We strongly recommend that the student spend some time getting familiar with tcpdump, Winddump or another network analyzer output before coming to class. That way, you will be ready for intrusion detection analysis when you complete the class. You will have 8 weeks to complete the practical and exam. Information will be emailed to you approximately 2 weeks before the conference and 1 week after with specific information pertaining to your certification. Perimeters inevitably disturb network traffic.
Misconfigured firewalls can be the perfect security filter where nothing gets in or out.
Students who are diligent and apply themselves to learn this material will be equipped to troubleshoot firewalls and VPNs with free tools like tcpdump for UNIX and Windump for Windows. Throughout the class, key concepts are illustrated with tcpdump network traces. Writing tcpdump Filters Learn to write tcpdump filters to collect or process selective tcpdump data. This is done using tcpdump filters. The filter language sometimes can be complicated to use if you want to select records that have particular bit settings.