This is the lightning talk presented by @xme and @senseizeon at BruCON 0x05 about the deployed network.

1. The BruCO”NSA”
Network
“How we take care of your packets”

2. Topology
• Radio P2P Link to the
Internet
• PublicVLAN
• PrivateVLAN (Crew,
Speaker,Apps)

3. Topology

4. Our C&C

5. Numbers
• 100 MBits up/down
• 11 AP’s
• 5 switches
• 60.303.633 packets captured yesterday
• Peak up to 65 Mbits/s
• Since BruCON 0x01, ~1 KM of CAT-5
cables
• ...a lot of Clubmate and 0xC0FFEE

6. Visibility
“A network is like milk on a stove, you need to keep
an eye on it all the time”

7. Visibility

8. FunVS. Legal
• BruCON is considered as an ISP from
the .be law point of view
• We keep:
MAC|Timestamp|SrcIP|SrcPort|DstIP|DstPort
• “Due diligence” principle

9. Wall of Sheep

10. Wall of Sheep
• 25 unique passwords sniffed (up to now!)
• Avg length: 6.8 characters
Protocols Counts
snmp 2034
http 82
ftp 27
pop 17

11. Malware Tracking

12. All your packets are
belong to us...
ThankYou!