Suppose someone ships you an item. Since the item is packaged, you don't know what's in it. To find out, you have to open the package. This means undoing everything that was done to the item. And here's an important idea. To unwrap a package, you have to undo the last thing first. Similarly, the unknown in an equation is like an object that's been wrapped for shipping. To determine the unknown, you have to unwrap the package. Every arithmetic operation has an inverse operation that undoes it. Add n can be undone by subtract n. And likewise, subtract n can be undone by add n. Similarly, multiply by n can be undone by divide by n. And surprisingly enough, divide by n can be undone by, wait for it, multiply by n. And it's helpful to keep in mind there are situations where we do have a choice, and if possible, avoid operating with the variable. Now, an equation begins with a claim that two expressions are equal. But in math and in life, we can only maintain equality if we treat both sides the same. So if we do something to one side, we must do it to both sides. For example, let's solve x plus 15 equals 35. So our first thing to notice is the expression x plus 15 is a sum. Add 15 to x. Since this is an add, we can undo it. To undo add 15, we should subtract 15. And remember, if it's not written down, it didn't happen. So we'll start with our equation. We'll subtract 15, but we have to maintain equality, so we have to treat the two sides the same. We'll also subtract 15 from the right, and we find our solution. Or say we want to solve this equation for z. So our expression involving z is a subtraction, namely, subtract 11. To undo subtract 11, we should add 11. So again, if it's not written down, it didn't happen. Starting with our equation, we'll add 11 and get our solution. Or we can solve 8x equals 48. The expression involving x is a product, multiply x by 8. So undo a multiply by 8, we divide by 8, and we should record this as 48 divided by 8. But we often write this as a fraction, like 48 8s. And that comes from the following idea. As long as b is not equal to 0, then the quotient a divided by b can be written as a fraction ab. And so instead of writing 48 divided by 8, we can write the fraction 48 8s.  It's helpful to keep in mind that equivalence between a fraction and a division, if we want to solve t6 equal to 3, remember t6 is the same as t divided by 6. And so the expression involving t is a quotient, divide by 6. So to undo a divide by, we multiply by 6. Now to simplify this, remember that if we multiply any fraction by its denominator, then we can remove the common factors and simply end up with the numerator.


Yeah, I introduced the next speaker because we're right on the money with that talk Let's see here. Who's next scribbles where scribbles scribbles you here scribbles here. Oh, yeah, I'm here Okay, there you are. Sorry. Okay. Scribbles is our next speaker He's going to be presenting advanced packet wrangling with TCP dump. This should be a very interesting talk by the way scribbles Stephen Kennedy is a security engineer and a new Linux enthusiast in Denver, Colorado He holds a ns a master's degree in cybersecurity and information assurance as well as over 20 industry certifications Dude, do you ever sleep? I mean 20 search seriously? Where are you? That is impressive. Okay? I I've got search and they're hard to get over the university system, you know, they just keep paying even in search instead Yeah, well that's true. Yes, I Know exactly what you mean. It's like here's free money. Go to another class. There you go. So He is his first computer is a commuter 64 and he's a survivor of the late 90s early and early late 90s and early 2000s IRC by the way IRC is still alive and working. Thank you very much. So without any further ado here's scribbles Thank you Wonderful. Thank you. X-ray Here Oh, do you have access to the stage? I Do yeah, okay Yeah, if you go make sure that the the stream is looking good to stream set up. Oh, they got it working You did Excellent. Well, our team has been in the background hacking like crazy. So excellent. All right. Thanks, everyone Let me make sure my slides are up over here as well. Good. I I definitely big shout out to the to giggle you on team for figuring this out. It's been a bit of a They're on fire event just to get these slides up. It's everything figured out, which is amazing. So Like I said, my name is Stephen Kennedy Previously spent time as a network security consultant and a network security engineer And of course if you're not familiar with the 14ers Let me see if I can move this slide. This is the new form I can do it myself nice I'm back take a look. Yeah. So if you're not familiar with the 14ers for those are mountain peaks over 14,000 feet or if you're not using freedom mutants, that'd be a 4267 meters You see how far away I can test this I can Beautiful Okay, so TCP dump and LibP cap These projects are both open source. They're developed by the TCP dump group TCP dump is certainly the best known command line interface packet analyzer That you can basically open a terminal and see all the traffic on any of your network interfaces If you do it on a busy enterprise box, you'll barely get a chance to see any text at all It will just all just screen by And you know, you'll just have to hit control C 100 times to get to finally stop Um, so the important part about TCP dump build filters to slow some of that stuff down So it's first released in 1988 and I believe you're not is still an active development I'm still an extremely useful tool and it's absolutely keeping up with the times So, uh, you know a big part of this talk is encouraging you to to dive deep on this one So LibP cap is the library That TCP dump uses to interface with the kernel In windows, this is called a wind peak up and the windows version of TCP dump is called a wind dump and See here. Yep. So right around 1993 at uh usenakes, you're not familiar with usenakes. It's a famous conference Um, we're a lot of technical papers are presented But back in 1993 the the folks that that created TCP dump at Lawrence Berkeley laboratory is actually delivered a paper on What they call bsd packet filters? You might have seen the phrase bpf being thrown around. It's usually associated with TCP dump At this point Bpf has exploded into a number of uses of ways to filter and access all these other bits of information That require really quick access because you know, the CPU is really quick. There's a lot of process activity It's no longer just about network activity. But if you start searching around you, you'll see that Most of the stuff online about it is going to be somehow relating to network filtering All right. So the next slide here So this is the why should I care slide? So this is a pretty important part, right? So whenever people hear that these p dump is you know from 1988 You know, there's a little bit of that You know, I've been trying to be dragged in back into Linux command line again And I've never seen this stuff before as this may take to learn stuff like that, right? Um, this is an incredibly useful tool for your skill set Um, and I really wanted to prove that out to you So the the pkaper it didn't happen, uh Picture on the previous slide. So, you know, it's popular slogan for shirts and everything It's not just a clever phrase, right? It's Generally true. If it didn't go across the wire, it probably didn't happen Um, you know, perhaps there's scenarios where it where you're blocked from viewing it and sure, right? Um, those are few and far between So it's very important as a tool to be able to prove things that you need to prove to someone else or to prove That someone's claiming to you So how would that work? So sorry, you know, I think If you've ever worked in an IT environment Um, you've been on either side of this conversation and and probably will be for the rest of your career But that conversation where maybe you're a server owner And and you just stood up or maybe you own a couple servers, right?  You go? Yep, made an account for your token Go go do your thing and configure the stuff that you own And then they they come back and they go well, hey, you know I configured it and the only message that I got was connection failed Right, so connection failed doesn't tell us very much. Is it a You know, is the network actually down? Did we did something actually fail? It doesn't it doesn't tell us very much of anything Did it even try to get on the network? Maybe it can't even access the network adapter itself So error messages can be terrible. I think we all know that You know and developers can be very hit or miss on that sort of thing and log messages in general are you know Aren't always much greater. So so this is that part where you where you can start to lean on the network to be like, well, wait a minute Um, so me as the server owner if my co-worker comes to me and says, hey, I tried to connect to you and it just didn't work One of the first things I'm probably going to do is You know, we're obviously going to double check the information that he was given Maybe the ip was wrong or something like that Um, if you use a tool like PCP don't because say, hey, well, what's your server IP? Go ahead and try to connect to me to me again. And if I don't see any traffic come to my interface There's something else is going on Right, we've already ruled out this entire service and you know, again If you're in that it space, you know that you just stopped an entire circus from happening potentially five meetings, right? Um, so it's very important that you be able to rule things out Um improving their claim right and so another great example is that you know in a in a past life I was working for a vendor that this old security appliances And a customer had one installed in tokyo And this appliance would make a tunnel back to a data center in the u.s And the tunnel kept failing and and the response from the customer is you know, as you'd expect You know they paid a lot of money for it is your appliance is broken. You need to figure it out and fix it um and so We started looking at the appliance and it took a bit to you know See what was going on and every time the connect the tunnel would open So we were looking at it from the point of view of the box that's in tokyo every time we see that sin go out We'd immediately get a reset back Right and so if you think about it, you know, you don't have to know a ton about you know networking to realize that You know one millisecond or less isn't enough time for that sin to go from tokyo to Atlanta Right that's breaking the laws of physics So if we're immediately getting a reset right after we attempt that connection We know that there's another network device Nearby potentially maybe even in the same office Ascending that reset and so we were immediately able to call that out and get their network engineers on the line and be like What is this? I look at the time stamps like this doesn't make sense And boom, you know, they found out that they hadn't actually properly implemented the acls And the connection was open and the tunnel was able to work right so the point of those stories of course being that um, you know This tool can look very esoteric, but it's important Um, it's our third of course threat actors aren't the only ones that live off the land Whenever we hear that phrase we always think about you know threat actors having to come in and you know They can't you know upload certain tools so they have to live off the land, right? um That happens to us too Right, so so when you work in a highly regulated or highly secured environment Um, if you have if you have customers that are you know, uh in the energy industry Or potentially, you know, if you're working in a fed ramp environment with with uh government customers You know this problem well whenever you run into a problem Someone's always going to bring up some really slick tool from github. I was just written four weeks ago probably didn't go and You can't just go download and install that it would break compliance regulations you'd be tons of paperwork And this is generally, you know, what we call, you know, if you try to circumvent those sorts of things This is generally what we consider a career limiting move right So this is the important pieces that you know, I just really wanted to highlight and make sure that uh, uh That we got through here when we're talking about tcp done so This is skill that also pays dividends right the more you invest in this the more you practice The better you're going to get at it some of the technical details here if you if you don't practice them It's not going to stick. It's just like anything else in life But it's not as hard as it as it can look initially So please understand that this does require a basic understanding of the tcp ip protocol stack If you're a networking newbie, this will this will help you get an idea of what's possible with this tool Let's see So once we get through the syntax, we're going to do some more advanced filter techniques But certainly don't be uh, don't be don't be discouraged because things will get a little weird here Let's stick with So some basic syntax you've probably seen a good bit of this Um, if you are familiar with tcp dump, um, so on the left here, we've got our flags Color coded so so if we look at the command across the top right so we've got capital x So that's going to show the output in both hexadecimal and asky The n is don't resolve hosts and ports Typically we do that just because we just want to see port numbers and we want to see ip You know, I don't want resolution and dns getting in the way because we know that always gets messy Um For I also very important one when I specify the network interface, we're monitoring Um, so you know in this example, we're going to be looking at each zero and then for the dash c We're going to specify the packet count which this way you can say hey, you know You might match a a million packets with this filter. Just show me five. That'd be great, right? Um, so we look on the right side here filters and operators so Pretty easy to read in english So so right after we get to pass that c5 on the top left We're going to move into um what I put in single quotes The reason you typically want to do that is because the the tcp dump filters can start to use characters that might be interpreted by your shell Uh, we're talking about like an ampersand or parentheses or things you might have to escape otherwise It gets it gets messy just use single quotes and then you don't have to worry about it, right? Um, so tcp and you see we got to open parentheses That's matched by a closed parentheses on the other end of the line. Remember this is, you know, just like in math class You know, we'll order of operations. We've got to start with the parentheses first And what we're saying here is source host this ip address Or source host this other ip address So this is this filter is going to show us any packet that is tcp And source from either of those posts Easy enough, right? We can also see that there's other things you can do you can do port support ranges Uh, you specify protocols tcp udp isp multicast Um, and so not and or at the bottom line I wanted to go to hit that one first look right above it Of course, the knot and the negation is the estimation point Just like in in bash the double ampersand is an end Just like in everything else the the double pipe is an or Um, and we've had some other characters that are available to us less than greater than equals the m parentheses to help divide some things okay, so filtering at the transport and network layers so a really cool Nature of tcp dump is that you do have some convenience flags This is done by the development team, you know just kind of thrown in there some really common things that you're going to need to do There's no reason to bring math into this right like let's just do something easy where we can look at a table and figure this out And again, this is pretty uh, English readable. You'll see the flags on the left if you're familiar with the tcp protocol You'll recognize the flag names Um, what we have is, you know tcp thin tcp sin reset push act And then the message types. These are all icmp messages down here So the most common ones you're going to recognize are of course, uh, uh icmp message type eight and mesh type zero Which are echo and echo reply or ping and ping reply. It's the most common way of knowing it So in the examples up here Let's look at one of these written out using some of these keywords So you have tcp and then in square brackets tcp flags and Front to see tcp sin or tcp fin does not equal zero So it's pretty obvious what the first part does right so we're filtering on the tcp flag section of the tcp header And I want you to show me packets where either the tcp sin flag or remember that pipe isn't or Or the fin packet is not zero Right, so remember a packet is actually binary when it's on the wire. It's a one or zero. It's on or off So if it does not equal zero then it must be a one which means it must be on To show me packets where sin or fin are on Okay, and the same thing with the icmp message down here. I'm pretty straightforward icp type does not icmp echo And it does not equal icmp echo reply that would essentially show you every icmp packet that is not related to ping Good simple, right? Let's move on to the next slide here. All right, so So the big question is we see those we see those keywords right and a very convenient very nice easy to remember Um And things start getting weird. So how do those keywords work? But why are they convenient and why would they go out of their way to do this for us? How do they how do they go into a packet and pull out that section of the packet? so In this diagram here the the big part in the center. So that's actually the tcp header All right, so familiar with tcp ip you'll know that typically the ipv4 headers at the top And then in order to get around tcp needs its own that requires ipv4 And so below the ipv4 header you'll have the tcp header And then the payload so all the data that's being moved around below that This tcp you'll notice in this header doesn't talk about ip addresses. It just talks about ports IP addresses are up in the ipv4 header So when we talk about tcp sin tcp fin what's actually happening and again these are examples from previously right You look down at byte 13 down here in green. You'll see tcp flags It says c u a p r s f So what that actually is is those are all of the tcp flags Look on the left hand side over here What we have is this table that's showing urge act push reset sin fin Right, so these are a lot of the flags that you hear on a regular basis right the sin sinak act for the tcp three-way handshake um the order of those matters And so when we're going in and we're looking at a header like this it can be very confusing Right, so there's lots of numbers and lines and things like that So at the very top left is byte zero or byte offset zero that's the beginning of the tcp uh header Right, so for the next eight open slots here, so we'll count them off one two three four five six seven eight So where that one is right above the word source That's a whole byte and one byte is eight bits right and you'll see there's a line in the middle That's a little bit darker. So a half byte is called a nibble. So four bits is a nibble eight bits is a byte So it's pretty easy to say the source port field of tcp header takes up two whole bytes right easy enough so We look on the top left What where this binary diagram is what we'll see is actually The top column in blue is 128 64 32 16 8 4 2 1 you'll see that 128 keeps getting cut in half as we go And then there's ones and zeros along it So think of each of these slots or each of those columns there. There's eight of them it match up with the eight bits in a byte Right, so as we go across starting a byte offset zero here, that's going to be 128 64 32 16 8 4 2 1 Okay, so as they're coming across the wire again electronically It's just a one or zero or an on pulse or an off pulse, right? So in this in this diagram up here, so we see it's one zero one one zero zero zero one All you have to do is where there's a one you just add that number. It's that simple 128 plus 32 plus 16 plus one equals one seventy seven Great. I mean that's binary math, right? It's really just adding where there's a one And just know that after that one at the very end here along the top column It just starts over again at one So it goes forward to one one 28 64 32 And that's going to keep going along the whole top of all of these fields over and over and over again And that's how your computer is interpreting these values your network card rather so Back to the point about the filter examples Right, so we already went over the the the verbal one or the the keyword one tsp sin or tsp fin does not equal zero But the line below it is actually equivalent The tsp 13 and two or one does not equal zero So you might have put two and two together now and realize that that tsp 13 the reason that's equivalent to tsp flags Well tsp flags where it's green right here is actually byte 13 of the tsp header. We're saying start it that byte As what about this ant part so and two or one? Go back up to the binary chart. That's the two bits on the far right of the 13th byte here Here's the s and the f the sin and the fin Right, so if there's a one and a one here then We could match Right, so if so if this if starting from byte 13 of this field tsp flags is 000 0010 it's going to show up with our tcp dump filter And that's about as hard as this gets right it gets a little weirder, but that's about as hard as it gets So if you're following me there, you're doing a great job, right? um So the next slide We can get a lot more precise than that and so You know if you field in your chest the first time you see a filter like this, you know, you're not alone. I've certainly been there um This is whenever those keywords don't match what you need to look for in tsp dump or on the wire Right, so we start seeing things some of this might make sense based on what we've been talking to we've got ip Sure, I see the brackets where they have the byte numbers. I can look at those right tsp 12 Okay, not equal zero What does any of this mean? And and where do we even begin so so we're going to break this down into three parts the tsp 480 and pretty straightforward But it's we're going to break this down to three filters got the blue in here Uh, what is that coral coral we'll get with coral and then uh, and then this this yellowish color here We're going to break this into three different filter pieces and and go through them All right, so this is the ipv4 header rc 791 the filter we're looking at is the first part of the uh The original one on the previous slide here So we're looking at ip 2 and 2 as the first portion of what we want to figure out As the goal here is just to figure out what it is that this filter does So okay, so ip 2 and 2 so we hadn't seen the colon 2 before but we know that that 2 probably means the second byte So the top left we see the offset and length So the whenever you do the 2 and 2 is just like a range just like you would do in python or another language like that So it's saying from byte 2 So where the blue arrow here on the diagram begins I want the next two bytes the from byte 2 1 2 and there's the end of the line. So We're we're basically done with the ip 2 and 2 portion if you look at the header We know that it's asking for the total length field So we're basically saying whatever value is in the total length field Is going to be swapped out In the filter as we go and at the bottom here one of the cool things about this diagrams It has a couple definitions what the fields do because some of the fields are a little different So total length is the total length of the ip diagram or ip fragment if fragmented and it's measured in bytes That's already in bytes and that's what we probably want. So we're just going to go with that easy All right, but then the next one is this ip 0 and 0 x f s l s n 2 right, so so that looks pretty Pretty strange. Let's move on to the next one and take a look So we're going to validate our our length field here. Um, so this is the first time that we're taking a look at the t speed on output Um, I hope everyone can see this. I'm going to slide down here so that I can get a first look as well Um, so you can see that I'm using uh at the very top line I'm using the filter that we were looking at tb 13 and 2 or 1 is 9 equals 0 Great, so on the third line of this whole screen here is a timestamp at 13 45 Each one of these timestamps is a packet that match that filter that tcp dumps outputting and showing us As we read across we see ip okay ip<PHONE_NUMBER> is reaching out to this 174 address and port 80 I'm gonna You know make a leap and say that's probably htdp traffic. I think that's safe to say, right um as a little bit further than that it says flags uh bracket s bracket So in tcp dump output that s actually represents that sin flag being on the tcp sin And if we look directly below that s into the next packet where it says s dot That s dot the dot is an act So what we're seeing here is part of the three-way handshake. So we see s and s dot So so the the host that received the sender replied back with his senac What's in the red box Is actually uh the part of the packet that we were just filtering for the ip 2 and 2 So why is it all the way over here in these weird characters? So if you've never seen hex before, um, hopefully you have but if you haven't Hex is typically represented when it's written beginning with zero x in order to separate it from other types of values like decimal Um hex is a base 16 counting system So we're doing zero through nine and a through f are the valid characters So f is 15 the reason why f is not 16 in the base 16 counting systems because we count from zero Right so zero zero three c So each character up there is actually one nibble So if we if we started the top left to see that 4500 to the left of the red box We've actually looked at our our header diagram and see okay version. That's that four ihl that's a five Hex type of service zero next nibble zero now. We're into the red box 003 c so uh first nibble zero second nibble zero Then there's a three then there's c Well, three c doesn't make any sense to us. We thought this was supposed to be in bytes Well, it is it's just an hexadecimal right now Right, so we have to convert that to decimal at the very top just above the screenshot You can see hex zero zero three c equals 60 You convert that value to decimal that's 60 bytes right This next slide here So back to the uh the second part of the this is what the coral filter right the ip zero and zero xf lesson lesson two So so let's actually going down we're going on here. I'm going to exit the stage here for a moment so If we if we we're going to start at the very top left um and what we can see is That ip zero simple enough we're going to look at the ip header We're going to start it bite offset zero show me that first byte great. There's the first two nibbles right two nibbles in a byte and So that part's done, but we haven't finished dealing with the rest of the parentheses yet Right, so that ampersand zero zero i'm sorry hex f The ampersand is telling you that we're going to bit mask Right and and so what we're going to do is we're going to mask this These eight bits in this single byte And what that means so we need to take that the hex a decimal f we need to convert it to decimal f and decimal is 15 like we were just talking about And in binary it's one one one one Why is it one one one one well again if we imagine the 128 64 32 16 8 4 2 1 across each bit in this byte What you're going to see is it actually breaks out to zero zero zero zero one on one because eight four two one totals 15 Right, and so that's why we opted to give it that the hex f value So with this mask applied We have now told tcp done. Hey, I know that you only let me tell you Which whole byte to start on but I really needed a half byte And that doesn't help me very much so i'm just so i want you to start at zero But now use this mask to to carve out The this nibble forming right and you can you can do this a lot of different ways There's a lot of cool tricks you can do but this is the concept So the ihl field in tcp done I'm sorry in the the ip header is actually the header length And so this typically Almost always is a five And so the reason for that is that ip options are generally no longer used ip options is the last field in an ip header So There's just one of these you know One of those things in life that you just have to accept It's a weird rule where the story takes longer than it does remember the rule Please remember that when that field has a value in it you multiply it by four And that tells you the number of bytes that the header is It's almost always 20 bytes because again ip options just aren't used So I went ahead and put that five over here Right and below it we have the binary chart and so we finish the parentheses and we're still left with that less than less than two But what does that mean? So the less than two actually means we're going to bit shift the value in parentheses by two You haven't heard of bit shifting sounds really complicated and cool. It's extremely simple So we're going to take that value And we and we know that we need to multiply by four to get the bytes, right But the interesting part is that bit shifting left by two is the same thing as multiplying by four I say again bit shifting left by two is the same as multiplying by four And the reason that is is we come over here and look We have uh zero one zero one in this in this left binary table here, right? So eight four two one All all I did was literally slid The value in the left table two bits over and any new spaces that are created you just throw zero in there Because we're not we can't create new ones Right, so then it just becomes one zero one zero zero So we essentially multiply by four because we went from four and one makes five to 16 and four makes 20 That's an interesting bit of binary math and also, uh, you know, if you've if you've never, uh Delved into how CPUs at a very low level do complex math This is the very beginning of how that stuff works The advanced survive has been above my head for a long time. Um, but this is a this is a very general idea of how that binary math works Um So that's it, right? Uh, so one of the most intimidating pieces So onto the third filter This looks very much the same. Um, you already know what to do here So we're starting with the uh with the tcp header We started the 12th bite And we can see the header up here at the very top right so the 12th bite we look on the left hand column There's those bite offset values in red. You can actually just go straight down to 12 You don't even have to count that's nice and easy right on a simple edge line there So we're looking at the offset value So if you don't know what the tcp offset value is that value tells you in bites How far from the from offset zero of the tcp header does the tcp payload begin? right, so The reason why that's important and less important than the ip Uh, uh header or header length value is that like I said ip options aren't really used anymore. So it's almost always 20 bites tcp options are absolutely used all the time So we do need to calculate this value and it does matter, right? So we're looking at tcp 12 and we know which which part that is great But again, we're on the problem where the offset value in the header diagram The diagram shows us that offset is not a whole bite Like source port was where it was nice and easy So we need a bit mask again just to grab that first nibble so The bit mask is uh hex f zero remember the previous Mask was hex f in order to get the far right for best now We want the far left four bits the which is the higher order bits a 128 64 32 16 We're going to do the same thing. We convert that to binary uh and in binary Uh, check my notes. Yeah, that comes out to 240 And so that 240 We built uh, we build that out Yep, so we get the 1111 000 sorry. I was looking at my notes there and um, that gets us our mask So that's the that 240 is the whole half nibble there We dropped down and I went ahead and selected 80 from one of the packets that we match on a future slide So we have data to work with And um, that's what that's what's actually in the offset value for a real tcp packet Right, so we use that 240 to get the mask And then once we actually look in that field using that mask, we realize that there's an 80 in there All right, so an 80 is made up of 64 plus 16 great Got that but we still need to bit shift two to the right Well, if bit shifting left by two is multiplying by four Uh, I certainly didn't do well in math in school Um, but I'm pretty confident that bit shifting right by two is probably going to do the opposite and it's going to divide by four And and so if we look and we that's exactly what we just did We just rolled those ones two places to the right It's that simple Now if you find yourself rolling off That there's a whole other problem that begins there, right? But that's as unlikely to happen in these much more simple binary math situations um That's it. So now we've got 20 as the result of this filter Wow So let's go back to our original extremely intimidating complicated filter Um And the point of that filter was to view only ipv for hdp packets that contain a payload And that's a tough one right because if probably come up to you and say, hey, you know, I want to I want you to show me hdp packets This first thing everyone's going to do You know t speed up and an i8 zero for 80 Well, that doesn't that doesn't satisfy the other part and needs to contain a payload, right? Plus anything could be on port 80. That doesn't have to be hdp. It just probably is Okay, so if we look at this again think back to you know last time you did math order of operations um We've got a color coded here. So what we actually did was we we looked for a t speed for 80 and We need the ipv for total length, which we got that was 60 the tcp header length We got that that was 20. Those are in the first parentheses. We have to break that down And then whatever that resulting value is which is of course 40 Uh, we need to subtract the tcp data offset from that That gets us down to 20 It's not equal zero, right? I would generally agree that 20 does not equal zero That brings our filter all the way down to tcp for 80 and true right, so so true is just a more of a uh A boolean kind of keyword type here, right? So it's not an actual tcp dump keyword that you can use We're using it to display that tcp dump is looking at every packet and unbelievably, you know, it's just the speed of You know traffic here is performing all this math on every single packet that goes by And satisfying these values doing this calculation and see and if it can satisfy your Filter case report 80 and and this all has to work out to true false. Don't show it to me right Fantastic all right, so success so, uh At the very top again, you can see that i'm using tcp dump and just go back to one of our first slides I use xnr we met dash r is to read a peek up So i'm reading htp dot peek up Which is one I pulled from a public traffic repository. There's a lot of those out there highly recommend Using them as a playground to test these And it did the filter we've been looking at all across and we've got something So if you're familiar with htp, you can actually see in the ascii here on the on the Middle right hand column here. You can actually see the get plus images logo dot png hb slash one dot's area That's definitely an htp payload And uh, and so we're successful Do we have any questions for our speaker? We got uh, it looks like we're actually missing a slide here. Um, oh Oh Let me just give you a couple resources here real quick. So, uh pcp dump dot org is actually a fantastic resource Um, you know for folks that have been around that long I just you know can't believe how good of a job they've done with documentation Um As is not necessarily the always the case tcp dump 101 dot com It will help you build filters like this with a gooey, right? Save yourself some time Help to play it around with it figure it out The man pages for tcp dump and pcap dash filter fantastic The long filter we looked at today came from The tcp dump man pages. There's even an explanation at the bottom Right, one of the best man pages. I've seen out there. Um, if you're familiar with the awesome projects awesome That's pcap tools. Take a look at that page. I'm not just uh, uh Pushing it out there because I'm one of the maintainers of it. It's actually a great list Um, take a look and please help, you know, if you have any uh tools that we're missing on there If you felt intimidated by any of this and you're you know, what the hell is he talking about if you for tcp Sins and acts you need to brush up on your networking Take a look at professor messer on youtube. It's a fantastic network plus video series You don't have to take the cert if you don't care Um, but just the content in the series is worth your time. I think it's only like eight hours on um It's free trainable, right? That's right. It's free training. Absolutely. Um, and uh final final few pieces of some tips and tricks Um, a lot of people prefer wire shark for their own reasons um It is possible to use ssh to pipe A tcp dump session back to your local host and have it display in wire shark Just Google that there's a long ssh command that you can do it with another common thing that will come up in uh doing This at work is you're going to find out that uh, you know, there's going to be situations where You know, this only happens when my database server sends this one weird packet at 2 a.m Ever since they did this update you're not going to want to be there at 2 a.m Because it's not to happens at 4 a.m If you need to start a long standing tcp dump with a complex filter You can actually start it with an ampersand at the end Which of course in the in the unix world is going to background that session for you If you get disconnected, even if it's backgrounded, that's still going to kill the tcp dump You can use a command called disown To separate the command from you and then disconnect It'll keep running in the background whenever you get whenever you recap We're coming back in the morning and you need to kill that session and grab your pick up You can send a pick up with with the kill command To that pit It's um Well over time here Certainly appreciate everyone sticking around if you have any questions feel free to grab me My twitter handle is at 404 scribbles If you have any questions, you know, uh, any ideas or anything that you think I missed Certainly feel free to reach out and love to chat and share ideas. Thank you


Entrepreneurs are idealists. When we start building a business, we think we're going to succeed much easier than it actually turns out to be. And in this video, I want to bring some more reality to the journey of entrepreneurship that I've taken myself and that I've guided hundreds of entrepreneurs through. So the key thing I want to talk about in this video are the three illusions that entrepreneurs have about how easy it is to build a business and how can we overcome these illusions and find the reality of it and have a better chance of succeeding as a result. So the first illusion, what happens is that we look at successful entrepreneurs, we look at what they're doing and we say, well, gosh, it looks like it's easy for them.  And then we post about our business and it gets no likes or just one or two likes. Or we look at how someone presents their business on a webinar and wow, it looks, they're so skilled at it. It looks so easy. I'm going to go ahead and present my business on a webinar too. And then nobody buys into our services or products or programs. Or we hear about stories of how people contacted so and so and so and so and they form the collaboration so easily and built their business up so quickly and we think, oh, okay, I'll just reach out to a few people and then we reach out and nobody responds to us. So there is this illusion that what we are doing is going to be this have the same effect as those who are already way farther along. It's kind of like imagine you are starting to learn the violin and you watch a concert violinist play away and you're like, oh, that looks pretty easy.  This is not at all easy. I have to learn my scales. I have to learn how to hold the violin right and how to hold the bow and practice it. And there's so many other analogies. So the musicianship is one. Sports is another. You look at the basketball stars. It looks so fluid that they're just three pointers and how they dribble and do dunks and things. And you see, oh, that looks pretty fun and easy. And you go out in the court and you realize you have to even learn how to dribble, how to hold the ball, how to shoot. And maybe only one out of 30 goes into the basket. So how do we overcome this illusion of looking at people that are way ahead of us and thinking that's, well, therefore it's supposed to be easy for us too? What we need to look at is their history. And a lot of times the successful people don't even tell you how long and hard they worked, how many years they had to practice to get to where they were. The same thing about entrepreneurship. Usually the people who are successful at their startup, I'll tell you, the vast majority of successful business people, that wasn't their first business. That wasn't the first product or service they presented in the market. That wasn't the first marketing campaign they ever did that suddenly made their business from zero to six figures. So you've got to look at, try to figure out what is the history? What do they actually do? Tell them, ask them to tell you the truth of how long it took them to get to where they was. And of course, they can ask them for shortcuts. But even with the shortcuts, there is a long journey ahead of you to practice becoming as good as they are in their business. So that's illusion number one is looking, thinking it's easy because you see somebody else succeeding. And well, you know, you don't see all the work, all the practices, all the failures that they had to experience to get to where they were. So number one, find out the history, find out any shortcuts they may have, but know that you yourself have to experience a lot of so-called failures and mistakes before you are able to get to that level of success. And really, there is no such thing as failure if you don't stop. If you keep trying new things, if you keep trying the things that you want to try in new ways, there is no failure. There is only redirection. Every single time something doesn't work, oh, you are just being redirected to a different way. Okay. Oh, something doesn't work being redirected to a different way. It's always redirection. And you keep on redirecting and trying different things. You are going to find something that applies to that where you are applying your strengths and finding some success. Do more of that. Do more of your strengths, which takes experimentation to discover what they are in your business. When you discover something that's your strength, do more of that and keep testing other possibilities that might be your strength until you find another one that is in the application of your strength that seems to be working. And do more of that. Do more of your strengths as you experiment and then you will find yourself succeeding more and more along the way. So that's illusion number one is not to think of yourself as a failure when you're not getting kind of results that you're seeing other people get because you don't know what the road other people have taken on. Okay. You really don't. Even if they tell you the story, you don't know all the things they didn't tell you. Okay. So that's number one. Number two is that you tend to have this idea when you first get into entrepreneurship, you're so excited about the service you want to provide about this piece of content you want to put out there. This video, I think I'm excited about it. I think it's going to go viral because it came from my head. You see, it came from my own experience. So given that it came from my experience, long, hard fought experience, and I have this idea that, you know, the aha moment, I naturally think it's far more valuable than you probably think it is. But this is true. This is called the, I call it the delusion of content creators, grandeur, the delusion of grandeur for content creators and entrepreneurs. If I spend some time, all this hard work creating a product, of course, all this investment of time and energy is going to make me think that it's so valuable. Whereas other people who just look at it, they didn't take all the time and investment to create it. So they're just judging it purely from their own experience, I would say in the market's eye, it's just a meritocracy from the market's eye does not take into account all the hard work you put into creating a product. So it's an illusion, right? Any, there was a study about this origami, this social research study, three groups of people, one group was given taught to make origami, just say, hey, you go ahead and here's some origami paper, you go ahead and just make whatever origami you want, you figure it out yourself. A second group was given detailed instructions of how to fold it. Okay, and the third group didn't make any origami, they just watched, they just looked at the final product and evaluated on its own merits. Well, guess what? The group that had to figure out themselves how to make it, they valued their own origami way more than the people who were just looking at it without having made it. And then the second group who had detailed instructions how to make it, they didn't invest as much time and effort in creativity. So they valued it more than the, than the those who didn't make it, but they didn't value it as much as those who had to figure it out themselves. So know that you have an illusion that because you figured out yourself, you think it's going to be really valuable when, when the objective viewer says they don't know your history, they don't know how much you made. So they're just looking at it based on their own experience, based on their own merits. And so what that, how we overcome this illusion is that we have to don't spend so much time and effort creating your first thing. It's really good entrepreneurship is about testing more, testing more. Oh, I'm going to create this workshop. Oh, I'm going to create the service package. I'm going to create this piece of content. I'm not going to spend years creating and then putting it out there. And when it's so sorely disappointed that nobody liked it as much as we do, of course, we'd love to we spend all this time creating it. Okay. So iterate, experiment more quickly, try different things in the market. Show more different things to your social media audience, to your email subscribers, to your friends and say, Hey, which one of these, you know, that's why I make three videos a week, right? Because every single video, I'm just more casual about it. I don't take it so seriously. So I don't get this disappointed when you don't take it as valuable as I take it. Okay. So because I don't spend that much effort with it.  I mean, I'm writing a book right now and publishing it. I am not spending the kind of grinding hard work that I think a lot of authors spend. I mean, I'm spending some work, of course, putting the book together, but I'm not investing myself into, Oh my God, this thing has to be my life's work because I know that there's going to be many books that I write. So think in that way of experimentation rather than this is my baby, right? I'm having this baby. It's got to have everyone's got to love this baby instead of thinking of that way. Think of it as I'm flying a paper airplane, folding this paper airplane. I'm just going to toss it and it goes down, you know, really quickly. No big deal. I'll pick it back up and I'll try a different formation or I'll tweak it a little bit. I'll fly it again.  That's what good entrepreneurship is. From my experience and from what I've seen from other people who have succeeded and been persistent enough to be able to succeed, that's the key, right? If you just, if you take your failure so hard, Oh, I launched something, it took so much effort. That's what I don't want to happen for you. You launch something took so much effort, it failed and then you get disappointed. And of course, then you're not likely to keep trying new things in order than to find the ways that you can succeed. Entrepreneurship is a marathon. And I would say it's even more than a marathon. It's a series of sprints, but you have to sprint a lot to find out what kind of sprint works best for you. Okay. A series of tests. All right. And you got to persist in doing that. Okay. So the third illusion, I'll end this rather long video already. The third illusion comes from the people in my industry. I'm sad to say this. The people in my industry, I sell business training programs, marketing, coaching programs, workshop, etc. A lot of people in my industry, and I'll be honest with you, I used to do this myself. We make it sound a lot easier than it actually is because we're trying to sell you something. So I really encourage you to stop buying, especially the multi thousand, the thousand dollar, $2,000 marketing training programs, $1 to $2,000, $5,000, $10,000 business training programs and mastermind programs, etc. That sell you on Oh, if you just join our program and follow our things step by step, it's going to be easy for you. Look at these case studies. Look how wonderful they succeeded through our program, what they don't tell you. And I've been on the inside. So I know this because I've talked to many of the people who sold these programs. So I know what's really going on. They don't tell you that 90 to 95% of those who buy those programs do not get the results that those case studies being shown are getting and what they also don't tell you. And they're often unwilling to admit that the people who got the fabulous results through their program were already on the many of them were already on the verge of success. They've already done a lot of things to build a foundation for the success that now this program is taking for credit. Say, see, John and Susie succeeded through our program. Look, our program is so effective. Well, John and Susie had done so much work already before the programs. And now the program is taking credit for John and Susie's success. So how do we do this? How do we deal with this? Do not buy any other. I'm saying this because I just sell these programs. I really don't recommend unless money is no issue for you. Okay. If money is no issue for you, you've already got millions of dollars. And yes, you can buy a couple thousand dollar programs. Not a big deal. But if you are struggling financially or you are frugal and don't, you know, spending $2,000, $1,000 on a program is not nothing. Okay. Be really, really frugal about those expensive programs and instead buy smaller price. I mean, this is why now instead of selling the $2,000 program, I sell a $25 workshop that is not a big deal for most people spend $25 and two hours consuming the best of my content. And you know, if it doesn't work, okay, it's two hours and $25 not a big deal. I usually try to give my best in there so you'll get something out of it. That's useful. But you see what I mean? So even when it comes to buying trainings and programs and coaching, do it in bite-sized pieces, not having this illusion that they're going to sell you that it's going to work amazingly. Just say, I'm going to try it out.  I'm going to try to spend $20, $30, $40 and see if it works. And if it works really well, maybe I'll spend more money with that person a little bit more, but don't suddenly go, all right, I'm going to spend $2,000, $5,000, $10,000 with someone that that I've never spent a little bit of money with first. So I hope this is helpful to give you more of a reality of what it takes to succeed in entrepreneurship. And I would love to know in the comments if you want to leave any questions that you have or any comments you've had about any of the three illusions I've talked about. One being not to take other people's journey as an indication of whether you should be able to do the same thing and succeed so quickly as they seem to have, you don't know the background. Second illusion is realizing that the creator, you, me, we have this illusion that the thing we put out there is going to be so much more valuable than the market thinks, because we've spent all this time creating it. So we value it like having a baby, right? And so we need to test a lot more things a lot more quickly to see what the market tells us is going to work to give more effort into making it even better. And the third illusion to overcome it don't spend thousands of dollars on business and marketing training programs before, you know, always spend a little bit with someone first, see if it's really effective, then spend a little bit more, see if that's effective, then spend a little bit more rather than jumping right into something that's expensive. I hope this is helpful. If I had followed this advice when I was first starting out, I would have saved so much money and so much heartache. So I hope that it will help you as well. Take care.


You're watching a special broadcast of theCUBE, our flagship program. We go out to the events to extract the signal of noise and we are live in San Francisco at AT&T Park, San Francisco Giants, home of the world champion giants here live in a special event sponsored by HB. We're excited to be here. We're going to talk to all the tech athletes and the giants, the earthquakes, the sharks, the warriors in spirit is not going to be here and they're going to have a great time. It's an amazing event and I'm joined with Jeff Kelly, my co-host and Jeff Frick who put together guys, great event here about big data and sports. Who would have thought big data would be a big part of it? Jeff, let's start with you. What's your take on this event and why is it so important? Well, you know, we spend a lot of time at events and talk to a lot of vendors, people supplying technology, talking about technology, but you know, everybody wants to know who's doing something with technology? Who's making a difference in their company with technology and there's a lot of interesting stories about security and banks and finance, but you know, we like sports. Some of the most innovative sports teams and organizations in the country, if not the world are right here in the Bay Area with a lot of new ownership changes, new stadiums, new innovation. And in fact, just you know, if you walk in downstairs here at the Giants and Executive Offices, the first plaque you see as you walk in the door, their number one value is innovation, innovation. So we're really excited. We've got some of the greatest practitioners of big data out there. And unlike most of us, most of us don't work every day in front of 40,000 people watching us live and not to mention how many on TV. So it's a special group of people that really are taxed to deliver each and every day and we're excited to get them on. If you're watching theCUBE, you're normally used to seeing us going, getting very geeky, talking about speeds and feeds, getting in the weeds and the technology, but we also like to talk about the very high level, the business impacts and the leadership around big data because we are living in a modern era and we have Jeff Kelly who's the chief analyst of the big data practice of our organization that's looking at the network, Wikibon. Jeff, big data you hear about Hadoop, data warehouses, flash memory, all the geeky stuff that puts people to bed at night sometimes. But here we're talking about sports, mainstream consumer topics, consumerization.  So what's your assessment of how do they cross over and maintain that cutting edge business advantage and still be geeky? Well, I mean of course we talk about the different technologies that make up big data and there's a lot of debate around that, whether it's Hadoop or analytic databases, visualization and all those interesting technologies, but ultimately they're just an able shot. So what they do is they enable companies, in this case sports franchises to be more competitive. What's really interesting about these sports franchises is it's not just kind of helping run their business but it's the fan experience, it's the players on the field. So it really touches every area of their business and of course this kind of all kind of came to the fore with Michael Lewis's book Moneyball back 10 plus years ago with Billy Bean and the Oakland A's. And it'll be really interesting tonight to have these conversations to see how far we've come in the way sports franchises use data and not just in baseball but in other sports as well. I'm really interested in some of the other sports as well because of course baseball well known, tons of statistics going back 100 plus years. So obviously that's ripe for data analysis but it'll be interesting to hear how other sports hockey, soccer, football are able to take advantage of data as well to kind of improve the product on the field but again also off the field. How are you running your fan experience? How are you running your business? So it's really gonna be a great night. Looking forward to hearing these stories and ultimately yeah, we talk about the technology but it's an enabler. It's all about the practitioners driving business value and that's what tonight's about. Jeff, I'm looking forward to hearing from them about how the game has changed relative to technology. Obviously in the old days Scouts didn't have laptops. The fans in the ballpark were watching live, listening to the radio, maybe watching on TV. Now everyone's connected. I was watching that movie Trouble with the Curve and Clint Eastwood, you know, he can hear the bat. So I want to hear how technologies still maintain that artistic feel for the game and how does that change how they feel the personnel? Does it double the staff, triple the staff? Does it change the game? What are you looking for? Well it's funny, it's from the sweet level all the way to the grass and you know we talk about baseball and it's just coming out of spring training, opening day, it was a few days ago and what do they always talk about, right? The smell of the fresh cut grass. Well my latest ESPN magazine, what I open up is read about Bill putting in a new system here that measures the humidity, it measures the moisture, it measures everything down in the grass and the dirt not only to provide a better experience for the grass but also to save energy, to save water. So I mean we are literally talking about technology from all the way up at the top at the level of the suites and the offices all the way down to the groundskeepers and the guys trying to keep it beautiful so I'm looking forward to it. I'm excited to get the guests on, let's get the show underway. Okay, we're going to hear from people who are building new stadiums to having existing stadiums in technology. This is theCUBE, we'll be right back with our next guest at this break.


Me llamo Temperamento, that's my rap name. Real name is Cristian Estremera, born in Ponce, Puerto Rico. And I'm a Latin hip hop artist, known worldwide, especially in South America where I'm a big inspiration to a lot of people out there. I'm real known in Europe, of course United States, but we can do it in public. There's some places that listen to my music and you know a lot of people might consider me underground, but I don't look at myself that way. Temperamento is a movement. The music started for me in 1999. For that time, you know, I was in high school, I was a straight-A student. I had a really bad past. My father had committed suicide. I grew up passing through a lot of things in my life that were kind of holding me back from being mentally right, but I always kept doing my thing in school. What happened in 1999 was that this was a time when, I think, the Columbine massacre had just happened and in the high schools before, I wasn't doing that well and they sent me to this high school called AOP, Alternative Learning Project, which was a school of like 100 students, but in that school I started focusing. I wanted to do law, I wanted to be a lawyer.  What happened in this hospital for the eight months I discovered music, I don't know how it came to me, I don't know how the music came to me, I've been in the hospital for eight months, but I started writing about my life on paper, you know, I wanted, you know, I've always been a person that I consider blessed, I always feel that it's always there to protect me, it brings things to life, but I go with it, so I started writing this song, I think it was like Seven Minutes Long, I didn't know how the music came to me, so when I left, like two months ago, I got into a rap competition, you know, I thought it was rap, but like I didn't even know, I had no experience, and the competition was held by DJ Buck, DJ Buck spent a lot of time, he was a DJ in How One of Six, the biggest English station here in Rhode Island, and there were 24 groups, everybody was English rappers, I was the only one Spanish, so I went crazy with an old school, and I ended up winning the contest, the trophy I still have is like five feet tall, so huge trophy, it was like 300 ales, I remember that you'll make it in Providence, and the competition in Portugese, that's about like 15 minutes from Providence, in Carlos, and I remember that I had somebody for a ride, and when I won the contest, I came walking back to Providence, I think I took like hours to get home, but I was so happy, I was like wow, you know, after that everybody was like, yo, it should be a rapper, it should be a rapper, it should be a rapper, and that's how, that's how the career started, you know, um, from that day on, I felt that Hip Hop saved my life in the year 2000, 2001, I was um, I had made this guy, his name was Magic, and he was like a proactive guy, like, you know, he wanted to manage me, I didn't really know him, so I was the only person that I had a choice to go to, and he actually took me to New York one day, and at this time, um, I went, he took me to Nori Studio, I mean, there was Nori there, you know, this guy, you know, SPK, Big Mato, these guys I've never heard of, he took me to the studio, and you know, they, they were like so humble, and like, you know, they were listening to me, they were like wow, you got a good future, you got a good future, I come back over here, and I met a guy named Spooni Yoon, which kind of discovered me, he took me to the studio, you know, in Massachusetts, and that was the person that I went with, I started doing my first album called Galena Perpetua, and you know, I was trying to do my thing, you know, in the Hip Hop movement, we started going to shows, we didn't make at all notices, um, then I started noticing, you know, my, uh, they get the movement really wasn't from the hip hop movement, like it wasn't really supporting, like I would go up to them and tell them, you know, I do hip hop, and they were like, nah, you know, that's not gonna make it, you can't do that, you have to do what we do, and since then, I always been like, you know, getting, you know, put all that I see, you know, in my heart, I, I've never been a person that hate people, and like, you know, they go all galento, you know what I'm saying, but since hip hop for me changed my life, I used to get offended, I got offended real bad when people used to tell me that I didn't do that, so I came about with the idea that I was gonna come in the game and I was gonna do this, is now the reason why I did it is because you gotta remember that the hip hop industry, the movement, they go by what's going on, so like right now, you know, Drake, it's Little Wayne, everybody doing that type of music to get out there. At that time, 50 Cent hundreds came out, 50 Cent was this and everybody. In Puerto Rico, we had a tempo against Polatilito, we had all these people, so everybody was getting known by doing this tracks, so that's why temperamento started doing this tracks, because that's what everybody was getting known for.  Next one day, La Calle radio station show, they played the song in New York, and Tevo had a show in Madison Square Garden, and he got so offended from them playing the song that he canceled he didn't go to Madison Square Garden, and that's the way people started knowing about me, but I knew that I had something different, I knew that I was good, so I started coming up with ideas, you know, am I gonna come up with my music? People have labels, these people got managers, they got A&Rs, they got people working on everywhere, so at that time, there was Mejenta.com, there wasn't even MySpace and all that. I had met, I had met Brujini Boys, it was the first video that I ever done was with Brujini Boys, around that time they took me to this kid, it was a special kid, they met a kid who was paralyzing my neck down, we go see him, this kid was in the computer, 24-7, he used to do bandings, Mejenta.com, people used to go in them and pick a code and play music on Mejenta, so I kept in communication with him, and through him I was like, we could promote our music in Mejenta.com, so me and my manager started focusing on the promotion, on the promotion, on the promotion, online, online, online, now at this time in the Spanish industry there wasn't really no online promotion, like there wasn't an internet rapper, but that's what I started becoming, people started looking at me like a rapper that got known through the internet because people were just downloading my dishes, so at that time I started going record labels, I had a lot of meetings with the record labels and funny to say now, they all started saying no because I was an internet rapper, I wasn't going to make it, it was no such thing as blowing up, being a rapper that was getting promotion on the internet, so I still kept being me and it's funny to say now that to get signed, to get a record deal now, you have to be an internet rapper, you have to have millions of my space hits and millions of YouTube hits, you know, they didn't want to go leave me, I think my strategy was too ahead of them, they didn't know, they didn't see it coming, but that's how they did it. I see my career as a blessing, I've gotten so far by myself, like I never had an investor come up to me and send them investors much money into you, I never had money involved in promoting me and I probably could say that I'm one of those rappers in all South America and in Europe that are always going to be mentioned when you talk about lying hip hop, I was the one who, I consider being the one that really opened the door in South America with lying hip hop because I was the one who started speaking about it when nobody else would, like the reggaetoneros, the burribas, they were all about themselves, there wasn't really a rap or saying, you know, I'm going to open doors in South America, so once I started doing that, this whole black voting came and a lot of people there started repping our movement and right now, the way I look at it is, you know, I've come, I've come, I've come so far, so far, with my people from South America, people worldwide that I'm just proud of myself, I'm very proud of what I do, I'm not a rapper that you watch on television, I'm not a rapper that you watch on that level, but it's a rapper that alone, alone, alone, alone, does his business well, does his music well, communicates with his fans, he's humble and he doesn't have hair in his tongue, when I don't like something, I like to express it, I live in a country where I can express what I want to say. In the end, you don't have to believe to say, wow, I think if people really dig deep into my music they're gonna be like, wow, it's really expensive, it's different for many people.


Okay, come on. Come on. Yes. Okay. No. Aw, cute. There's one's money. Yes, Ilya. Come out. Cute. Wait, aw. You only picked horse photos. That'll scare them off. Delete, delete. Cool. And a boat. Hiking. People love that. Alright, bio. Some with one big passion. Don't say that. No. Ignore, ignore. Yes, this is more normal. Or you can say it, but don't say it. Stop it. Just don't say it. Just don't tell them. They'll think you're crazy. Maybe I should just let it out.  I love how they smell.  Calm down about horse girls. We are fine, okay? Cool. And I take chances. Honest flirting is good, but make it cute. Passionate about horses with me.


On Saturday, February 4th, 44-year-old Pikeville resident Keene Michael Johnson was struck and killed by a car on U.S. 23. It took place near the community trust bank tower as the driver was heading southbound during the afternoon. Johnson was pronounced dead at the scene by the Pike County Coroner's Office. Our dispatch center received several calls, nine-on-one calls, referenced to a pedestrian that had been struck by a vehicle traveling southbound near exit 24 in the cut-through area. First responders arrived on scene, located the victim. The Pike County Coroner's Office was called to the scene at that time and pronounced the victim deceased at the scene due to sustaining serious injuries. The vehicle that struck the pedestrian stayed on scene and they were not injured with the collision. Officer Condas' courage is crossing the highway for any reason. As for the driver involved in the incident, there are currently no charges being filed. That's probably the worst road you could ever try to cross in this county for sure is U.S. 23. It's just a very busy highway. It's a federal highway. In fact, you're not supposed to even be hitchhiking on that road. That's against ordinance and basically against the law. You're not supposed to even be the Department of Transportation.  People want to give permission for that and say, can we park her? No, we can't give her permission. That's state property. By the time we got there, by the time first responders got there, that the victim was deceased. So there was basically pronounced deceased there. So it's a fatal, of course. So it's going to be investigated by this department. Officer Tommy Fouts is a reconstructionist. He's in charge of the investigation. So at this time, we don't see any, foresee any kind of criminal charges. Reporting from Mountain Top News, I'm Nick Collum.


Hey Aloha and welcome to Stan Energyman here on Think Tech Hawaii. I'm Stan Osterman as usual coming from the sort of rainy mighty megalopolis of Kailua Hawaii. It's not as pretty as the picture behind me. We had a lot of rain the last couple of days. Kind of typical moving into the freezing winter of Hawaii which will drop us down into maybe 65-70 degrees here you know so we'll have to bust out the parkas. Anyway thanks to everybody this morning at the Renewable Revealed Hawaii Forum I thought it came out really well and we talked about microgrids and disasters and I wanted to continue that theme today and talk about microgrids on my show. So my guest today is from the Northwestern US and he's got quite an extensive resume in microgrids and control microgrid controls and and things like that. So I wanted to keep the discussion going and today maybe get it more into a personal level or a practical level of how you would what things you would consider building a microgrid especially on a residential area a residential you know structure maybe a small business. So today's guest is Gary Calderon and he's going to be joining us from this around Seattle right? That's correct. Oh and then and thanks Gary thanks for joining us today especially on fairly short notice I just met Gary last week via another gentleman Bob who was interested in some of the things we're talking about on this program so just timing worked out well and I'm glad you could join us today so could you start off by telling us a little bit sharing with the viewers a little bit of your background. Your resume is pretty extensive so if I read it we'd be out of time on the show you can consolidate a little bit and give the folks some of your background. Absolutely so background, electrical engineer out of UC Berkeley computer science as well also MBA out of San Francisco and more recently Lawrence Berkeley labs on San Jose State put a program of masters of science and engineering for battery battery technologies. As far as employment I'll just talk about the last 10 years prior to that it was more high tech with Sun Microsystems IBM Siemens Medical and about 20 startups and Silicon Valley but about I say 10, 11 years ago started actually installing solar for a non-profit that helped let's say a lot of the residential areas in the San Francisco Bay Area the disadvantaged communities got solar installed for free grid alternatives is the name of the non-profit headed up by two Stanford grads and it's going strong today and then since then that experience I went to solar city for a few years at the same time I was working at the factory at Tesla over in Fremont California so the whole Bay Area Bay Area was taken off on the solar side of things in addition to that I started my own company that built micro grids and also electric vehicle charging not only for residential but actually primarily like business parks and things like that the focus on micro grids was the fire stations and around emergency facilities that's where we started battery and canopy you know solar for parking lots started working at Tesla at the actual factory selling both EV EVs or the transportation electric vehicles as well as the solar and batteries for about eight years there but had moved up to the Southern Northwest to Portland and did Seattle and more recently had become a consultant for a lot of projects micro grid projects as well as not just for resilience but for what we call distributed energy resourcing and we have all these resources that come together under one umbrella and you can actually manage all the electrons where the load is heavier and so resilience of course is part of that but also load shifting and a few other things like that but what you can do in your home too which I do with my solar installation from Tesla. All right thanks one of the takeaways I got from this morning's discussion with renew rebuild Hawaii was that locating micro grids in a region the location is important for survival reasons and things like that but one of the other reasons is you know you talked a little bit about distributed generation or being able to to you know use the power from your solar writing in your house and then maybe even share it and and the thing that struck me was most of the utilities want to put the micro grids near their near their generation and or run power to a micro grid from their generation and really when you get into the nuts and bolts it's better to have the generation where your micro grid is so using renewables and such and of course most power companies are set up with a centralized generation plant going out through high voltage wires to substations from substations down to transformers and into buildings right and and so the real takeaway from that I got from this morning from most of the micro grid people was you're better off consolidating generation right where your micro grid is and using it which makes sense there's no line loss you don't have if you have hurricanes and things you don't have those poles and stuff knocking wires down and having to recover from that right so in in that light let's focus on your house and why don't you kind of walk us through your house a little bit and then I'm going to ask you some more specific questions about decision points and designing your micro grids okay if you wanted to start with just the pictures I provided we could do that too but at a high level I do have batteries not just for resilience here or backup this is the installation here in my garage so you're looking at two batteries there that's close just under 30 kilowatt hours combined with that and to the right you see my Tesla EV charger and then with considering this combination there's still some answer I mean you still need to tell the installers or whoever you're purchasing from whether or not you want just critical loads it could be medical equipment only or your servers whatever and maybe a few lights when there's an outage I chose to do a whole home right which would take my whole entire service panel and back that up so I so far and it's going on two years right now I've had about 20 outages right the software that's provided with most of these installations allows you to sort of break out what you want as far as percentage wise maybe I'm going to 50 50 50 percent of my let's say excess solar stored in my batteries can be used for a potential outage the other 50 percent could be used for nighttime use once the sun goes down so I have control of that right the other thing that you mentioned is sharing electrons so I also had that option with the utility when the utility for example in this Seattle area we had like 110 115 degree um uh weather for about one week right nobody was prepared for that from coming from California I have air conditioning and a lot of people don't right so they weren't used to that so they would they could if they wanted to it's giving me a call say can you offer some kilowatt hours from your battery that's called demand response so that's another thing I signed up for to help my neighborhood in case there was outages or just not enough generation right so is that a is that arrangement with the utility something that comes out of a public utilities docket and and it's set up so that there's a formal agreement between the homeowner and the utility in terms of how you share things yes Stan so I wouldn't say every utility would do that but uh Puget Sound Energy which is my utility I used to have PG&E and San Francisco Bay Area but they do it too so this is helping the community right so helping it become resilient not just your home but now can you really afford it so you just got to look at the the actual kilowatt hour stored well I might want to just keep it from my family because I have maybe medical equipment or some other things so I may not sign up for that but that's what most residential today not back in the day but today more people are getting the battery solar combination for the reason of for example for the last six months I haven't paid for one kilowatt hour in the Pacific Northwest with my system which is actually uh pointing southeast so in the summer we have longer days too but um so I get a lot of solar in the Pacific Northwest I did a lot of convincing when I was selling in Portland in Seattle and but it works so how many how many kilowatts of solar panel do you have on your roof so I had just about eight kilowatts oh yes that's a pretty sizable amount here in Hawaii just for your to comparison but when we're when we're estimating usage we we estimate that we have about five and a half hours of rated power a day from our solar panels just to because in the morning and afternoon it's not as good plus sometimes you're you're got cloud cover you're up near the mountain so you might have trees or you know near your house or whatever and and so you know but when you when you do that calculation or when you did the calculation for your house you obviously had to take into account your tesla charger um I mean that you're charging your car that that takes quite a bit of power off of your your micro grid um and then and then you say your houses your whole house is powered by your your solar panels where you you said that the electrician could basically take critical circuits or whatever circuits you want and divide them up but how did you just kind of walk us through your logic of how you calculated you needed eight kilowatts of power on your roof well typically you're going to give them a year's worth of your electricity bills right right electricity bills pretty much dictate uh how much how big of a system and then you're also you're looking at not only roof size but you know some areas you have these fire setbacks your roof could be pretty big but the fire setbacks could be three feet from you know from the the edges of the roof to allow the fire department cases of fire to walk around so that takes a little bit of your real estate sometimes a lot so in my case um I was able to get those two raised um on my to come up to about eight kilowatt so they indicated about 80 percent of an offset meaning that 80 percent what the size system I chose about 80 percent of my um energy would come from the sun per year so and it depends that's only counting if I if I didn't use the batteries right if I only use the batteries for resiliency and just sitting there stored and not being used in the evening then that would be 80 percent but I I think I'm pretty much net zero right now so those are the decisions you may only want 50 percent you may only want 25 percent I had people sometimes they don't want it but they end up with it because of the shading conditions especially in Pacific Northwest and roof right orientation and size so those are the components those are the things that the engineer looks at so they look at trying to achieve your goals first if you can get net zero right a hundred percent of your you know your electricity coming from the sun annually they'll go for it but it's not always possible but I'd say 70 to 80 percent is typical when people satisfy with that so do you recall what your average daily use was for that house before you switched over to solar um I would say I do have 30 something kilowatt hours 30 something or 40 kilowatt hours it was just under because I had um because I had daughters right so moved they moved out they like hairdryers and they're like yeah oh yeah that all adds up yeah so they had left so for college and stuff like that but what I would say is probably maybe 15 uh thousand to 1500 kilowatt hours right um a month okay and then of course I had air conditioning so that would go up uh during the summer months right um so we looked at that um I'm not too sure if I'm prepared to show maybe uh one of my bills or six I think I had six of them prepared but showing the difference of and of course we're looking at this geography right not Hawaii but looking at the city northwest where I'm pretty much in the last six months haven't paid a dime for us a kilowatt hour so here it's illustrating on the left hand side it was the past year and then since having solar on the far right it's showing a lot less and as you go down on the bills you'll start seeing that it's close to nothing now this year is even even less right that's after the first year so it does work I mean in a lot of cases you have a lot more sun than than we do right now it's like raining every day for the last four weeks and but it's constant rain it's a real winter and sometimes snow right so yeah well you were going through your bills that I busted out my calculator it looks like you're you're averaging between 45 and 50 kilowatt hours a day uh average for your your um usage with your daughters and their hairdryers and stuff so you're probably down around 40 with eight kilowatts of solar on your roof um you're about like my next door neighbor who has almost your identical system has two tesla power walls and he has around I think 30 between 35 and 40 basically kilowatt hours of production available every day so that's probably around seven or eight kilowatts of PV panels based on our solar so from from my perspective what you generally do is like you say you start off with your electric bill you you estimate your usage you kind of anticipate future use like you're going to get an electric vehicle or you know you know maybe you're doing more work from home or something so you kind of throw that in and maybe even you minus some off for led lighting and you know things that don't take as much power and try and get as good an estimate as you can um I generally recommend that you kind of overproduce solar just a little bit especially with store and I don't I don't recommend anybody get solar without storage for me if you don't get storage it's really you're you're just selling yourself short and you want to talk about that from a homeowner's perspective yeah so a lot of people think they will still have backup right or resiliency just by having just solar right solar panels solar arrays and okay I have backup I've talked to many many people and they oh I've had solar for a long time I don't need a battery add back I said no you don't you don't have backup and in fact when there's the lines are down or somebody's on the lines troubleshooting the inverter is disconnecting right you're sort of islanded from the grid until that's fixed and they reconnect you so that's one thing you have to make clear to people that you don't have backup with the batteries you you will be able to use the batteries you're still disconnected from the grid when there's an outage right so you don't let you keep somebody that's troubleshooting on the lines and your solar is working for you as long as the sun's out right but your batteries the power source are the energy source right now so generating that solar during the day it will still continue to charge your batteries so that's like a virtual power plant if you will that's what I call it you have your and you don't have to it's it depends on the software too you can't physically island right once you're connected to a utility at least in these parts I know in California Oregon and Washington on the west coast here I don't know what Hawaii allows you to do if you decide to go off grid but that's the case here so it's hard to disconnect from the grid um yeah especially once you connect to the grid um so so let's kind of walk through the system and this is really basic stuff for you but yeah the solar on your roof you calculated how much you need it's up there it produces DC electric power that comes into a controller that charges your battery and and and sends power either to your inverters or to your battery depending if you're charging your battery or running your other system right so if once your batteries are charged it cuts off from the batteries and and it's going just to the here your inverters your inverters then change the DC electricity to AC power right so it can run your all your household appliances and things like that um and those control items are important too and depending on whether you're like you say if you're off grid you probably have choices of voltage whether you want to stick with a real basic 12 volt or 36 or 48 volt but those tesla walls what do they basically run at voltage wise are they 48 volt well they it's a DC coupled right it's not ac coupled like okay one thing is that the micro uh the micro grid inverters that are back those instead of your central inverter that uh some people you know it depends on a lot of people think it's uh advantageous to have a micro inverter behind every panel right okay that's ac coming off that okay so now you need an ac coupled type uh power wall inverter right i should say and so over the central like i have the the centralized type of inverter is DC coming off the roof it's converted to ac and now that's charging um my inverter internal of the power wall right and so there's really everything's regulated so it's not you you don't really have to look at uh voltage 12 24 48 that's already built in right and it doesn't have to be tesla inverters i mean the inverters that are used right now i mean um there's a variety of them that work very well you know dc that and a lot of its solid state right so it's not like the old versions that were 150 pounds to install which i was that was very hard to do by yourself but today there's a lot that's a data logger as well so that's collecting that information another point here i want to make is that information in the in the solar inverter is collecting data continuously allowing you to view real time on your phone what's going on but also in the case of uh sun run tesla and a lot of other um let's say solar uh providers or solar pv installers they'll provide you with software to allow you to you view it let's say real time 24 hours a day and for them to also be able to troubleshoot and view it too because they sign a contract with you right in most cases a power purchase agreement could be a lease and could be just an all-out purchase so they have uh regarding the contract because i know i'm looking at the time to make sure we have enough time because this is important too um they're promising so many kilowatt hours for 20 years for example if it's a 20-year contract or warranty i should say and there's degradation that happens over the years because of the sun right this beating down on it uh some more than other environments right so they have this whole table of what they're promising as far as generation and degradation on those panels and the other hardware um so it's important to note that to understand that because some people don't look at contracts that closely or don't understand them and don't ask questions so it's very important to look at those tables and see oh 10 years from now if i'm getting it's a half percent degradation on my panels wow that's going to go down five percent or wow in 20 years it's going to be that by that time who knows they may not be living there but they need to know the next let the next homeowner understand that contract especially if it's a power purchase agreement it has to be transferred over to the new homeowner right if it belongs to the house or installs belongs to the homeowner the current homeowner that's part of it just like the kitchen sink is part of the sale right yeah a lot of people like to opt for the power purchase agreement for a couple reasons number one it's usually much more affordable because it's more like just paying the utility company you're paying the power purchase company they they still they own the equipment on your house and you're just paying a monthly bill for electricity exactly and they're doing all the everything right now let's say after and in the case of my my purchase power ppa's i should say power purchase agreements when i was with solar city after about five years you were able to purchase you had the option to purchase and own that system so um and that's something that needs to be reviewed at some time because a lot of times it might take uh 30 to 60 days maybe longer to install these and people just anxious to get it and they'll start signing things and everything's online and they won't pay attention to the warranty which is very important so uh that's that's a heads up for anybody listening well speaking of warranties you know one of my observations is there's there are a lot of people who are really afraid to not be grid tied you know like they would never go off grid because it terrifies them to think they're responsible for their own electricity but the equipment is actually pretty reliable and as long as you understand the degradation of the solar and the batteries batteries degrade over time as well um how much you know in terms of daily maintenance or monthly maintenance or annual maintenance really is there that much to do with your system the only thing I could think of especially in parts where you have a lot of trees like Pacific Northwest uh sometimes they have moss sometimes they have uh branches or you know just needles piling up and things like that and they do get a little dusty I mean I would never suggest somebody getting on their roof and start spraying them down but maybe hire somebody but it's it's it's a little dangerous just to be on the roof not in the solar but whether without solar so I quite often I ask do you have you know sort of a dusty area dusty roads or trees hanging over and parts of your your roof because the dust is going to cover that they'll be more efficient if they're just just spraying them off you don't have to scrub them so um as far as the other maintenance on on the hardware you saw in my garage that picture that you don't need to touch anything if something goes wrong let's say I'm up with my batteries within those two enclosures there is on the top half the inverter right if you were to open that up in the bottom then you have your batteries right your battery cells and remotely they can actually test things so in the case of Tesla and I believe with others and the competitors they're doing upgrades remotely like they do with their electric vehicles right you're not saying yes or no to an upgrade they're continuously upgrading remotely through the wi-fi of your home right so I would say in almost all cases you're going to need some type of internet connection wi-fi they'll give you a router so they can monitor what's going on and they've contacted me too saying hey something's wrong with your router hey something and via my cell phone right they'll text me and something and so they're on top of it they have these alarms going off with other installations so it's come a long way as far as pricing it looks like we have three minutes here as far as pricing of solar panels I've been doing it for over 10 years right and I believe when I first started per per watt to install it was closer to like eight nine dollars per watt so the prices have come down considerably and closer to a buck fifty right per watt per installation of solar the other thing is administration today is uh continued the 26 federal tax credit not just for the solar but for both solar and battery and if you decide to get the battery at a later date uh within the next two years you're also as a retrofit get your 26 federal tax credit once that battery is installed so it's a pretty good opportunity to to go after solar if um if it's something that you've been looking at and waiting for prices to go down well that's uh that's a pretty good place to wrap things up here because uh believe it or not we we have hit our our time limit but um I'd like to say just for another uh piece of confidence builder if you're thinking of getting solar do a good job work with a good company consider a power purchase agreement if you're especially if you're a little nervous about maintaining some of your own gear and by all means get battery backup good advice great advice okay well gary thanks so much for joining us today and um you know we'll talk to bob and maybe have both you guys back on another show and talk a little bit more about um micro grids and more detail so thanks for being here and um until next tuesday to all the viewers stan energy man signing off aloha