One of the toughest things to do when analyzing packets is documentation. I rely on my Tracefile Workbook to make notes when I need to reference a specific packet or event. Wireshark added a pretty cool feature to help with this process. It is called the Annotation feature. There are 2 different types of annotation; File and Packet. The File annotation allows you to make some notes regarding the trace file itself. A good example of items to note would be things like recording the test environment, use of span ports, what is being tested or finally a description of the issue. The Packet annotation allows you to make notes within specific packets. For example you might want to make a note on the packet that caused the application error, or mark the packet that represents when the client clicked submit. As I mentioned in the video, the key here is to make sure you use the proper file extension of pcapng to retain these notes. Enjoy ... https://www.youtube.com/watch?v=lPHTFj3Bscs

When I present, work and teach, I’m always spouting off some advice, observation or ranting about the obvious shortcuts I encounter. After a while I coined the term “My 2 bits” or “Tonys 2 bits” which sounds a bit better than “old guy ranting”… In this video I quickly cover off one of my pet peeves, damaged cables. The actual damage can range from broken RJ45 tabs, torn cladding and ever popular 2 cables connected and wrapped up with electrical tape. Layer 1 is obviously the foundation of your network performance. Why would you take, or allow someone to take a shortcut that would cause performance issues or an outage? Its pretty well that simple. I will agree that there are scenarios where you “have to get things going” to you build a cable or that marginal cable was the only one around. But PLEASE!!!!! Go back and replace it when you get a proper cable, don’t just say “I’ll come back..“. Last point is, if the RJ45 is damaged and you have a crimper, experience and cable test tool, sure replace the end, but if you are not sure as to what you’re doing you only have 2 alternatives: - Toss the cable - Practice and have someone who knows review and test your cable. Trust me its not as easy as you would think especially if you run into shielded cabling and outdoor cabling with gel with it. Let me know if enjoyed the video, and I will make more. Trust me I’ve got enough “2 bits” to easily gill a Gigabit. LOL.. See what I did there.. nevermind.. Tony Fortunato www.thetechfirm.com ... https://www.youtube.com/watch?v=5Ka2dLhWO9c

Many protocol analysts rely on filters to better see patterns and generally reduce the number of packets they need to sift through. One popular filter would be an IP filter. I n Wireshark, when you are in the Packet List (top pane) and right click on an ip address you are creating a unidirectional filter to either, to or from that IP address. The difference would be if you right clicked on the source or destination column. In this video I show you that there are scenarios where it may seem like your simple filter did not work when you see what looks like a bidirectional result. This is where your protocol knowledge needs to kick in. I highlight ICMP in this example where the IP source address field (ip.src) is present in the IPV4 header. Unfortunately it is also present in the ICMP payload, which is normally helpful. You can run into similar issues when running into DHCP and ARP for starters. So the moral of the story is to don't assume the analyzer did something wrong or has a bug, Look into Packet Details (Middle Pane) and try to figure out if there is another field in the payload that meets your filtered criteria. Enjoy Lovemytool Blog: http://www.lovemytool.com/blog/tony-fortunato/ Network Computing Blog: http://www.networkcomputing.com/author-bio.asp?author_id=2332 Garland Technology Blog: http://www.garlandtechnology.com/blog/author/tony-fortunato Youtube Channel: http://www.youtube.com/user/thetechfirm NEW: http://www.thetechfirm.tv Google Plus: http://plus.google.com/+Thetechfirmplus Network Computing Articles: http://tinyurl.com/h8orh26 ... https://www.youtube.com/watch?v=WGWUtEt8VhE

dont fall for these crooks. when in doubt call the CRA, go to your online account or visit their website https://www.canada.ca/en/revenue-agency.html ... https://www.youtube.com/watch?v=8yIc5UPxYII