PaulDotCom Security Weekly - Episode 28 - May 18, 2006
Live from the PaulDotCom Security Weekly Studio....
This episode was also broadcast over SkypeCast, so look for us each week when we record. It will also be announced in our IRC chatroom #pauldotcom on Freenode (irc.freenode.net).
- Sponsored by Core Security, listen for the discount code at the end of the show
- Sponsored by Syngress, be the first to post the answer to the question at the end of the show and win a free book!
- Sponsored by The SANS Institute, listen to the discount code for SANSFIRE this summer for 5% off this conference
- Please go update our frapper map!
- Help us get a cool logo and slogan! Go to our contest page and read all about how you can win free Snort gear and a one-year subscription to VRT rules. Sponsored by Sourcefire
- Full Show Notes
Hosts: Larry Pesce, Paul Asadoorian, "Twitchy"
Email: psw@pauldotcom.com
Direct Audio Download
Direct Video Download - Okay, so I lied, there is video this week!

Comments
I work with MGCP at work. Let's see....
From the Networking Working Group
RFC 2705 was the first one which is now considered obsolete.
RFC 3435 was the 2003 update which is the current 1.0 release
Media Gateway Control Protocol or Multimedia Gateway Control Protocol
is essentially a TDM to VoIP relay.
as far as two other other anes, i only know it as either Media Gateway Control Protocol or Multimedia Gateway Control Protocol. Some people talk about it in terms of a Media Gateway and User Agent but those are components. I mostly just know it as "the current big fucking headache"
Posted by: reid | May 20, 2006 12:20 PM
oh hey, and the first Jet Li movie that IMDB has is from 1982, The Shaolin Temple, shot in Singapore.
Posted by: reid | May 20, 2006 12:24 PM
For Christian's question about DNS servers, watch Dan Kaminsky's talk from Shmoocon 2006 (http://www.shmoocon.org/2006/presentations.html) where he discusses the work he has done identifying ALL DNS servers on the Internet and using that information to find out a good estimate of how many people have been infected by the Sony rootkit. It is an excellent talk. Take a look at his personal site (http://www.doxpara.com/) and the site for his site for graphing the Internet (http://www.opte.org/). I'm not sure if he makes the information available for all those DNS servers, but you could always e-mail him directly and ask.
-jhs
www.johnhsawyer.com
Posted by: John H. Sawyer | May 20, 2006 06:48 PM
Jet Li Question:
Jet Li's first movie was Shaolin Temple, shot in Hong Kong, in 1979.
Posted by: Mark Sheppard | May 21, 2006 09:59 AM
MGCP was defined in RFCs 2705 & 3435. It is also know as H.248 and Megaco via http://searchnetworking.techtarget.com/sDefinition/0,,sid7_gci817224,00.html
Posted by: Kirk | May 21, 2006 11:31 PM
I'm not so sure abou the Megaco and H.248 naming. Don't get me wrong, it's also known by those, but they aren't the things actually defined in either the 2705 or the 3435 spec. Megaco is defined in a different IETF spec altogether.
Posted by: reid | May 22, 2006 02:29 PM