Ditch the ads, upload images and much more - upgrade today from 5.95/month!
Read Contests Groups Learn Forums Store Help
 

La Brea

La Brea calls me,
Sings to me.
Over and over
She says,
"Come into my cool waters."

Underneath those few inches of oily water
she waits for me,
knowingly,


I cannonball again.




A contest entry

    : , Your review:

    Comment Suggestion: What is your your first impression?
    Line numbers  • Invite them to read
    : no Cost: 0 free left 0 points, You have (?)

Comments

1 - 5 of 5

  • myrataal silver member
    July 8

    Edit | Reply

    WOW

    I did not put those roses in my comment. See what that tarpit does?


  • myrataal silver member
    July 8
    Edit | Reply

    Ah

    La Brea.

    How musical a sound ... Did you take the invitation at least seriously?

    NOW this is what Tom says:

    Tom Liston talks about LaBrea
    LaBrea - The Tarpit

    LaBrea is a program that creates a tarpit or, as some have called it, a "sticky honeypot". LaBrea takes over unused IP addresses on a network and creates "virtual machines" that answer to connection attempts. LaBrea answers those connection attempts in a way that causes the machine at the other end to get "stuck", sometimes for a very long time.
    How does it work?

    "LaBrea works by watching ARP requests and replies. When the pgm sees consecutive ARP requests spaced several seconds apart, without any intervening ARP reply, it assumes that the IP in question is unoccupied. It then "creates" an ARP reply with a bogus MAC address, and fires it back to the requester.

    An example (from a tcpdump of LaBrea running on my network):

    * 14:18:28.832187 ARP who-has xx.xx.xx.13 tell xx.xx.xx.1
    * 14:18:29.646402 ARP who-has xx.xx.xx.13 tell xx.xx.xx.1
    * 14:18:31.707295 ARP who-has xx.xx.xx.13 tell xx.xx.xx.1
    * 14:18:31.707574 ARP reply xx.xx.xx.13 is-at 0:0fff

    There is no xx.xx.xx.13 machine on my network. In this case, the timeout was set to 3 seconds (it's a command line parameter), and when that final "who-has" came in, the "is-at" reply that you see was generated by LaBrea.

    There isn't a MAC address of 0:0fff either. It doesn't exist.

    But now, the router (xx.xx.xx.1) believes that there some machine at xx.xx.xx.13, and that it resides on the MAC address 0:0fff, and so it dutifully sends packets on. In essence, we've created a "virtual machine" on that IP address."

    ET CET E RA ALLAN!!!

    Beware of oil and tar.

    Love Always
    Myra

  • very interesting take on the prompt. well done, it made me stop and think

    thanks for your entry


  • Amera gold member
    July 5

    Edit | Reply
    LOL, You nut!
    I'd like to see that; you cannonballing into a few inches of tar.

    Love,
    Amera

  • I love it!

1 - 5 of 5