Commit 6c95222

@@ -0,0 +1,5 @@
+# grub: $[?],root,linux_grub
+# grub: ,,linux_grub
+# grub: ,,linux_grub
+# grub: ,,linux_grub
+# grub: ,,linux_grub

@@ -0,0 +1,7 @@
+linux init: runlevel for halting the system,0,linux_init
+linux init: runlevel for single user mode,1,linux_init
+linux init: runlevel for multi user mode (traditionally no networking),2,linux_init
+linux init: runlevel for extended multi user mode (networking and services started),3,linux_init
+linux init: runlevel for user defined customization,4,linux_init
+linux init: runlevel for graphical mode,5,linux_init
+linux init: runlevel for reboot,6,linux_init

@@ -0,0 +1,1 @@
+systemd: the systemd equivilant to a runlevel is a [?],target unit,systemd

@@ -1,3 +1,36 @@
+# linux permissions: directory,d,linux_acl
+# linux permissions: symbolic link,l,linux_acl
+# linux permissions: unix domain socket,s,linux_acl
+# linux permissions: named pipe,p,linux_acl
+# linux permissions: character device file,c,linux_acl
+# linux permissions: block device file,b,linux_acl
+# linux permissions: read,r,linux_acl
+# linux permissions: write,w,linux_acl
+# linux permissions: execute,x,linux_acl
+# linux permissions: no permissions,-,linux_acl
+linux permissions: numeric mode value of ---,0,linux_acl
+linux permissions: numeric mode value of --x,1,linux_acl
+linux permissions: numeric mode value of -w-,2,linux_acl
+linux permissions: numeric mode value of -wx,3,linux_acl
+linux permissions: numeric mode value of r--,4,linux_acl
+linux permissions: numeric mode value of r-x,5,linux_acl
+linux permissions: numeric mode value of rw-,6,linux_acl
+linux permissions: numeric mode value of rwx,7,linux_acl
+linux permissions: text mode representation of 0,---,linux_acl
+linux permissions: text mode representation of 1,--x,linux_acl
+linux permissions: text mode representation of 2,-w-,linux_acl
+linux permissions: text mode representation of 3,-wx,linux_acl
+linux permissions: text mode representation of 4,r--,linux_acl
+linux permissions: text mode representation of 5,rw-,linux_acl
+linux permissions: text mode representation of 6,r-w,linux_acl
+linux permissions: text mode representation of 7,rwx,linux_acl
+# linux permissions: set uid execution,s,linux_acl
+# linux permissions: ,suid,linux_acl
+# linux permissions: ,setgid,linux_acl
+# linux permissions: ,,linux_acl
+# linux permissions: ,,linux_acl
+# linux permissions: ,,linux_acl
+# linux permissions: ,,linux_acl
 linux permissions: what is the numeric mode of ----------,000,linux_acl
 linux permissions: what is the numeric mode of ---------x,001,linux_acl
 linux permissions: what is the numeric mode of --------w-,002,linux_acl
@@ -510,8 +543,4 @@ linux permissions: what is the numeric mode of -rwxrwxr--,774,linux_acl
 linux permissions: what is the numeric mode of -rwxrwxr-x,775,linux_acl
 linux permissions: what is the numeric mode of -rwxrwxrw-,776,linux_acl
 linux permissions: what is the numeric mode of -rwxrwxrwx,777,linux_acl
-What command sets the default permissions mask?,umask,nix_commands,http://www.computerhope.com/unix/uumask.htm
-'umask -?' gives the symbolic representation?,S,nix_commands,http://www.computerhope.com/unix/uumask.htm
-What command changes permissions?,chmod,nix_commands,http://www.computerhope.com/unix/uchmod.htm
-[T/F] chmod preserves the setuid bit of a file if the file owner or group does not match.,F,nix_commands,http://www.computerhope.com/unix/uchmod.htm
 [T/F] The sticky bit prevents files from being deleted in a directory.,T,linux_acl,http://www.computerhope.com/unix/uchmod.htm

@@ -0,0 +1,21 @@
+linux filesystem hierarchy: contains esential command biniaries available for all users,bin,linux_fsh
+linux filesystem hierarchy: contains essential devices and interfaces for hardware components,dev,linux_fsh
+linux filesystem hierarchy: contains read-only user data and the majority of user utilities and applications,usr,linux_fsh
+linux filesystem hierarchy: contains the users' home directories,home,linux_fsh
+linux filesystem hierarchy: contains librares essential for the biniars in bin and sbin,lib,linux_fsh
+# linux filesystem hierarchy: ,sbin,linux_fsh
+# linux filesystem hierarchy: ,tmp,linux_fsh
+# linux filesystem hierarchy: ,var,linux_fsh
+# linux filesystem hierarchy: ,boot,linux_fsh
+# linux filesystem hierarchy: ,media,linux_fsh
+# linux filesystem hierarchy: ,proc,linux_fsh
+# linux filesystem hierarchy: /usr/?,bin,linux_fsh
+# linux filesystem hierarchy: /usr/?,man,linux_fsh
+# linux filesystem hierarchy: /usr/?,lib,linux_fsh
+# linux filesystem hierarchy: /usr/?,local,linux_fsh
+# linux filesystem hierarchy: /usr/?,sbin,linux_fsh
+# linux filesystem hierarchy: /usr/?,share,linux_fsh
+# linux filesystem hierarchy: /var/?,log,linux_fsh
+# linux filesystem hierarchy: /var/?,tmp,linux_fsh
+# linux filesystem hierarchy: ,,linux_fsh
+# linux filesystem hierarchy: ,,linux_fsh

@@ -0,0 +1,40 @@
+# linux networking: /etc/network/interfaces,,linux_networking
+# linux networking: route -n ,,linux_networking
+# linux networking: netstat -r,,linux_networking
+# linux networking: netstat -n,,linux_networking
+# linux networking: netstat -t,,linux_networking
+# linux networking: netstat -u,,linux_networking
+# linux networking: ip addr,,linux_networking
+# linux networking: ip link,,linux_networking
+# linux networking: ip -s,,linux_networking
+# linux networking: ip route,,linux_networking
+# linux networking: ,ping,linux_networking
+# linux networking: ,host,linux_networking
+# linux networking: ,dig,linux_networking
+# linux networking: ,nslookup,linux_networking
+# linux networking: ,traceroute,linux_networking
+# linux networking: ,tracepath,linux_networking
+# linux networking: ,tcptrace,linux_networking
+# linux networking: ,ss,linux_networking
+# linux networking: ss -,l,linux_networking
+# linux networking: ss -,t,linux_networking
+# linux networking: ss -,n,linux_networking
+# linux networking: ss -,p,linux_networking
+# linux networking: dhclient,,linux_networking
+# linux networking: /proc/sys/net/ipv4/ip_forward,0,linux_networking
+# linux networking: /proc/sys/net/ipv4/ip_forward,1,linux_networking
+# linux networking: losf,,linux_networking
+# linux networking: lsof,,linux_networking
+# linux networking: losf,,linux_networking
+# linux netwokring: ,netstat,nix_networking
+# linux networking: ,whois,nix_networking
+# linux networking: ,iwconfig,nix_networking
+# linux networking: ,route,nix_networking
+# linux networking: ,arp,nix_networking
+# linux networking: ,hostname,nix_networking
+# linux networking: ,iptables,nix_networking
+# linux networking: ,ifconfig,nix_networking
+which flag limits the number of ICMP packets: (unix) ping -[?] 1,c,unix_networking
+which flag specifies the size of the ICMP packets: (unix) ping -[?] 100,s,unix_networking
+which flag limits the number of ICMP packets: (unix) ping -[?] 1,c,unix_networking
+which flag specifies the size of the ICMP packets: (unix) ping -[?] 100,s,unix_networking

@@ -0,0 +1,11 @@
+linux proc: this file is a symlink to the binary which has been executed - proc/<pid>/[?],exe,linux_proc
+# linux proc: ,version,linux_proc
+# linux proc: ,modules,linux_proc
+# linux proc: ,loadavg,linux_proc
+# linux proc: ,meminfo,linux_proc
+# linux proc: ,cpuinfo,linux_proc
+# linux proc: proc/<pid>/[?],cmdline,linux_proc
+# linux proc: proc/<pid>/[?],environ,linux_proc
+# linux proc: proc/<pid>/[?],fd,linux_proc
+# linux proc: proc/<pid>/[?],cwd,linux_proc
+# linux proc: proc/<pid>/?,root,linux_proc

@@ -0,0 +1,84 @@
+what is the executable name for the bourne shell?,sh,nix_commands
+what is the executable name for the bourne again shell?,bash,nix_commands
+what is the executable name for the korn shell?,ksh,nix_commands
+what is the executable name for the z shell?,zsh,nix_commands
+what is the executable name for embeded systems / mobile shell?,busybox,nix_commands
+what is the executable name for the almquist shell?,ash,nix_commands
+what is the executable name for the debian almqist shell?,dash,nix_commands
+what is the executable name for the C shell?,csh,nix_commands
+what is the executable name for the TENEX C shell (turbo c shell)?,tcsh,nix_commands
+unix commands: copy a single file,cp,nix_commands
+unix commands: copy a folder (recursive),cp -R,nix_commands
+unix commands: move a file,mv,nix_commands
+unix commands: remove a file,rm,nix_commands
+unix commands: make a directory,mkdir,nix_commands
+unix commands: update the timestamp of a file,touch,nix_commands
+unix commands: create a zero byte file,touch,nix_commands
+unix commands: determine file type,file,nix_commands
+unix commands: display the detailed status and attributes of a file,stat,nix_commands
+unix commands: mount a filesystem,mount,nix_commands
+unix commands: show currently mounted a filesystems,mount,nix_commands
+unix commands: unmount a filesystem,umount,nix_commands
+unix commands: report file system disk space usage,df,nix_commands
+unix commands: estimate file space usage,du,nix_commands
+unix commands: search for files in a directory hierarchy,find,nix_commands
+unix commands: find the on disk location of a command,which,nix_commands
+unix commands: output the first part of files,head,nix_commands
+unix commands: output the last parts of a file,tail,nix_commands
+unix commands: concatenate files and output to standard out,cat,nix_commands
+unix commands: display a file interactively (not more),less,nix_commands
+unix commands: switch user,su,nix_commands
+unix commands: become superuser,su,nix_commands
+unix commands: execute a command as another user,sudo,nix_commands
+unix commands: display manuals,man,nix_commands
+unix commands: display local shell environment variables,set,nix_commands
+unix commands: display global environment variables,env,nix_commands
+# unix commands: ,grep,nix_commands
+unix commands: varient of grep utilizing extended regex,egrep,nix_commands
+unix commands: varient of grep utilizing lists of fixed strings,fgrep,nix_commands
+unix commands: varient of grep which reads all files under each directory,rgrep,nix_commands
+unix commands: remove secitions from each line of files/input,cut,nix_commands
+unix commands: sort lines of text files,sort,nix_commands
+unix commands: report or omit repeated lines,uniq,nix_commands
+unix commands: print newline word or byte counts for files,wc,nix_commands
+unix commands: compare files line by line,diff,nix_commands
+unix commands: stream editor for filtering and transforming text,sed,nix_commands
+unix commands: pattern scanning and processing language,awk,nix_commands
+# unix commands: ,echo,nix_commands
+# unix commands: ,export,nix_commands
+# unix commands: ,pwd,nix_commands
+# unix commands: ,ln,nix_commands
+# unix commands: ,apropos,nix_commands
+# unix commands: ,info,nix_commands
+# unix commands: ,whatis,nix_commands
+# unix commands: ,lsblk,nix_commands
+unix commands: locate/print disk device attributes (e.g. UUID),blkid,nix_commands
+# unix commands: ,debugfs,nix_commands
+# unix commands: ,chmod,nix_commands
+# unix commands: ,chgrp,nix_commands
+# unix commands: ,chown,nix_commands
+# unix commands: ,dd,nix_commands
+# unix commands: ,date,nix_commands
+# unix commands: ,hostname,nix_commands
+# unix commands: ,rmdir,nix_commands
+# unix commands: ,mkdir,nix_commands
+# unix commands: ,uname,nix_commands
+# unix commands: ,chattr,nix_commands
+# unix commands: ,xxd,nix_commands
+# unix commands: ,kill,nix_commands
+# unix commands: ,bg,nix_commands
+# unix commands: ,fg,nix_commands
+# unix commands: ,jobs,nix_commands
+# unix commands: ,runlevel,nix_commands
+# unix commands: ,who,nix_commands
+# unix commands: ,initctl,nix_commands
+The ____ shell with debian patch drops privileges upon initialization.,bash,nix_commands,See '-p' in man bash.
+The ____ command provides detailed metadata information on a file.,stat,nix_commands,man pages
+The ____ command provides information on the file type,file,nix_commands,man pages
+The ____ command places the most recently suspended job in the background,bg,nix_commands,http://www.computerhope.com/unix/ush.htm
+The ____ command brings the most recently backgrounded job to the foreground,fg,nix_commands,http://www.computerhope.com/unix/ush.htm
+The ____ command lists currently running jobs.,jobs,nix_commands,http://www.computerhope.com/unix/ush.htm
+What command sets the default permissions mask?,umask,nix_commands,http://www.computerhope.com/unix/uumask.htm
+'umask -?' gives the symbolic representation?,S,nix_commands,http://www.computerhope.com/unix/uumask.htm
+What command changes permissions?,chmod,nix_commands,http://www.computerhope.com/unix/uchmod.htm
+[T/F] chmod preserves the setuid bit of a file if the file owner or group does not match.,F,nix_commands,http://www.computerhope.com/unix/uchmod.htm

@@ -0,0 +1,23 @@
+what is the executable name for the bourne shell?,sh,nix_commands
+what is the executable name for the bourne again shell?,bash,nix_commands
+what is the executable name for the korn shell?,ksh,nix_commands
+what is the executable name for the z shell?,zsh,nix_commands
+what is the executable name for embeded systems / mobile shell?,busybox,nix_commands
+what is the executable name for the almquist shell?,ash,nix_commands
+what is the executable name for the debian almqist shell?,dash,nix_commands
+what is the executable name for the C shell?,csh,nix_commands
+what is the executable name for the TENEX C shell (turbo c shell)?,tcsh,nix_commands
+unix commands: display local shell environment variables,set,nix_commands
+shell globing: match anything,*,shell
+shell globing: match a single character,?,shell
+shell: this operator is used to append STDOUT to file,>>,shell
+shell: this operator is used to direct STDOUT to a file,>,shell
+shell: this operator is used to direct STDOUT to the next command's STDIN,|,shell
+shell: this operator is used to execute the command in the background,&,shell
+shell: file descriptor number for STDIN,0,shell
+shell: file descriptor number for STDOUT,1,shell
+shell: file descriptor number for STDERR,2,shell
+bash: representation of the current directory,.,shell
+bash: representation of the parent directory,..,shell
+# linux config: ,shells,linux_config
+The ____ shell with debian patch drops privileges upon initialization.,bash,nix_commands,See '-p' in man bash.

@@ -1,3 +1,2 @@
-# prompt,response,category
 #mux: unbind default prefix key,unbind C-b,tmux
 #mux: set tmux prefix key to a,set -g prefix C-a,tmux

@@ -0,0 +1,3 @@
+linux users: username of UID 0,root,special_linux_users
+linux users: group of GID 0,root,special_linux_users
+linux users: user which cannot write anything to the system,nobody,special_linux_users

@@ -1,12 +1,6 @@
 A ____ link points to a file inode.,hard,linux_admin,http://www.computerhope.com/jargon/h/hardlink.htm
 A ____ link points to a file via its path,symbolic,linux_admin,http://www.computerhope.com/jargon/s/symblink.htm
-The ____ shell with debian patch drops privileges upon initialization.,bash,nix_commands,See '-p' in man bash.
 The __ operator executes the second command only if the first command is successful.,&&,linux_admin,http://unix.stackexchange.com/a/187148
 The __ operator executes the second command if the first command fails.,||,linux_admin,http://unix.stackexchange.com/a/187148
 The ____ command moves positional parameters left by one on the number line.,shift,linux_admin,http://www.computerhope.com/unix/ush.htm
-The ____ command provides detailed metadata information on a file.,stat,nix_commands,man pages
-The ____ command provides information on the file type,file,nix_commands,man pages
-The ____ command places the most recently suspended job in the background,bg,nix_commands,http://www.computerhope.com/unix/ush.htm
-The ____ command brings the most recently backgrounded job to the foreground,fg,nix_commands,http://www.computerhope.com/unix/ush.htm
-The ____ command lists currently running jobs.,jobs,nix_commands,http://www.computerhope.com/unix/ush.htm
 The __ operator is a synonym for the '|' operator.,^,linux_admin,http://www.computerhope.com/unix/ush.htm

@@ -0,0 +1,32 @@
+# linux config: ,exports,linux_config
+# linux config: ,fstab,linux_config
+# linux config: ,ftpusers,linux_config
+# linux config: ,gateways,linux_config
+# linux config: ,gettydefs,linux_config
+# linux config: ,group,linux_config
+# linux config: ,host.conf,linux_config
+# linux config: ,hosts,linux_config
+# linux config: ,hosts.allow,linux_config
+# linux config: ,hosts.deny,linux_config
+# linux config: ,hosts.equiv,linux_config
+# linux config: ,hosts.lpd,linux_config
+# linux config: ,inetd.conf,linux_config
+# linux config: ,inittab,linux_config
+# linux config: ,issue,linux_config
+# linux config: ,ld.so.conf,linux_config
+# linux config: ,motd,linux_config
+# linux config: ,mtab,linux_config
+# linux config: ,mtools.conf,linux_config
+# linux config: ,networks,linux_config
+# linux config: ,passwd,linux_config
+# linux config: ,printcap,linux_config
+# linux config: ,profile,linux_config
+# linux config: ,protocols,linux_config
+# linux config: ,resolv.conf,linux_config
+# linux config: ,rpc,linux_config
+# linux config: ,securetty,linux_config
+# linux config: ,services,linux_config
+# linux config: ,shells,linux_config
+# linux config: ,syslog.conf,linux_config
+# linux config: ,shadow,linux_config
+# linux config: ,,linux_config

@@ -0,0 +1,8 @@
+# cidr
+what is the corresponding CIDR for this netmask: 255.255.255.255,/32,cidr
+what is the corresponding CIDR for this netmask: 255.255.255.254,/31,cidr
+what is the corresponding CIDR for this netmask: 255.255.255.252,/30,cidr
+what is the corresponding CIDR for this netmask: 255.255.255.248,/29,cidr
+#,/28,cidr
+#,/0,cidr
+what is the broadcast address for this network: 172.16.35.14/12,172.31.255.255,cidr

@@ -0,0 +1,3 @@
+#o which class does this IP address default to: 15.35.32.1,A,class_networks
+#o which class does this IP address default to: 129.32.98.54,B,class_networks
+#o whcih class does this IP address default to: 195.168.3.6,C,class_networks

@@ -17,9 +17,6 @@ how many bytes is the CRC in an ethernet frame?,4,ethernet
 [T/F] if ether[12:2] > 0x0600 it is an Ethernet II frame,T,ethernet
 #he total maximum size of an Ethernet II or 802.3 frame in bytes: ????,1518,ethernet
 #he maximum payload size of an Ethernet II or 802.3 frame in bytes: ????,1500,ethernet
-#he minimum frame size of an Ethernet II or 802.3 frame in bytes: ??,64,etherent
-
-# broadcast/collision domains
 [T/F] a router sends broadcast frames to other networks by default,F,ethernet
 [T/F] a router does not send broadcast frames to other networks by default,T,ethernet
 [T/F] VLANs are used to separate broadcast domains,T,ethernet
@@ -27,3 +24,5 @@ VLAN ids range is from 1-????,4095,ethernet
 A hub is considered a layer [?] device because it simply replicates waveforms,1,ethernet 
 A switch is considered a layer [?] device,2,ethernet
 A router is considered a layer [?] device,3,ethernet
+what is the length of an ethernet header: ? bytes,14,networking
+bpf shortcut for matching multicast addressed ethernet frames: ether [?],multicast,packet_capture

@@ -0,0 +1,10 @@
+ICMP TTL=64,*nix,fingerprinting
+ICMP TTL=128,windows,fingerprinting
+ICPM TTL=255,solaris,fingerprinting
+Linux TCP TTL=,64,fingerprinting
+FreeBSD TCP TTL=,64,fingerprinting
+Cisco ICMP TTL=,254,fingerprinting
+OS X ICMP TTL=,64,fingerprinting
+Windows 10 TTL=,64,fingerprinting
+Windows 7/XP/Vista TTL =,128,fingerprinting
+OpenBSD ICMP TTL=,255,fingerprinting

@@ -0,0 +1,29 @@
+unix flags: man -[?] <search term> # find term in descriptsion of man pages,k,flags
+unix flags: ls -[?] # show all files including hidden files,a,flags
+# unix flags: ls -[?] #,l,flags
+# unix flags: ls -[?] #,r,flags
+# unix flags: ls -[?] #,t,flags
+# unix flags: ls -[?] #,i,flags
+unix flags: touch -[?] <reference file> FILE # use the reference file's times instead of the current time,r,flags
+unix flags: touch -[?] FILE # only modify the access time of the file,a,flags
+unix flags: touch -[?] FILE # only modify the modified time of the file,m,flags
+unix flags: touch -[?] STAMP FILE # use supplied timestamp instead of current time,t,flags
+# unix flags: find
+# unix flags: find
+# unix flags: find
+# unix flags: grep -r
+# unix flags: grep -R
+# unix flags: grep -E
+# unix flags: grep -F
+# unix flags: uniq -c
+# unix flags: sort -n
+# unix flags: wc -l
+# unix flags: kill -STOP <pid>
+# unix flags: kill -CONT <pid>
+# unix flags: kill -9 <pid>
+# unix flags: ps -a
+# unix flags: ps -u
+# unix flags: ps -x
+# unix flags: ps -e
+# unix flags: ps -f
+# unix flags: who -r

@@ -1,42 +1,16 @@
-# cidr
-what is the corresponding CIDR for this netmask: 255.255.255.255,/32,cidr
-what is the corresponding CIDR for this netmask: 255.255.255.254,/31,cidr
-what is the corresponding CIDR for this netmask: 255.255.255.252,/30,cidr
-what is the corresponding CIDR for this netmask: 255.255.255.248,/29,cidr
-#,/28,cidr
-#...
-#...
-#,/0,cidr
-
-#o which class does this IP address default to: 15.35.32.1,A,class_networks
-# more A questions...
-#o which class does this IP address default to: 129.32.98.54,B,class_networks
-# more B questions...
-#o whcih class does this IP address default to: 195.168.3.6,C,class_networks
-# more C questions...
-
-what is the broadcast address for this network: 172.16.35.14/12,172.31.255.255,cidr
-# lots more of these need written, like 50 of them just so we dont see the same every time
-
-# middle fragment
 [T/F] if ip[6] & 0x02 = 0x02 and ip[6:2] & 0x1fff != 0 then this is a middle fragment,T,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0x02 and ip[6:2] & 0x1fff != 0 then this is a whole packet,F,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0x02 and ip[6:2] & 0x1fff != 0 then this is the first fragment,F,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0x02 and ip[6:2] & 0x1fff != 0 then this is the last fragment,F,ip_fragmentation
-# first fragment
 [T/F] if ip[6] & 0x02 = 0x02 and ip[6:2] & 0x1fff = 0 then this is a middle fragment,F,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0x02 and ip[6:2] & 0x1fff = 0 then this is a whole packet,F,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0x02 and ip[6:2] & 0x1fff = 0 then this is the first fragment,T,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0x02 and ip[6:2] & 0x1fff = 0 then this is the last fragment,F,ip_fragmentation
-# last fragment
 [T/F] if ip[6] & 0x02 = 0 and ip[6:2] & 0x1fff != 0 then this is a middle fragment,F,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0 and ip[6:2] & 0x1fff != 0 then this is a whole packet,F,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0 and ip[6:2] & 0x1fff != 0 then this is the first fragment,F,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0 and ip[6:2] & 0x1fff != 0 then this is the last fragment,T,ip_fragmentation
-# whole packet
 [T/F] if ip[6] & 0x02 = 0 and ip[6:2] & 0x1fff = 0 then this is a middle fragment,F,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0 and ip[6:2] & 0x1fff = 0 then this is a whole packet,T,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0 and ip[6:2] & 0x1fff = 0 then this is the first fragment,F,ip_fragmentation 
 [T/F] if ip[6] & 0x02 = 0 and ip[6:2] & 0x1fff = 0 then this is the last fragment,F,ip_fragmentation 
-
-

@@ -0,0 +1,44 @@
+linux init: runlevel for multi user mode (traditionally no networking),2,linux_init
+linux init: runlevel for extended multi user mode (networking and services started),3,linux_init
+# linux netwokring: ,netstat,nix_networking
+# linux networking: ,whois,nix_networking
+# linux networking: ,iwconfig,nix_networking
+# linux networking: ,route,nix_networking
+# linux networking: ,arp,nix_networking
+# linux networking: ,hostname,nix_networking
+# linux networking: ,iptables,nix_networking
+# linux networking: /etc/network/interfaces,,linux_networking
+# linux networking: route -n ,,linux_networking
+# linux networking: ,ifconfig,nix_networking
+# linux networking: netstat -r,,linux_networking
+# linux networking: netstat -n,,linux_networking
+# linux networking: netstat -t,,linux_networking
+# linux networking: netstat -u,,linux_networking
+# linux networking: ip addr,,linux_networking
+# linux networking: ip link,,linux_networking
+# linux networking: ip -s,,linux_networking
+# linux networking: ip route,,linux_networking
+# linux networking: ,ping,linux_networking
+# linux networking: ,host,linux_networking
+# linux networking: ,dig,linux_networking
+# linux networking: ,nslookup,linux_networking
+# linux networking: ,traceroute,linux_networking
+# linux networking: ,tracepath,linux_networking
+# linux networking: ,tcptrace,linux_networking
+# linux networking: ,ss,linux_networking
+# linux networking: ss -,l,linux_networking
+# linux networking: ss -,t,linux_networking
+# linux networking: ss -,n,linux_networking
+# linux networking: ss -,p,linux_networking
+# linux networking: dhclient,,linux_networking
+# linux networking: /proc/sys/net/ipv4/ip_forward,0,linux_networking
+# linux networking: /proc/sys/net/ipv4/ip_forward,1,linux_networking
+# linux networking: losf,,linux_networking
+# linux networking: lsof,,linux_networking
+# linux networking: losf,,linux_networking
+what is the length of an ethernet header: ? bytes,14,networking
+what is the lenght of an IPv4 header without options: ? bytes,20,networking
+what is the lenght of an TCP header without options: ? bytes,20,networking
+which flag limits the number of ICMP packets: (unix) ping -[?] 1,c,unix_networking
+which flag specifies the size of the ICMP packets: (unix) ping -[?] 100,s,unix_networking
+which flag limits the number of ICMP packets: (win) ping -[?] 1,n,win_networking

@@ -1,6 +1,4 @@
 [T/F] A traffic capture library typically requires administrative privileges to be instlled.,T,packet_capture
-
-# tcpdump
 which flag prints the link-level header on each dump line: tcpdump -[?] -i eth0,e,packet_capture
 which flag prevents dns resolution: tcpdump -[?],n,packet_capture
 which flag specifies the interface to sniff on: tcpdump -[?] eth0,i,packet_capture
@@ -13,28 +11,12 @@ which flag prints each packet in hexadecimel: tcpdump -[?],x,packet_capture
 which flag prints each packet in hexadecimel and ASCII: tcpdump -[?],X,packet_capture
 which flag prevents both dns resolution and port resolution: tcpdump -[??],nn,packet_capture
 which interface name is a shortcut for all interfaces: tcpdump -i [?],any,packet_capture
-# limit to number of packets,c,
-# filters: dst
-# filters: src
-# filters: net
-# filters: portrange
-# filters: port
-# number of bytes,-s 100, 
-# all data in packet: -s [?], 0
-
-# wireshark
 [T/F] Wireshark can sniff packets on the loopback interface on Windows?,F,packet_capture 
-# specifiy eth[0] = ff:ff:ff
-
-# tshark
 which flag lists the interfaces available for sniffing: tshark -[?],D,packet_capture
 which flag specifies the file to write to: tshark -w [?],w,packet_capture
 which flag specifies the file to read from: tshark -[?] file,r,packet_capture
-
-# bpf 
 #he bpf abbreiviation for Ethernet portion of a frame,ether,packet_capture
 #he bpf abbreviation for the Internet Protocol v4 portion of a frame,ip,packet_capture
-#he bpf abbreviation for an ICMP portion of a frame,icmp,pacet_capture
 which flag will print the compiled bpf filter: tcpdump -[?] ether[12:2],d,packet_capture
 bpf compiled filter which loads a full word (4 bytes) into the default register,ld,packet_capture
 ether[0:?] what value will result in an ld bpf compiled filter,4,packet_capture
@@ -54,4 +36,4 @@ bpf shortcut for matching either source or destination MAC address: ether [?] <M
 bpf shortcut for matching source MAC address: ether [?] <MAC>,src,packet_capture
 bpf shortcut for matching destination MAC address: ether [?] <MAC>,dst,packet_capture
 bpf shortcut for matching multicast addressed ethernet frames: ether [?],multicast,packet_capture
-
+which flag specifies the interface the ICMP packet will exit: (unix) ping -[?] eth0,i,packet_capture

@@ -1,3 +1,1 @@
-
-# ping
 which flag limits the number of ICMP packets: (win) ping -[?] 1,n,win_networking

@@ -0,0 +1,7 @@
+windows processes: System Process (pid 4) - Session Manager = [?].exe,smss,windows_processes
+windows processes: Windows Subsystem - [?].exe,csrss,windows_processes
+windows processes: Windows Initialization - [?].exe,winint,windows_processes
+windows processes: Service Control Manager - [?].exe,services,windows_processes
+windows processes: Local Security Authentication Server - [?].exe,lsass,windows_processes
+windows processes: Local Session Manager - [?].exe,lsm,windows_processes
+windows processes: Login Process - [?].exe,winlogon,windows_processes

@@ -0,0 +1,18 @@
+# windows cmd: ,whoami,windows_cmd
+# windows cmd: ,hostname,windows_cmd
+# windows cmd: ,ver,windows_cmd
+# windows cmd: ,systeminfo,windows_cmd
+# windows cmd: ,date /t,windows_cmd
+# windows cmd: ,time /t,windows_cmd
+# windows cmd: ,type,windows_cmd
+# windows cmd: ,echo,windows_cmd
+# windows cmd: ,more,windows_cmd
+# windows cmd: ,start,windows_cmd
+# windows cmd: ,sort,windows_cmd
+# windows cmd: ,cls,windows_cmd
+# windows cmd: ,ipconfig,windows_cmd
+# windows cmd: ,,windows_cmd
+# windows cmd: ,,windows_cmd
+# windows cmd: ,,windows_cmd
+# windows cmd: ,,windows_cmd
+# windows cmd: ,,windows_cmd

@@ -1,4 +1,3 @@
-# prompt,response,category
 windows releases: Windows 10 = NT [?],10.0,windows_releases
 windows releases: Windows Server 2016 = NT [?],10.0,windows_releases
 windows releases: Windows 8.1 = NT [?],6.3,windows_releases
@@ -34,55 +33,3 @@ windows releases: NT 5.0 = Windows [?],2000,windows_releases
 windows releases: 4.10 = Windows [?],98,windows_releases
 windows releases: 4.9 = Windows [?],ME,windows_releases
 windows releases: 4.00 = Windows [?],95,windows_releases
-
-# ephermeral port ranges
-# xp > 1024
-# 6.0 > 49K+
-
-windows processes: System Process (pid 4) - Session Manager = [?].exe,smss,windows_processes
-windows processes: Windows Subsystem - [?].exe,csrss,windows_processes
-windows processes: Windows Initialization - [?].exe,winint,windows_processes
-windows processes: Service Control Manager - [?].exe,services,windows_processes
-windows processes: Local Security Authentication Server - [?].exe,lsass,windows_processes
-windows processes: Local Session Manager - [?].exe,lsm,windows_processes
-windows processes: Login Process - [?].exe,winlogon,windows_processes
-
-# win32k.sys
-# conhost.exe
-# tasklist /svc
-# ntdll.dll
-# ntoskernel.exe
-# .dll
-# .sys
-# driverquery (sysinternals?)
-# 0 kernel mode
-# 3 user mode
-# kmcs
-
-# windows cmd: ,whoami,windows_cmd
-# windows cmd: ,hostname,windows_cmd
-# windows cmd: ,ver,windows_cmd
-# windows cmd: ,systeminfo,windows_cmd
-# windows cmd: ,date /t,windows_cmd
-# windows cmd: ,time /t,windows_cmd
-# windows cmd: ,type,windows_cmd
-# windows cmd: ,echo,windows_cmd
-# windows cmd: ,more,windows_cmd
-# windows cmd: ,start,windows_cmd
-# windows cmd: ,sort,windows_cmd
-# windows cmd: ,cls,windows_cmd
-# windows cmd: ,ipconfig,windows_cmd
-# windows cmd: ,,windows_cmd
-# windows cmd: ,,windows_cmd
-# windows cmd: ,,windows_cmd
-# windows cmd: ,,windows_cmd
-# windows cmd: ,,windows_cmd
-
-# admin$ -> C:/Windows/system32
-# HKLM ==
-
-# HKLM\SOFTWARE\Microsoft"\Windows NT"\currentversion
-#   - BuildLabEx = 32 or 64 bit
-# HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall
-
-# sc config remote registry start=auto

@@ -1,293 +0,0 @@
-# prompt,response,category
-
-ICMP TTL=64,*nix,fingerprinting
-ICMP TTL=128,windows,fingerprinting
-ICPM TTL=255,solaris,fingerprinting
-
-Linux TCP TTL=,64,fingerprinting
-FreeBSD TCP TTL=,64,fingerprinting
-Cisco ICMP TTL=,254,fingerprinting
-OS X ICMP TTL=,64,fingerprinting
-Windows 10 TTL=,64,fingerprinting
-Windows 7/XP/Vista TTL =,128,fingerprinting
-OpenBSD ICMP TTL=,255,fingerprinting
-
-what is the executable name for the bourne shell?,sh,nix_commands
-what is the executable name for the bourne again shell?,bash,nix_commands
-what is the executable name for the korn shell?,ksh,nix_commands
-what is the executable name for the z shell?,zsh,nix_commands
-what is the executable name for embeded systems / mobile shell?,busybox,nix_commands
-what is the executable name for the almquist shell?,ash,nix_commands
-what is the executable name for the debian almqist shell?,dash,nix_commands
-what is the executable name for the C shell?,csh,nix_commands
-what is the executable name for the TENEX C shell (turbo c shell)?,tcsh,nix_commands
-
-unix commands: copy a single file,cp,nix_commands
-unix commands: copy a folder (recursive),cp -R,nix_commands
-unix commands: move a file,mv,nix_commands
-unix commands: remove a file,rm,nix_commands
-unix commands: make a directory,mkdir,nix_commands
-unix commands: update the timestamp of a file,touch,nix_commands
-unix commands: create a zero byte file,touch,nix_commands
-unix commands: determine file type,file,nix_commands
-unix commands: display the detailed status and attributes of a file,stat,nix_commands
-unix commands: mount a filesystem,mount,nix_commands
-unix commands: show currently mounted a filesystems,mount,nix_commands
-unix commands: unmount a filesystem,umount,nix_commands
-unix commands: report file system disk space usage,df,nix_commands
-unix commands: estimate file space usage,du,nix_commands
-unix commands: search for files in a directory hierarchy,find,nix_commands
-unix commands: find the on disk location of a command,which,nix_commands
-unix commands: output the first part of files,head,nix_commands
-unix commands: output the last parts of a file,tail,nix_commands
-unix commands: concatenate files and output to standard out,cat,nix_commands
-unix commands: display a file interactively (not more),less,nix_commands
-unix commands: switch user,su,nix_commands
-unix commands: become superuser,su,nix_commands
-unix commands: execute a command as another user,sudo,nix_commands
-unix commands: display manuals,man,nix_commands
-unix commands: display local shell environment variables,set,nix_commands
-unix commands: display global environment variables,env,nix_commands
-# unix commands: ,grep,nix_commands
-unix commands: varient of grep utilizing extended regex,egrep,nix_commands
-unix commands: varient of grep utilizing lists of fixed strings,fgrep,nix_commands
-unix commands: varient of grep which reads all files under each directory,rgrep,nix_commands
-unix commands: remove secitions from each line of files/input,cut,nix_commands
-unix commands: sort lines of text files,sort,nix_commands
-unix commands: report or omit repeated lines,uniq,nix_commands
-unix commands: print newline word or byte counts for files,wc,nix_commands
-unix commands: compare files line by line,diff,nix_commands
-unix commands: stream editor for filtering and transforming text,sed,nix_commands
-unix commands: pattern scanning and processing language,awk,nix_commands
-# unix commands: ,echo,nix_commands
-# unix commands: ,export,nix_commands
-# unix commands: ,pwd,nix_commands
-# unix commands: ,ln,nix_commands
-# unix commands: ,apropos,nix_commands
-# unix commands: ,info,nix_commands
-# unix commands: ,whatis,nix_commands
-# unix commands: ,lsblk,nix_commands
-unix commands: locate/print disk device attributes (e.g. UUID),blkid,nix_commands
-# unix commands: ,debugfs,nix_commands
-# unix commands: ,chmod,nix_commands
-# unix commands: ,chgrp,nix_commands
-# unix commands: ,chown,nix_commands
-# unix commands: ,dd,nix_commands
-# unix commands: ,date,nix_commands
-# unix commands: ,hostname,nix_commands
-# unix commands: ,rmdir,nix_commands
-# unix commands: ,mkdir,nix_commands
-# unix commands: ,uname,nix_commands
-# unix commands: ,chattr,nix_commands
-# unix commands: ,xxd,nix_commands
-# unix commands: ,kill,nix_commands
-# unix commands: ,bg,nix_commands
-# unix commands: ,fg,nix_commands
-# unix commands: ,jobs,nix_commands
-# unix commands: ,runlevel,nix_commands
-# unix commands: ,who,nix_commands
-# unix commands: ,initctl,nix_commands
-
-
-unix flags: man -[?] <search term> # find term in descriptsion of man pages,k,flags
-unix flags: ls -[?] # show all files including hidden files,a,flags
-# unix flags: ls -[?] #,l,flags
-# unix flags: ls -[?] #,r,flags
-# unix flags: ls -[?] #,t,flags
-# unix flags: ls -[?] #,i,flags
-unix flags: touch -[?] <reference file> FILE # use the reference file's times instead of the current time,r,flags
-unix flags: touch -[?] FILE # only modify the access time of the file,a,flags
-unix flags: touch -[?] FILE # only modify the modified time of the file,m,flags
-unix flags: touch -[?] STAMP FILE # use supplied timestamp instead of current time,t,flags
-# unix flags: find
-# unix flags: find
-# unix flags: find
-# unix flags: grep -r
-# unix flags: grep -R
-# unix flags: grep -E
-# unix flags: grep -F
-# unix flags: uniq -c
-# unix flags: sort -n
-# unix flags: wc -l
-# unix flags: kill -STOP <pid>
-# unix flags: kill -CONT <pid>
-# unix flags: kill -9 <pid>
-# unix flags: ps -a
-# unix flags: ps -u
-# unix flags: ps -x
-# unix flags: ps -e
-# unix flags: ps -f
-# unix flags: who -r
-
-shell globing: match anything,*,shell
-shell globing: match a single character,?,shell
-shell: this operator is used to append STDOUT to file,>>,shell
-shell: this operator is used to direct STDOUT to a file,>,shell
-shell: this operator is used to direct STDOUT to the next command's STDIN,|,shell
-shell: this operator is used to execute the command in the background,&,shell
-shell: file descriptor number for STDIN,0,shell
-shell: file descriptor number for STDOUT,1,shell
-shell: file descriptor number for STDERR,2,shell
-
-bash: representation of the current directory,.,shell
-bash: representation of the parent directory,..,shell
-
-linux filesystem hierarchy: contains esential command biniaries available for all users,bin,linux_fsh
-linux filesystem hierarchy: contains essential devices and interfaces for hardware components,dev,linux_fsh
-linux filesystem hierarchy: contains read-only user data and the majority of user utilities and applications,usr,linux_fsh
-linux filesystem hierarchy: contains the users' home directories,home,linux_fsh
-linux filesystem hierarchy: contains librares essential for the biniars in bin and sbin,lib,linux_fsh
-# linux filesystem hierarchy: ,sbin,linux_fsh
-# linux filesystem hierarchy: ,tmp,linux_fsh
-# linux filesystem hierarchy: ,var,linux_fsh
-# linux filesystem hierarchy: ,boot,linux_fsh
-# linux filesystem hierarchy: ,media,linux_fsh
-# linux filesystem hierarchy: ,proc,linux_fsh
-# linux filesystem hierarchy: /usr/?,bin,linux_fsh
-# linux filesystem hierarchy: /usr/?,man,linux_fsh
-# linux filesystem hierarchy: /usr/?,lib,linux_fsh
-# linux filesystem hierarchy: /usr/?,local,linux_fsh
-# linux filesystem hierarchy: /usr/?,sbin,linux_fsh
-# linux filesystem hierarchy: /usr/?,share,linux_fsh
-# linux filesystem hierarchy: /var/?,log,linux_fsh
-# linux filesystem hierarchy: /var/?,tmp,linux_fsh
-# linux filesystem hierarchy: ,,linux_fsh
-# linux filesystem hierarchy: ,,linux_fsh
-
-linux proc: this file is a symlink to the binary which has been executed - proc/<pid>/[?],exe,linux_proc
-# linux proc: ,version,linux_proc
-# linux proc: ,modules,linux_proc
-# linux proc: ,loadavg,linux_proc
-# linux proc: ,meminfo,linux_proc
-# linux proc: ,cpuinfo,linux_proc
-# linux proc: proc/<pid>/[?],cmdline,linux_proc
-# linux proc: proc/<pid>/[?],environ,linux_proc
-# linux proc: proc/<pid>/[?],fd,linux_proc
-# linux proc: proc/<pid>/[?],cwd,linux_proc
-# linux proc: proc/<pid>/?,root,linux_proc
-
-# linux permissions: directory,d,linux_acl
-# linux permissions: symbolic link,l,linux_acl
-# linux permissions: unix domain socket,s,linux_acl
-# linux permissions: named pipe,p,linux_acl
-# linux permissions: character device file,c,linux_acl
-# linux permissions: block device file,b,linux_acl
-# linux permissions: read,r,linux_acl
-# linux permissions: write,w,linux_acl
-# linux permissions: execute,x,linux_acl
-# linux permissions: no permissions,-,linux_acl
-linux permissions: numeric mode value of ---,0,linux_acl
-linux permissions: numeric mode value of --x,1,linux_acl
-linux permissions: numeric mode value of -w-,2,linux_acl
-linux permissions: numeric mode value of -wx,3,linux_acl
-linux permissions: numeric mode value of r--,4,linux_acl
-linux permissions: numeric mode value of r-x,5,linux_acl
-linux permissions: numeric mode value of rw-,6,linux_acl
-linux permissions: numeric mode value of rwx,7,linux_acl
-linux permissions: text mode representation of 0,---,linux_acl
-linux permissions: text mode representation of 1,--x,linux_acl
-linux permissions: text mode representation of 2,-w-,linux_acl
-linux permissions: text mode representation of 3,-wx,linux_acl
-linux permissions: text mode representation of 4,r--,linux_acl
-linux permissions: text mode representation of 5,rw-,linux_acl
-linux permissions: text mode representation of 6,r-w,linux_acl
-linux permissions: text mode representation of 7,rwx,linux_acl
-# linux permissions: set uid execution,s,linux_acl
-# linux permissions: ,suid,linux_acl
-# linux permissions: ,setgid,linux_acl
-
-# linux permissions: ,,linux_acl
-# linux permissions: ,,linux_acl
-# linux permissions: ,,linux_acl
-# linux permissions: ,,linux_acl
-
-# grub: $[?],root,linux_grub
-# grub: ,,linux_grub
-# grub: ,,linux_grub
-# grub: ,,linux_grub
-# grub: ,,linux_grub
-
-linux init: runlevel for halting the system,0,linux_init
-linux init: runlevel for single user mode,1,linux_init
-linux init: runlevel for multi user mode (traditionally no networking),2,linux_init
-linux init: runlevel for extended multi user mode (networking and services started),3,linux_init
-linux init: runlevel for user defined customization,4,linux_init
-linux init: runlevel for graphical mode,5,linux_init
-linux init: runlevel for reboot,6,linux_init
-
-systemd: the systemd equivilant to a runlevel is a [?],target unit,systemd
-
-# linux config: ,exports,linux_config
-# linux config: ,fstab,linux_config
-# linux config: ,ftpusers,linux_config
-# linux config: ,gateways,linux_config
-# linux config: ,gettydefs,linux_config
-# linux config: ,group,linux_config
-# linux config: ,host.conf,linux_config
-# linux config: ,hosts,linux_config
-# linux config: ,hosts.allow,linux_config
-# linux config: ,hosts.deny,linux_config
-# linux config: ,hosts.equiv,linux_config
-# linux config: ,hosts.lpd,linux_config
-# linux config: ,inetd.conf,linux_config
-# linux config: ,inittab,linux_config
-# linux config: ,issue,linux_config
-# linux config: ,ld.so.conf,linux_config
-# linux config: ,motd,linux_config
-# linux config: ,mtab,linux_config
-# linux config: ,mtools.conf,linux_config
-# linux config: ,networks,linux_config
-# linux config: ,passwd,linux_config
-# linux config: ,printcap,linux_config
-# linux config: ,profile,linux_config
-# linux config: ,protocols,linux_config
-# linux config: ,resolv.conf,linux_config
-# linux config: ,rpc,linux_config
-# linux config: ,securetty,linux_config
-# linux config: ,services,linux_config
-# linux config: ,shells,linux_config
-# linux config: ,syslog.conf,linux_config
-# linux config: ,shadow,linux_config
-# linux config: ,,linux_config
-
-linux users: username of UID 0,root,special_linux_users
-linux users: group of GID 0,root,special_linux_users
-linux users: user which cannot write anything to the system,nobody,special_linux_users
-
-# linux netwokring: ,netstat,nix_networking
-# linux networking: ,whois,nix_networking
-# linux networking: ,iwconfig,nix_networking
-# linux networking: ,route,nix_networking
-# linux networking: ,arp,nix_networking
-# linux networking: ,hostname,nix_networking
-# linux networking: ,iptables,nix_networking
-# linux networking: /etc/network/interfaces,,linux_networking
-# linux networking: route -n ,,linux_networking
-# linux networking: ,ifconfig,nix_networking
-# linux networking: netstat -r,,linux_networking
-# linux networking: netstat -n,,linux_networking
-# linux networking: netstat -t,,linux_networking
-# linux networking: netstat -u,,linux_networking
-# linux networking: ip addr,,linux_networking
-# linux networking: ip link,,linux_networking
-# linux networking: ip -s,,linux_networking
-# linux networking: ip route,,linux_networking
-# linux networking: ,ping,linux_networking
-# linux networking: ,host,linux_networking
-# linux networking: ,dig,linux_networking
-# linux networking: ,nslookup,linux_networking
-# linux networking: ,traceroute,linux_networking
-# linux networking: ,tracepath,linux_networking
-# linux networking: ,tcptrace,linux_networking
-# linux networking: ,ss,linux_networking
-# linux networking: ss -,l,linux_networking
-# linux networking: ss -,t,linux_networking
-# linux networking: ss -,n,linux_networking
-# linux networking: ss -,p,linux_networking
-# linux networking: dhclient,,linux_networking
-
-# linux networking: /proc/sys/net/ipv4/ip_forward,0,linux_networking
-# linux networking: /proc/sys/net/ipv4/ip_forward,1,linux_networking
-# linux networking: losf,,linux_networking
-# linux networking: lsof,,linux_networking
-# linux networking: losf,,linux_networking

@@ -1,4 +0,0 @@
-#common headers
-what is the length of an ethernet header: ? bytes,14,networking
-what is the lenght of an IPv4 header without options: ? bytes,20,networking
-what is the lenght of an TCP header without options: ? bytes,20,networking

@@ -1,5 +0,0 @@
-
-# ping
-which flag limits the number of ICMP packets: (unix) ping -[?] 1,c,unix_networking
-which flag specifies the size of the ICMP packets: (unix) ping -[?] 100,s,unix_networking
-which flag specifies the interface the ICMP packet will exit: (unix) ping -[?] eth0,i,packet_capture