>From my experience, there is nothing inherently special about
learning how to use a sniffer in itself. You are learning how different
protocols work, and the sniffer just lets you see that. Learning a sniffer
should just mean, "I know which buttons to click to get X, Y, Z kinds of
data". Understanding protocols means you can discern what X, Y, Z data is
doing and what it means in the big picture. As you can see, one should
value the latter, but too many instantly proclaim the former is more
important.
Not to say you are not doing that, you are doing precisely what
you should be doing, really learning tcp/ip. Ironically, if half the
people who claimed on their resume "TCP/IP Knowledge", you would not need
the presupposed claim of "Experience with Sniffer Pro". Of course, it does
not just have to be TCP/IP, it can go down to many different layers,
application, data link, etc. Eh, silly HR will be silly HR. I should
write a web page about "How to hire the right IT people for dummies. (HR)"
As for your move to become a jack of all trades, master of
none. Back in the day that was the coined term. I strongly disagree with
it, and I think people can easily "dual-class" themselves into excellent
multi-versed individuals. (dual class is an ad&d term, you can actually
become a jack of all trades, master of many). Too bad you probably will
not get paid double, even if you really should. :)
As for learning packet capture analysis, pick your favorite
protocol of the day, read RFCs on it, practice using it while sniffing
yourself (no pun intended), and follow the packets.
At 01:03 PM 10/25/01 -0400, Buri, Heather L. wrote:
>They have really been good at explaining how to analyze a packet trace. I
>already knew how to do a basic capture, but analysis was another story. I
>just thought I would mention these in case anyone else out there was in a
>situation like mine. Stuck in a job that won't pay for training, but
>wanting to learn packet capture analysis. I had not seen these particular
>books mentioned previously.
>
>Heather Buri
-Carroll Kong
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=24131&t=24131
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
