#WIRESHARK CERTIFICATION PACKET ANALYSIS HOW TO#
#WIRESHARK CERTIFICATION PACKET ANALYSIS PLUS#

How do you deal with high traffic environments?.What’s the best way to find “the gem” buried in about 400.000 of packets in your trace files?.What external tools are available for Wireshark, and what can they be used for?.How would you handle a problem that happens only once every 24 hours?.These are some example questions I had before I started studying:

#WIRESHARK CERTIFICATION PACKET ANALYSIS HOW TO#

How to detect security-related events from well-known attacks that are floating around the internet.Analyzing VoIP and wireless performance.

#WIRESHARK CERTIFICATION PACKET ANALYSIS PLUS#

How to work with the Wireshark display, capture filters, coloring traffic, and marking/deleting packets, plus how to decrypt SSL traffic and RADIUS.

The book contains real-life examples of troubleshooting issues and how they eventually were resolved – a nice read.

For example, what happens when TCP synchronizes? Or, what TCP options will be used if different values between both endhosts are “advertised”?

You learn basic and advanced TCP protocol usage.

Even if you think you know these protocols, it is worth going through the materials.

If you have some protocol knowledge (ARP, FTP, SMTP, POP3, HTTP, DHCP, etc.), you can easily go through some chapters.

What is the best place in the network to place the network analyzer?.

This is a very good way for you to learn how Wireshark works.

The materials come with example trace files that are also used in the book.

Learning how to use advanced I/O graphs and spotting QoS issues makes life a lot easier. For example, from one graph that you can pull out of a 20K packet dump, you can learn how to spot window size problems. You will learn basic and advanced usage of Wireshark.

Depending on your knowledge level, the books will be easy to go through.

After all, it makes you a better engineer. If you ask me, it is definitely worth it. Is it worth ordering these books and studying for the WCNA certification?

The exam prep guide ships with a CD-ROM containing practice questions.

Wireshark Certified Network Analyst Exam prep guide Īll of these materials can be found at the Wireshark University site. I ordered both the study and exam preparation guides.

Wireshark Certified Network Analyst Study guide.

The WCNA prerequisites and materials that can be used are listed below: Having completed the WCNA certification exam recently, I thought it would be worth writing about for others that might consider studying for it. If you have listened to the Packet Pushers Podcast Show 108 with Gerald Combs, you know something about the WCNA program already. To obtain the WCNA certification you need to pass a single written exam. The Wireshark Certification Program strives to test a candidate’s knowledge and ability to troubleshoot, optimize and secure a network based on evidence found by analyzing traffic captured with the world’s most popular and widely-deployed analyzer, Wireshark.

Wireshark certification packet analysis