![]() I got the certification because it was a somewhat low-hanging fruit. ![]() The exam is somewhat about Wireshark as a tool, but is very much more about how IP behavior works and strategies on finding the needle in the haystack. ![]() The cert itself hasn't helped my career in terms of recognition, nor do I expect it to in the near future, but the skill gained from it definitely is without question. Studying for the cert will at the very least help you become familiar with normal / abnormal traffic patterns if your packet-analysis-fu is relatively weak, but if you already have a lot of experiencing dealing with traces and finding blondes and brunettes within TCP streams, then the effort probably won't really help much. It helped me become aware of some features within the tool and ways of utilizing it which I wasn't previously aware of and also provided stronger reinforcement of traffic protocol knowledge. I learned new stuff, and that's a good book.
0 Comments
Leave a Reply. |