Skip to main content

Welcome to Mark Baggett - In Depth Defense

I am the course Author of SANS SEC573 Automating Information Security with Python. Check back frequently for updated tools and articles related to course material.




More to the SANS shirt

DRAT. That wasn't it. As soon as I reread my own entry I saw the "45 00..." and recognized it as the tell sign of an IP packet header. Wrap it in a Ethernet frame and you find its an UDP packet DNS query to http://www.sans.org/.