LoveMyTool - Open Community for Network Management and Monitoring

SHARKFEST'12 is on! (by Joke Snelders)

 The 5th annual Sharkfest is on!

 

Sharkfest'12 will be held from June 24 till June 27 at University of California in Berkeley.
Let me give you ten reasons, why you should ask your boss for a ticket to Sharkfest'12:)

one Two superb Keynotes on various aspects of network security by Cliff Stoll, author of The Cuckoo's Egg, and Steve Riley, a Technical Leader at Riverbed and well-known security guy.

Enjoy the various sessions, hands-on labs and case studies:
two daily hands-on labs, including: “Building an IPv6 Network” and “Spans & Mirrors & Taps, Oh My!”
three meet the Wireshark core developers in “Ask the Experts” forums
four case studies
five deep-diving into packet analysis

Get a great change to speak to Wireshark developers and devotees from all over the world during:
six welcome dinner
seven vendor night festivities
eight share knowledge with network and protocol analysis veterans, mavens and peers during coffee breaks

Enjoy the beautiful surroundings of UC Berkeley:
nine explore the Clark Kerr campus 

ten attend the presentation about cryptography by Larry Greenblatt.
He will be using Wireshark to sniff out an SSL handshake and explain why we are supposed to trust the ID cards sites present us with on the internet.
Click here to watch his video "Packets Don't Lie; Bob Loves Alice" at YouTube.

 

 See you at Sharkfest'12

 

Author Profile - My name is Joke (pronounced \yo-kə\ or Joan for those who do not speak Dutch). During the day, I work as a secretary for a non-profit organization providing assisted living for mentally handicapped people in the south of The Netherlands. In my spare time I like to use Wireshark. I find it interesting and necessary to monitor my home network to see what is going on. As a user I like to answer questions at the Wireshark Mailing List or Ask Wireshark.

What is in it for me? Well, I learn a great deal whenever I try to solve real-world problems. I am also a member of the NGN (the Dutch Network User's Group). I write articles about how to use Wireshark and the command line tools. And if there is still some spare time left, I like to go biking in the woods near my hometown with my husband and fellow geek.

 

Continue reading other exclusive posts by Joke Snelders »

Ask the Experts (Panel Discussion)

This presentation was recorded at the Sharkfest 2011, Wireshark Developer and User Conference, held at the Stanford University between June 13th and 16th.

" ... Bring your networking problems, issues, questions, dreams, etc. and have the high court of networking hear and address them! ... "

Panel Participants: Hansang Bae, Gerald Combs, Gianluca Varenni and Wireshark Core Developers

Continue viewing other Sharkfest videos »

Network Mystery #2 (by Betty DuBois)

This presentation was recorded at the Sharkfest 2011, Wireshark Developer and User Conference, held at the Stanford University between June 13th and 16th.

" ... In this session, Detective Betty DuBois will review one of the elusive network cases she has solved using Wireshark and Pilot. There will be plenty of forensics evidence provided, and lots of practical information to help you solve your own network mysteries. This session will be a deep dive into the "Case of the Slow Network". Betty will walk the attendees through how the data was captured (tshark & AirPcap), the methods used to isolate the problem (SMTP relay infection), and which users were infected ... "

Betty DuBois has been a networking Instructor and Consultant since 1997. Currently, Betty is a Wireshark University Instructor, and creator of the "Network Mystery" series of videos featured on the wireshark.org site, and network trainer/consultant for hire.

Right click to download the corresponding PowerPoint presentation.

Continue viewing other Sharkfest videos »

Wireshark in the Large Enterprise (by Hansang Bae)

This presentation was recorded at the Sharkfest 2011, Wireshark Developer and User Conference, held at the Stanford University between June 13th and 16th.

" ... Learn how to optimize use of the world's most popular network and protocol analyzer in a large enterprise from a master Wireshark veteran. ... "

Hansang Bae currently leads the Network/Application Performance Engineering Team, with direct responsibility for Packet Capture Infrastructure, at Citi. He brings a unique perspective with his broad knowledge of protocol analysis in a complex enterprise infrastructure.

Right click to download the corresponding PowerPoint presentation.

Continue viewing other Sharkfest videos »

Using Wireshark to Support the Application (by Tim Poth)

This presentation was recorded at the Sharkfest 2011, Wireshark Developer and User Conference, held at the Stanford University between June 13th and 16th.

This presentation will take an interactive look at a number of pcap files to show both interesting "network" issues as well as the technique used to find the problem. The files presented show situations that gave our users trouble, such as:

• Proxies injecting code to http cookies
• Spotting proxy log-in failures
• Unexpected client-side firewall failovers
• Non-intuitive ICMP packets as a result of slow DNS responses
• Peer-to-peer music downloads

Tim Poth currently works for Bentley Systems, Inc. as a Senior Priority Response Analyst primarily supporting ProjectWise, Bentley's document management system.

Right click to download the corresponding PowerPoint presentation and right click here to download the trace file.

Continue viewing other Sharkfest videos »

Troubleshooting Application Performance Issues (by Mike Canney)

This presentation was recorded at the Sharkfest 2011, Wireshark Developer and User Conference, held at the Stanford University between June 13th and 16th.

As network speeds continue to grow at an unprecedented rate, the need to be able to quickly analyze multi-Gigabyte sized trace files has become increasingly important. In this session, students will learn how to capture, monitor and analyze extremely large trace files to quickly resolve some of the most common application performance problems seen today.

Topics to be covered:
• How to quickly create a capture to disk appliance
• Using Pilot to go “back in time” for troubleshooting issues
• Using Pilot to filter and send only pertinent data to Wireshark
• Top Causes for application performance issues: Application Turns, TCP Window size, Inflight Data
• Using Wireshark Profiles to help troubleshoot SMB issues

Mike Canney, well-versed in multiple sniffer technologies, specializes in providing application and network performance consulting services: specifically Application Network-ability Assessments (ANA), network performance troubleshooting, and deep level packet analysis. Over the past 22 years, Mike has helped hundreds of companies identify and resolve their application and network performance issues. Mike has also developed courseware and taught engineers how to identify, remediate, and prevent network and application issues by analyzing traffic flows at the packet level. Mike has been a guest speaker at many industry trade shows (Networld Interop, Cisco Networkers, e.g.) throughout the United States on the topic of application performance analysis.

Right click to download the corresponding PowerPoint presentation.

Continue viewing other Sharkfest videos »

Using NetFlow to Analyze Your Network (by Chris White)

This presentation was recorded at the Sharkfest 2011, Wireshark Developer and User Conference, held at the Stanford University between June 13th and 16th.

Topics to be covered in this session include:
A. Introduction to NetFlow
- Flow export and collection
- Flow record format, types of data available via NetFlow
- Versions of NetFlow from different devices/vendors
B. Reporting based on NetFlow
- Accuracy, visibility
- Types of reports that can be run
C. Timing concerns with reporting across devices
D. Relationship to Packet Capture and Analysis

Chris White is Engineering Manager for the Cascade Business Unit of Riverbed Technology, focusing on development of the Cascade Profiler and Sensor product family.

Right click to download the corresponding PowerPoint presentation.

Continue viewing other Sharkfest videos »

Sharkfest'11 (by Joke Snelders)

Have you ever met 350 Happy Sharks?
No?
Then you were not at Sharkfest'11!

 

Wireshark devotees from all over the world travelled on June 13 to Stanford University in California to join the 4th annual edition of Sharkfest. They travelled a long way to learn as much as they could about Wireshark, their favorite tool, and to meet other members of the Wireshark community.
Thanks to the Sharkfest Coordinating Crew for another successful and educational event.

Network Mystery #1 (by Betty DuBois)

This presentation was recorded at the Sharkfest 2011, Wireshark Developer and User Conference, held at the Stanford University between June 13th and 16th.

" ... In this session, Detective Betty DuBois will review one of the elusive network cases she has solved using Wireshark and Pilot. There will be plenty of forensics evidence provided, and lots of practical information to help you solve your own network mysteries. This session will be a deep dive into the "Case of the Slow Network". Betty will walk the attendees through how the data was captured (tshark & AirPcap), the methods used to isolate the problem (SMTP relay infection), and which users were infected ... "

Betty DuBois has been a networking Instructor and Consultant since 1997. Currently, Betty is a Wireshark University Instructor, and creator of the "Network Mystery" series of videos featured on the wireshark.org site, and network trainer/consultant for hire.

Right click to download the corresponding PowerPoint presentation.

Continue viewing other Sharkfest videos »

Wireshark vs the Cloud (by Jasper Bongertz)

This presentation was recorded at the Sharkfest 2011, Wireshark Developer and User Conference, held at the Stanford University between June 13th and 16th.

" ... 'Cloud Computing' is aimed at reducing costs for server hardware, lessening power consumption and consolidating of a large number of underused, legacy systems into a few servers running a virtualization software like VMWare, Hyper-V or XEN. This presentation focuses on the challenges and the technical background of capturing network traffic, using the example of a VMWare vSphere virtualized environment where you can’t tell anymore on which specific hardware server the virtualized machine is actually being run. After an introduction to the underlying mechanisms of VMWare vSphere, various approaches and techniques to get to the packets you actually want will be demonstrated in a live environment – using Wireshark, of course! ... "

Jasper Bongertz is a Senior Technical Consultant at the Fast Lane Institute for Knowledge Transfer GmbH, an international training and services company. Jasper started working freelance in 1992 when he began studying computer science at the Technical University of Aachen, mainly in the area of database maintenance and performance tuning, database and web programming, computer networks, IT security and VMware. Jasper worked on countless network analysis projects with a total amount of about 1 TB of network data per year being processed, which resulted in the creation of a large training portfolio with a special focus on Wireshark. Jasper is a certified Sniffer Certified Professional (SCP), VMware Certified Professional (VCP3/4) and VMware Certified Instructor (VCI).

Right click to download the corresponding PowerPoint presentation.

Continue viewing other Sharkfest videos »