Skip to main content


Showing posts from January, 2009

Tired ...

Last night I was so tired. I planned to take a short nap (say, less than 1 hour) and then worked on various things (finishing marking student papers, editing book drafts, and so son). But, I ended up having a long sleep. I did wake up one hour after started to sleep. I was going to wake up, but I thought ... another 5 minutes wouldn't hurt. Alas. Five minutes turned into an hour! After that I didn't feel like working. So I ended up sleeping for 7 hours. Dang! There goes my working hours. Today I have to sleep less. (But, the sign is pointing to a different direction ... more sleep. ha ha ha.)

Can You Change Somebody?

You see somebody. You don't like what you see, for example his/her values, attitude, and the like. You said to yourself. I can change him/her. You know what... You CANNOT! S/he must change her/himself. You cannot change somebody. Especially if that person is not willing to change.

Gone from indonesia matters

I've just found out (my accident) that this blog was not listed in Indonesia Matters. Previously, it was listed as part of top 10. Hey, I didn't make this blog just to be a top 10 blog. So, it doesn't really matter anyway. On a side note, I just have to find time to update this blog. I've been focusing my attention on my worpress blog . Time is not on my side this time ...

High-speed (10Gb) Packet Inspection

I am involved in a research trying to do a packet inspection on a high-speed (10Gb) [ethernet] network. There are many issues that we have to face. First, packet drops. We are using software (tools) that requires all packets to be available before the inspection begins. Unfortunately, our network is not clean, there are packet drops. Some packets are missing. This really creates a problem for us. We could modify the software so that it does not require all packets to be available, or we could "spoof" the missing packets. The idea is that given a timeout, if a packet is not available then we just create a dummy packet. Which one is better (less difficult to do)? Second, high-speed packet matching library. What kind of library should we use? libnids? tcpflow? libpcap? Not that we are interested in inspecting the content of the packet (payload?). I guess it's something like ngrep but for the whole session (not just one packet). Sorry if my explanation is not that clear.


it's a brand new day, in a brand new year. first post in this blog. hopefully, we are better (in many ways) this year.