<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>Francois Ropert weblog</title>
	<atom:link href="http://blog.packetfault.org/feed" rel="self" type="application/rss+xml" />
	<link>http://blog.packetfault.org</link>
	<description>Binary packets in hostile digital world</description>
	<pubDate>Wed, 19 Nov 2008 16:03:21 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6</generator>
	<language>en</language>
			<item>
		<title>Numéros de systèmes autonomes BGP, l&#8217;autre pénurie du net</title>
		<link>http://blog.packetfault.org/protocols/bgp-asn-4bytes</link>
		<comments>http://blog.packetfault.org/protocols/bgp-asn-4bytes#comments</comments>
		<pubDate>Sat, 15 Nov 2008 14:25:42 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Protocols]]></category>

		<category><![CDATA[bgp]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=272</guid>
		<description><![CDATA[Il existe une méthode encore plus radicale pour empêcher la world domination même en connaissant ces fameuses adresses IP, le système BGP (Border Gateway Protocol). Pour fonctionner, Internet utilise BGP dans le but de relier un réseau à un autre réseau, chacun s'emboitant les uns dans les autres à coup de peering et transit offrant une architecture décentralisé.]]></description>
		<wfw:commentRss>http://blog.packetfault.org/protocols/bgp-asn-4bytes/feed</wfw:commentRss>
		</item>
		<item>
		<title>Cisco IOS Router Security mind map</title>
		<link>http://blog.packetfault.org/ccie/cisco-ios-router-security-mind-map</link>
		<comments>http://blog.packetfault.org/ccie/cisco-ios-router-security-mind-map#comments</comments>
		<pubDate>Sun, 09 Nov 2008 11:58:32 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[ccie]]></category>

		<category><![CDATA[ios]]></category>

		<category><![CDATA[LinkedIn]]></category>

		<category><![CDATA[router]]></category>

		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=264</guid>
		<description><![CDATA[I just created a mind map about securing a Cisco IOS router. The map gives you information about how securing services and how to secure the device itself from attacks. It's like a cheat sheet but a graphic's one and very compact compared to hundreds of pages in various security best-practices guides.]]></description>
		<wfw:commentRss>http://blog.packetfault.org/ccie/cisco-ios-router-security-mind-map/feed</wfw:commentRss>
		</item>
		<item>
		<title>Security before operations</title>
		<link>http://blog.packetfault.org/ipv6/security-before-operations</link>
		<comments>http://blog.packetfault.org/ipv6/security-before-operations#comments</comments>
		<pubDate>Thu, 06 Nov 2008 08:39:27 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[IPv6]]></category>

		<category><![CDATA[advisories]]></category>

		<category><![CDATA[cisco]]></category>

		<category><![CDATA[LinkedIn]]></category>

		<category><![CDATA[secunia]]></category>

		<category><![CDATA[security]]></category>

		<category><![CDATA[vulnerabilities]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=253</guid>
		<description><![CDATA[Many pro-IPv6 people would love to have IPv6 everywhere now and even yesterday. What I'm noticing is that most of common operating systems IPv6 stack have at least one vulnerability. I can call this phenomen by <em>pressure cause  imaturity</em>. Vendors, geeks, please don't forget the <em>security before operations</em> adage or you will get powned by yourself in a future day.]]></description>
		<wfw:commentRss>http://blog.packetfault.org/ipv6/security-before-operations/feed</wfw:commentRss>
		</item>
		<item>
		<title>Cisco security advice of the day</title>
		<link>http://blog.packetfault.org/ios/cisco-security-advice-of-the-day</link>
		<comments>http://blog.packetfault.org/ios/cisco-security-advice-of-the-day#comments</comments>
		<pubDate>Wed, 05 Nov 2008 19:41:07 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Hacking]]></category>

		<category><![CDATA[ios]]></category>

		<category><![CDATA[cisco]]></category>

		<category><![CDATA[vtp]]></category>

		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=246</guid>
		<description><![CDATA[Hello there,
Today a new security alert about VTP (Vlan Trunking Protocol) was disclosed. In a Bisounours(Care Bears) world, people follow security best practices and the security work is done. Sometimes, things overcome best practices paper.
Please take a chair, sit down and put on Telemann music. 
The vulnerability do a denial of service on the VTP process [...]]]></description>
		<wfw:commentRss>http://blog.packetfault.org/ios/cisco-security-advice-of-the-day/feed</wfw:commentRss>
		</item>
		<item>
		<title>SSH challenge #2 - Enable SSH without ip domain-name</title>
		<link>http://blog.packetfault.org/ccie/ssh-challenge-2-enable-ssh-without-ip-domain-name</link>
		<comments>http://blog.packetfault.org/ccie/ssh-challenge-2-enable-ssh-without-ip-domain-name#comments</comments>
		<pubDate>Fri, 31 Oct 2008 12:27:13 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[ccie]]></category>

		<category><![CDATA[challenge]]></category>

		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=227</guid>
		<description><![CDATA[This SSH challenge is specific to Cisco devices.
In most litteratures, setting hostname and ip domain-name is a pre-requisite for enable SSH server on a Cisco IOS. Is that really true? ...]]></description>
		<wfw:commentRss>http://blog.packetfault.org/ccie/ssh-challenge-2-enable-ssh-without-ip-domain-name/feed</wfw:commentRss>
		</item>
		<item>
		<title>[French] MISC40 Sécurité des réseaux, les nouveaux enjeux</title>
		<link>http://blog.packetfault.org/publications/misc-40-securite-reseaux-nouveaux-enjeux</link>
		<comments>http://blog.packetfault.org/publications/misc-40-securite-reseaux-nouveaux-enjeux#comments</comments>
		<pubDate>Fri, 31 Oct 2008 09:27:42 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Publications]]></category>

		<category><![CDATA[architectures]]></category>

		<category><![CDATA[biométrie]]></category>

		<category><![CDATA[cryptography]]></category>

		<category><![CDATA[infowar]]></category>

		<category><![CDATA[IPv6]]></category>

		<category><![CDATA[LinkedIn]]></category>

		<category><![CDATA[misc]]></category>

		<category><![CDATA[opensolaris]]></category>

		<category><![CDATA[réseaux]]></category>

		<category><![CDATA[sécurité]]></category>

		<category><![CDATA[solaris]]></category>

		<category><![CDATA[sondes]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=221</guid>
		<description><![CDATA[Oyé oyé! Le MISC40 avec un dossier sécurité des réseaux est disponible dans votre kiosque préféré depuis aujourd'hui. D'habitude je ne fais pas les sorties de nouveaux numéros mais là c'est différent car j'ai pu écrire un article dedans (Le très haut débit - un challenge pour la sécurité). Voici le sommaire complet ...]]></description>
		<wfw:commentRss>http://blog.packetfault.org/publications/misc-40-securite-reseaux-nouveaux-enjeux/feed</wfw:commentRss>
		</item>
		<item>
		<title>SSH challenge #1 - Version 1 automatically enabled</title>
		<link>http://blog.packetfault.org/ccie/ssh-challenge-1-version-1-automatically-enabled</link>
		<comments>http://blog.packetfault.org/ccie/ssh-challenge-1-version-1-automatically-enabled#comments</comments>
		<pubDate>Thu, 30 Oct 2008 13:57:33 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[ccie]]></category>

		<category><![CDATA[cisco]]></category>

		<category><![CDATA[ssh]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=212</guid>
		<description><![CDATA[Welcome to SSH challenge number 1! Are you sure you really know SSH?
Assuming the next output, what is the root cause of the automagically presence of ip ssh version 1 in the show run output considering I never typed this in CLI?]]></description>
		<wfw:commentRss>http://blog.packetfault.org/ccie/ssh-challenge-1-version-1-automatically-enabled/feed</wfw:commentRss>
		</item>
		<item>
		<title>GET VPN notes</title>
		<link>http://blog.packetfault.org/ccie/get-vpn-notes</link>
		<comments>http://blog.packetfault.org/ccie/get-vpn-notes#comments</comments>
		<pubDate>Thu, 30 Oct 2008 11:18:43 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[ccie]]></category>

		<category><![CDATA[3des]]></category>

		<category><![CDATA[aes]]></category>

		<category><![CDATA[coop]]></category>

		<category><![CDATA[crypto]]></category>

		<category><![CDATA[gdoi]]></category>

		<category><![CDATA[getvpn]]></category>

		<category><![CDATA[ipsec]]></category>

		<category><![CDATA[isakmp]]></category>

		<category><![CDATA[rekey]]></category>

		<category><![CDATA[tbar]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=191</guid>
		<description><![CDATA[Here are my notes about GET VPN technology. My lab consists of a backbone, 3KS and 3GM.
<img src="http://blog.packetfault.org/getvpn-lab.png">]]></description>
		<wfw:commentRss>http://blog.packetfault.org/ccie/get-vpn-notes/feed</wfw:commentRss>
		</item>
		<item>
		<title>Cisco Secure Firewall Services Module (FWSM) Ciscopress book review</title>
		<link>http://blog.packetfault.org/books/cisco-fwsm-ciscopress-book-review</link>
		<comments>http://blog.packetfault.org/books/cisco-fwsm-ciscopress-book-review#comments</comments>
		<pubDate>Thu, 30 Oct 2008 11:03:23 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Books]]></category>

		<category><![CDATA[cisco]]></category>

		<category><![CDATA[ciscopress]]></category>

		<category><![CDATA[fwsm]]></category>

		<category><![CDATA[review]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=202</guid>
		<description><![CDATA[Cisco FWSM is the firewall module card which can be inserted into Catalyst 6500. Based on PIX algorithms and Finesse operating system, many concepts are similir to the one's you will find into PIX or ASA. The real added-value is that it's moduleable and can connected to a lot of other moduleable cards like CSM, ACE or MSFC.]]></description>
		<wfw:commentRss>http://blog.packetfault.org/books/cisco-fwsm-ciscopress-book-review/feed</wfw:commentRss>
		</item>
		<item>
		<title>DNS based GSLB demystified (part 3/3)</title>
		<link>http://blog.packetfault.org/protocols/dns-based-gslb-demystified-part-3</link>
		<comments>http://blog.packetfault.org/protocols/dns-based-gslb-demystified-part-3#comments</comments>
		<pubDate>Wed, 29 Oct 2008 23:45:00 +0000</pubDate>
		<dc:creator>admin</dc:creator>
		
		<category><![CDATA[Protocols]]></category>

		<category><![CDATA[dns]]></category>

		<category><![CDATA[gslb]]></category>

		<category><![CDATA[http]]></category>

		<category><![CDATA[load balancing]]></category>

		<category><![CDATA[persistence]]></category>

		<guid isPermaLink="false">http://blog.packetfault.org/?p=193</guid>
		<description><![CDATA[Active/Active topology should be considered. When taking a GSLB decision, any traditional method of load balancing are configurable: WRR (Weighted Round Robin), Least connections, Least bandwidth, Least packets/s… as long as the GSLB entity can communicate with each GSLB site to get all the needed information…]]></description>
		<wfw:commentRss>http://blog.packetfault.org/protocols/dns-based-gslb-demystified-part-3/feed</wfw:commentRss>
		</item>
	</channel>
</rss>
