"Packet Capture Accuracy: Why Timestamps Matter More Than No Packet Loss" (Chris Greer)

I just wanted to take a few minutes to share the results of some of the "Capture Limit" testing I have been doing in my lab. These results were shared at Sharkfest Europe 2019 in Estoril, Portugal. The purpose of the session was to discuss the considerations of building your own capture appliance. I am not trying to promote any specific product; rather my goal is to demonstrate the limits where the accuracy of a capture on a laptop becomes questionable. 

During my performance testing, I found that there was a huge difference between capturing everything (no packet loss) and capturing everything correctly (packet timing is accurate). Before getting into the results of the testing, let me tell you a bit about my setup. 

"How AI Is Changing Human Thinking, Memory, and Culture" (by Paul W. Smith)

 

"Never underestimate the power of stupid people in large groups.” – George Carlin

Judging from the number of times we use the word “stupid” in our daily discourse, you might conclude that it’s on our minds a lot. It should come as no surprise that Merriam-Webster has numerous definitions for stupid. We have all vilified a stupid computer that loses our work, or one that insists on peppering us with stupid popups. Exasperating events, as well as those which hold no interest for us, happen much too often.

"Gartner's SOC Visibility Triad: Why NDR Is Cloud Security's Missing Piece"

 

It’s the holy trinity of enterprise security:

Gartner’s SOC Visibility Triad.

If you’re not familiar with the triad, here’s a bit of backstory: It comes from the Cold War-era idea of a “Nuclear Triad”—strategic bombers, intercontinental ballistic missiles, and submarines—that significantly reduced the risk of an enemy destroying all of one nation’s nuclear forces in one strike. In short, the Nuclear Triad was a cohesive mechanism that essentially prevented first strikes altogether. In much the same way, modern enterprises can deploy a triad of security measures to significantly reduce the risk of attackers operating on a network long enough to achieve their goals.

The Right Tool for the Job: Why Network Techs Should Never Rely on Just One Utility

This video was taken about 10+ years ago is still so relevant.

I cannot tell you how frustrating and surprising it is to run into technicians who are not willing to try new tools.

Do you know what's worse than someone with no tools?  Someone with the wrong tools!