Published By
Created On
6 Feb 2021 18:12:49 UTC
Transaction ID
Cost
Safe for Work
Free
Yes
LMTV LIVE | Top 6 Scariest Things (Mike Canney)
We all know that Halloween can be a scary time but for Network Analysts ever day can be scary, like outside attacks for data thief, deniability of service and access, Insider attacks on purpose or just not thinking users, network and security issues by the dozens and the list goes on and on.
LMTV will be spending time with a guy that faces scary every day and he lives in the packet and network scary house! He is Mike Canney, Viavi’s Principal Strategic Architect and troubleshooter.
Mike will be discussing the Top 6 Scariest Things he has heard from network engineers say!
• 6 Scariest Statements from Engineers on Halloween and every day!
o Network Map? Why do I need that? - Dependencies, WHAT?
o Application Baselines? I have no idea “what is normal”.
o Why do I need trace files?
o Can I capture everything using the switch SPAN function.
o Our company doesn’t have apps in the cloud
o With SDN, You don’t need packets for troubleshooting or visibility.
From this list we’ll discuss troubleshooting fundamentals, highlight common fails, and look at visibility strategies for monitoring the cloud and software defined networks.
We’ll also dive into how separating the data and control planes within an ACI or NSX environment impacts monitoring.
Over the past 24 years Mike has have helped hundreds of companies and Network Engineers identify and resolve their security, application and network performance issues. He has also developed and delivered lots of coursework which teaches engineers how to identify, remediate, and prevent network, security and application issues by analyzing traffic flows from the data plane up. Mike is a firm believed , like all professional Analysts in knowing what is normal – Response times (all layers), IP address spread, Dependencies, Real capture with TAPs for “REAL” and total access for real timing analysis.
Navigating Next-Generation Networks: Virtualization and SDN
Educational round table featuring performance monitoring experts and data center architects
Times:
Virtualization - November 2, 2016 @ 10:30 am CT/11:30 am ET
SDN - November 9, 2016 @ 10:30 am CT/11:30 am ET
Sign up link:
http://comms.viavisolutions.com/lp-cmp?cp=vi36902&th=std&lang=en&_ga=1.235561218.2085833355.1475864259
Key Takeaways
• Avoid "Top Monitoring Fails"
• Establish East-West traffic visibility
• Understand Cisco ACI and VMware NSX infrastructure and monitoring differences
• Ease integration with existing fabric
• Assess user experience and tackle visibility concerns
• Define key performance indicators (KPIs)
...
https://www.youtube.com/watch?v=IWSJBCK5H0o
LMTV will be spending time with a guy that faces scary every day and he lives in the packet and network scary house! He is Mike Canney, Viavi’s Principal Strategic Architect and troubleshooter.
Mike will be discussing the Top 6 Scariest Things he has heard from network engineers say!
• 6 Scariest Statements from Engineers on Halloween and every day!
o Network Map? Why do I need that? - Dependencies, WHAT?
o Application Baselines? I have no idea “what is normal”.
o Why do I need trace files?
o Can I capture everything using the switch SPAN function.
o Our company doesn’t have apps in the cloud
o With SDN, You don’t need packets for troubleshooting or visibility.
From this list we’ll discuss troubleshooting fundamentals, highlight common fails, and look at visibility strategies for monitoring the cloud and software defined networks.
We’ll also dive into how separating the data and control planes within an ACI or NSX environment impacts monitoring.
Over the past 24 years Mike has have helped hundreds of companies and Network Engineers identify and resolve their security, application and network performance issues. He has also developed and delivered lots of coursework which teaches engineers how to identify, remediate, and prevent network, security and application issues by analyzing traffic flows from the data plane up. Mike is a firm believed , like all professional Analysts in knowing what is normal – Response times (all layers), IP address spread, Dependencies, Real capture with TAPs for “REAL” and total access for real timing analysis.
Navigating Next-Generation Networks: Virtualization and SDN
Educational round table featuring performance monitoring experts and data center architects
Times:
Virtualization - November 2, 2016 @ 10:30 am CT/11:30 am ET
SDN - November 9, 2016 @ 10:30 am CT/11:30 am ET
Sign up link:
http://comms.viavisolutions.com/lp-cmp?cp=vi36902&th=std&lang=en&_ga=1.235561218.2085833355.1475864259
Key Takeaways
• Avoid "Top Monitoring Fails"
• Establish East-West traffic visibility
• Understand Cisco ACI and VMware NSX infrastructure and monitoring differences
• Ease integration with existing fabric
• Assess user experience and tackle visibility concerns
• Define key performance indicators (KPIs)
...
https://www.youtube.com/watch?v=IWSJBCK5H0o
Author
Content Type
Unspecified
video/mp4
Language
English
More from the publisher
Controlling
VIDEO
TIP T
tip-to-help-you-when-you-work-on-cables
...
https://www.youtube.com/watch?v=o2UdMU8dcZk
Transaction
Created
1 month ago
Content Type
Language
video/mp4
Controlling
VIDEO
FINDI
finding-the-rogue-dhcp-server-with
tons of info at www.thetechfirm.com
I am surprised that this exercise we do in class still proves to be helpful as well as quite popular.
Are there are many utilities out there to help find rogue servers, but why bother when you already have Wireshark installed. When you get comfortable with this exercise you can save some steps by creating a capture filter for just DHCP packets, or better yet, just DHCP server packets. As always with protocol analysis, there are many ways to do this exercise and this is just my preference since it forces me and the attendees to review the DHCP process as they go through the packets.
Rogue DHCP servers are becoming more common these days since a DHCP server can simply be a part of an application loaded on your computer. The introduction of tablets and smart phones that can provide hotspot support, are also DHCP servers. I even see more applications out there that turns your laptop into a WiFi hotspot so you can tether it to your tablet or smart phone.
Don't worry, I haven't forgotten the classic example of an employee who wants wireless access in a nearby conference room and simply connects the LAN port of his wireless router at his desk and starts dishing out IP addresses.
I like the added twist where I ask people to identify the legitimate DHCP based on paying attention to the story, not the packets. I can't tell you how many times I figure out a problem by going back to the user and having a conversation rather than going over the trace a million times.
I think people forget that Wireshark and protocol analysis is an exercise in forensics and you need a story for context and to make sense of the packets.
I have said many times that many times the answer comes from the story, not the packets.
Getting things to work better - bit by bit-
Linkedin Profile https://ca.linkedin.com/in/fortunat
Youtube Channel: https://www.youtube.com/user/thetechfirm
NetworkDataPedia Blog: https://www.networkdatapedia.com/blog/author/Tony-Fortunato
Network Computing Blog: https://www.networkcomputing.com/author/tony-fortunato
Linkedin Company URL: https://www.linkedin.com/company/the-tech-firm/
...
https://www.youtube.com/watch?v=uyvEa7Nh80A
Transaction
Created
1 month ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
UPDAT
updating-npcap
For those of you who are not aware, this is worth covering.
As of Wireshark 3.0 for Windows, Winpcap is replaced with npcap.
The first thing to check is that if you do not have any other applications that rely on Winpcap, make sure it is removed by checking under you installed programs section in your control panel. If you are not sure, then you probably don’t need it. Those who use other winpcap applications will know if its required.
On to npcap. I ran into an issue where a client was having some really weird behavior with Wireshark 3.0. Its important to note that this computer has never had issues with previous versions of Wireshark/WinPcap.
First thing I checked was to ensure that his work laptop doesn’t have any endpoint software or configuration that would interfere with the installation process. After confirming this, I focused on npcap since he would open trace files without issue.
I went to https://nmap.org/npcap and noticed the current version was different than the version that Wireshark installed. I figured I have nothing to lose, so we manually unins.........
Read the full free article at NetworkDataPedia Blog: https://www.networkdatapedia.com/knowledge-hub/author/Tony-Fortunato
when its posted
...
https://www.youtube.com/watch?v=mNoXxipWSKk
Transaction
Created
1 month ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
MEASU
measure-your-network-performance-with-jd
go get it at; http://www.gmwsoftware.co.uk
If you see my regular articles or videos, you will probably know that I'm a big fan of being able to measure my throughput.
At the end of the day, most people measure a network's health by its performance.
For example, your client doesn't care about terms like AP density, RSSI, SNR EIRP, blah blahhhhhh. They want to know 'how fast is it?'. After a network upgrade most people want to see a noticeable difference in their response time.
This is where throughput comes in. If you told your client that their throughput was 10Mbps and now its 45 Mbps, it would mean something. If you were to say that their application load time will go from 35 seconds to 5 seconds, that would surely mean something.
These are basic examples where I use pathtest, iperf or other utilities to measure performance. One of my biggest complaints is that many of these utilities don't have a log or a scheduler.
Of course I can use any one of the hundreds of schedulers available and can redirect the output t a text file, but that's just a pain.
You can imagine my surprise when I found this neat little windows utility that will run ping, upload, download and jitter tests to whatever server you want. It even comes with a upload/download server preconfigured.
Check it out, I think you will find it helpful.
...
https://www.youtube.com/watch?v=xyM-RzUlnog
Transaction
Created
1 month ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
SC CO
sc-congress-toronto-presentation
This is a presentation I did at the Toronto SC Congress
thanks goes to Robert Castel, Danny Conte and Tim O'neil for helping me put this together
Enjoy
Linkedin Profile http://ca.linkedin.com/in/fortunat
Lovemytool Blog: http://www.lovemytool.com/blog/tony-fortunato/
Youtube Channel: http://www.youtube.com/user/thetechfirm
...
https://www.youtube.com/watch?v=nD2XlwhkNdA
Transaction
Created
1 month ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
SKIP
skip-the-preamble-–-outdoor-enclosures
Another video and article in my direct, practical style.
In this case, I cover using the proper outdoor enclosure. It may sound obvious to some but unfortunately, I see way too many examples of people getting creative installing equipment outside.
I’ve seen technicians put equipment in plastic bags (yup), pails, cardboard boxes, cardboard boxes within a plastic bag, plastic coffee containers, oh I could easily go on…
In the video, I show you what happens when you leave a square plastic pail (you will have to watch the video to see where it's from) outside for 9 months.
...
https://www.youtube.com/watch?v=kw9kbAfnUQo
Transaction
Created
1 month ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
MORE
more-windows-wlan-commands
lots of info at www.thetechfirm.com
comments are disabled on videos older than 2 years
Here I go over the following windows netsh wlan commands
netsh wlan SHOW DRIVERS
netsh wlan SHOW INTERFACES
netsh wlan SHOW FILTERS
netsh wlan add filter permission=block ssid=bad networktype=infrastructure
netsh wlan add filter permission=denyall networktype=adhoc
netsh wlan SHOW FILTERS
netsh wlan delete filter permission=block ssid=bad networktype=infrastructure
netsh wlan delete filter permission=denyall networktype=adhoc
netsh wlan SHOW FILTERS
netsh wlan SHOW NETWORKS MODE=BSSID
netsh wlan disconnect
netsh wlan show interfaces
netsh wlan connect ssid=36_Birch name=36_Birch
netsh wlan show interfaces
netsh wlan export profile name="36_Birch"
netsh wlan add profile filename="Wireless Network Connection-36_Birch.xml"
netsh wlan SHOW all
...
https://www.youtube.com/watch?v=R5qSMM-WPKE
Transaction
Created
1 month ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
WHEN
when-ip-src-gives-you-more-in-wireshark
Many protocol analysts rely on filters to better see patterns and generally reduce the number of packets they need to sift through. One popular filter would be an IP filter. I
n Wireshark, when you are in the Packet List (top pane) and right click on an ip address you are creating a unidirectional filter to either, to or from that IP address. The difference would be if you right clicked on the source or destination column.
In this video I show you that there are scenarios where it may seem like your simple filter did not work when you see what looks like a bidirectional result. This is where your protocol knowledge needs to kick in.
I highlight ICMP in this example where the IP source address field (ip.src) is present in the IPV4 header. Unfortunately it is also present in the ICMP payload, which is normally helpful.
You can run into similar issues when running into DHCP and ARP for starters.
So the moral of the story is to don't assume the analyzer did something wrong or has a bug, Look into Packet Details (Middle Pane) and try to figure out if there is another field in the payload that meets your filtered criteria.
Enjoy
Lovemytool Blog: http://www.lovemytool.com/blog/tony-fortunato/
Network Computing Blog: http://www.networkcomputing.com/author-bio.asp?author_id=2332
Garland Technology Blog: http://www.garlandtechnology.com/blog/author/tony-fortunato
Youtube Channel: http://www.youtube.com/user/thetechfirm
NEW: http://www.thetechfirm.tv
Google Plus: http://plus.google.com/+Thetechfirmplus
Network Computing Articles: http://tinyurl.com/h8orh26
...
https://www.youtube.com/watch?v=WGWUtEt8VhE
Transaction
Created
1 month ago
Content Type
Language
video/mp4
English
Controlling
VIDEO
MAC A
mac-address-hunting-in-a-switched
I was working with a customer after a switch upgrade and we noticed some ports going off and online.
The natural reaction is to ask, “who is that and is it a problem”.
The new switches weren’t added to the management system, so I showed them how to do it manually and they were very grateful.
So in this video I walk you through how to determine the MAC, IP address and device name.
Here are some of the switch commands I used:
sh log
sh run int gig 2/0/13
sh mac address-table interface gig 2/0/13
sh arp | inc 0026.228e.8c85
conf t
int gig 2/0/13
description Cable E - Sues Desk
exit
exit
sh run int gig 2/0/13
Here is the Microsoft commands
nbtstat -A 10.44.10.132
Lastly, here are the various links to me;
Linkedin Profile http://ca.linkedin.com/in/fortunat
Lovemytool Blog: http://www.lovemytool.com/blog/tony-fortunato/
Youtube Channel: http://www.youtube.com/user/thetechfirm
Google Plus: http://plus.google.com/+Thetechfirmplus
Certified Wireshark and Fluke Instructor
...
https://www.youtube.com/watch?v=r-RuI8Avqhc
Transaction
Created
1 month ago
Content Type
Language
video/mp4
English