n -c10 -i eth0 host 10.10.10.10 and [not] udp">host IP</r-cell><r-cell span="7-10">Capture data to or from this host only</r-cell>
|
|
<r-cell span="1" data-tooltip title="tcpdump -n -c10 -i eth0 src 10.10.10.10 and tcp">src IP</r-cell><r-cell span="2-5">Capture data from this host only</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="tcpdump -n -c10 -i eth0 dst 10.10.10.10">dst IP</r-cell><r-cell span="7-10">Capture data sent to this host only</r-cell>
|
|
<r-cell span="1" data-tooltip title="tcpdump -n -c10 -i eth0 net 10.10.10.0/24">net CIDR</r-cell><r-cell span="2-5">Capture data to or from this subnet</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="tcpdump -n -c10 -i eth0 host 10.10.10.10 and port 53">port number</r-cell><r-cell span="7-10">Use service name instead of port</r-cell>
|
|
<r-cell span="1" data-tooltip title="tcpdump -n -i eth0 port not ssh">port not num|name</r-cell><r-cell span="2-5">Exclude port or service in report</r-cell>
|
|
<r-cell span="row"><h3>tcp flags</h3></r-cell>
|
|
<r-cell span="1-2">[S] SYNC</r-cell>
|
|
<r-cell span="3-4">[.|A] ACKNOWLEDGE</r-cell>
|
|
<r-cell span="5-6">[R] RESET</r-cell>
|
|
<r-cell span="7-8">[F] FINISHED</r-cell>
|
|
<r-cell span="9-10">[P] PUSH</r-cell>
|
|
<r-cell span="row">Flags can be displayed combined, [S.] means sync and acknowledge</r-cell>
|
|
</r-grid><!-- tcpdump -->
|
|
</r-cell>
|
|
<r-cell>
|
|
<r-grid columns="10" class="panel" id="nmap">
|
|
<r-cell span="row"><h2>nmap</h2></r-cell>
|
|
<r-cell span="1" data-tooltip title="nmap 10.10.10.1">IP</r-cell><r-cell span="2-5">Scan host</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="nmap 10.10.10.1 10.10.10.2">LIST</r-cell><r-cell span="7-10">Scan list</r-cell>
|
|
<r-cell span="1" data-tooltip title="nmap 10.10.10.0/24">CIDR</r-cell><r-cell span="2-5">Scan subnet</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="nmap -iL targets.txt">-iL file</r-cell><r-cell span="7-10">Scan targets from file</r-cell>
|
|
<r-cell span="1" data-tooltip title="nmap 10.10.10.0/24 -iR 100">-iR number</r-cell><r-cell span="2-5">Random hosts of amount</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="nmap 10.10.10.0/24 --exclude 10.10.10.1 10.10.10.253">--exclude</r-cell><r-cell span="7-10">Exclude hosts</r-cell>
|
|
<r-cell span="1" data-tooltip title="nmap -iL targets.txt">-iL file</r-cell><r-cell span="2-5">Scan targets from file</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="nmap -sU 10.10.10.1">-sU</r-cell><r-cell span="7-10">UDP port scan</r-cell>
|
|
<r-cell span="1" data-tooltip title="nmap -sU -n 10.10.10.1">-n</r-cell><r-cell span="2-5">No DNS resolution</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="nmap -p- 10.10.10.1">-p-</r-cell><r-cell span="7-10">Scan ALL ports from 0 to 65353</r-cell>
|
|
<r-cell span="1" data-tooltip title="nmap -p 1-1023 -sU 10.10.10.1">-p n[-n]</r-cell><r-cell span="2-5">Scan port or range</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="nmap -p U:53,T:80 10.10.10.1">-p U:n,T:n</r-cell><r-cell span="7-10">Scan mixed ports, UDP and TCP</r-cell>
|
|
<r-cell span="1" data-tooltip title="nmap -F 10.10.10.1">-F</r-cell><r-cell span="2-5">Fast scan 100 ports</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="nmap -sV -p 443 10.10.10.1">-sV</r-cell><r-cell span="7-10">Try to detect service</r-cell>
|
|
</r-grid><!-- nmap -->
|
|
</r-cell>
|
|
<r-cell>
|
|
<r-grid columns="10" class="panel" id="mtr">
|
|
<r-cell span="row"><h2>mtr</h2></r-cell>
|
|
<r-cell span="1" data-tooltip title="mtr 10.10.10.1">IP</r-cell><r-cell span="2-5">Run route to host</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="mtr -z 10.10.10.1">-z</r-cell><r-cell span="7-10">Resolve ASN</r-cell>
|
|
<r-cell span="1" data-tooltip title="mtr -c1 10.10.10.1">-c num</r-cell><r-cell span="2-5">Run num cycles</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="mtr -r -z -c1 10.10.10.1">-r</r-cell><r-cell span="7-10">Report mode, useful with -c</r-cell>
|
|
<r-cell span="1" data-tooltip title="mtr -w 10.10.10.1">-w</r-cell><r-cell span="2-5">Do not truncate network names aka wide mode</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="mtr -r -z -n -c1 10.10.10.1">-n</r-cell><r-cell span="7-10">No RDNS</r-cell>
|
|
<r-cell span="1" data-tooltip title="mtr -U 10.10.10.1">-u</r-cell><r-cell span="2-5">use UDP instead of ICMP</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="mtr -T 10.10.10.1">-T</r-cell><r-cell span="7-10">use TCP instead of ICMP</r-cell>
|
|
<r-cell span="1" data-tooltip title="mtr -f2 10.10.10.1">-f num</r-cell><r-cell span="2-5">set first TTL, useful for skipping own router</r-cell>
|
|
<r-cell span="6-6" data-tooltip title="mtr -i 0.2 10.10.10.1">-i float</r-cell><r-cell span="7-10">set interval, default is 1 second</r-cell>
|
|
</r-grid><!-- mtr -->
|
|
</r-cell>
|
|
<r-cell>
|
|
<r-grid columns="10" class="panel" id="iptables">
|
|
<r-cell span="row"><h2>iptables</h2></r-cell>
|
|
<r-cell span="1" data-tooltip title="iptables -vL">-vL</r-cell><r-cell span="2-5">Shows rules hit counters</r-cell>
|
|
<r-cell span="1" data-tooltip title="iptables -A OUTPUT">-A chain</r-cell><r-cell span="7-10">Append rule to chain</r-cell>
|
|
<r-cell span="1" data-tooltip title="iptables -I INPUT 2">-I chain num</r-cell><r-cell span="2-5">Insert rule to chain at position</r-cell>
|
|
<r-cell span="1" data-tooltip title="iptables -I OUTPUT -s 10.10.10.0/24">-s CIDR</r-cell><r-cell span="7-10">Packages from source</r-cell>
|
|
<r-cell span="1" data-tooltip title="iptables -I INPUT -d 10.10.10.0/24">-d CIDR</r-cell><r-cell span="2-5">Packages to destination</r-cell>
|
|
<r-cell span="1" data-tooltip title="iptables -I INPUT -d 10.10.10.0/24 -j DROP">-j target</r-cell><r-cell span="7-10">Apply target to rule</r-cell>
|
|
<r-cell span="1" data-tooltip title="iptables -I INPUT -m mac --mac-source 00:00:00:FF:FF:FF">-m extension</r-cell><r-cell span="2-5">Use an extension to match packet</r-cell>
|
|
<r-cell span="1" data-tooltip title="iptables -L [-t tablename]">-L</r-cell><r-cell span="7-10">List all rules, use -t for specific tables</r-cell>
|
|
<r-cell span="row"><h3>chains</h3></r-cell>
|
|
<r-cell span="row">A chain defines a set of rules. They do not need either a source nor a destination. They can be applied to those later.</r-cell>
|
|
<r-cell data-tooltip title="Sent in this context means,<br>directly sent via the interface<br>this rule applies to" span="1-2">OUTPUT - When a package is sent directly</r-cell>
|
|
<r-cell span="3-4">INPUT - When a package is received</r-cell>
|
|
<r-cell data-tooltip title="Example: Using another virtual interface<br>for e.g. a virtual machine." span="5-6">FORWARD - When a package is forwarded</r-cell>
|
|
<r-cell span="7-10">USER DEFINED - You can define a user defined chain and apply it to any source/destination.</r-cell>
|
|
</r-grid>
|
|
</r-cell>
|
|
<r-cell>
|
|
<r-grid columns="10" class="panel" id="cables">
|
|
<r-cell span="row"><h2>Fibre cables color coding</h2></r-cell>
|
|
<r-cell span="1" style="background-color: orange;"> </r-cell><r-cell span="2-10">OM1/2 multi-mode</r-cell>
|
|
<r-cell span="1" style="background-color: aqua;"> </r-cell><r-cell span="2-10">OM3 multi-mode</r-cell>
|
|
<r-cell span="1" style="background-color: #c4618c;"> </r-cell><r-cell span="2-10">OM4 multi-mode</r-cell>
|
|
<r-cell span="1" style="background-color: lime"> </r-cell><r-cell span="2-10">OM5 multi-mode</r-cell>
|
|
<r-cell span="1" style="background-color: yellow"> </r-cell><r-cell span="2-10">OS1/2 single-mode PC with a blue plug</r-cell>
|
|
<r-cell span="1" style="background-color: yellow"> </r-cell><r-cell span="2-10">OS1/2 single-mode APC with a green plug</r-cell>
|
|
</r-grid>
|
|
</r-cell>
|
|
<r-cell>
|
|
<r-grid columns="10" class="panel" id="sfp">
|
|
<!-- Module speeds -->
|
|
<r-cell span="1-5"><h2>SFP</h2></r-cell>
|
|
<r-cell span="6-10"><h2>SFP+</h2></r-cell>
|
|
<r-cell span="1-5">SFP 1 GbE</r-cell>
|
|
<r-cell span="6-10">SFP+ 10 GbE</r-cell>
|
|
<r-cell span="1-5">SFP28 25 GbE</r-cell>
|
|
<r-cell span="6-10">QSFP+ 40 GbE</r-cell>
|
|
<r-cell span="1-5">SFP56 50 GbE</r-cell>
|
|
<r-cell span="6-10">QSFP28 100 GbE</r-cell>
|
|
<r-cell span="6-10">QSFP56 200 GbE</r-cell>
|
|
<r-cell span="6-10">QSFPDD 400 GbE</r-cell>
|
|
</r-grid>
|
|
</r-cell>
|
|
<r-cell>
|
|
<r-grid columns="1" class="panel" id="bgp">
|
|
<h2>BGP Table path selection</h2>
|
|
<p>Prefer the highest local-preference value.<br>
|
|
Prefer the shortest AS-path length.<br>
|
|
Prefer the lowest origin value.<br>
|
|
Prefer the lowest MED value.<br>
|
|
Prefer routes learned from an EBGP peer over an IBGP peer.<br>
|
|
Prefer best exit from AS.<br>
|
|
For EBGP-received routes, prefer the current active route.<br>
|
|
Prefer routes from the peer with the lowest Router ID.<br>
|
|
Prefer paths with the shortest cluster length.<br>
|
|
Prefer routes from the peer with the lowest peer IP address.</p>
|
|
<p><a href="https://tools.ietf.org/html/rfc4271">source</a></p>
|
|
</r-grid>
|
|
</r-cell>
|
|
<r-cell class="footer">
|
|
<p>Provided by <a href="https://tuxstash.de">tuxstash.de</a></p>
|
|
</r-cell>
|
|
</r-grid>
|
|
</body>
|
|
</html>
|
|
|