June 01, 2001
Network Uptime - June 1, 2001
The Resource for Network Management and Protocol Analysis Professionals
A Newsletter of http://www.NetworkUptime.com
Issue 02 00 00 01 00 06 00 01
June 1, 2001
ISSN: 1529-6938
This Issue:
* Starting Delimiter - Certifications Revisited
* Surf Report - Microsoft and the Network
* Network Uptime Tip - Multiple Filtering Multiple Filtering
* Bonus Surf Report - Free IEEE Specifications! No, really!
* Ending Delimiter
====
Starting Delimiter
- Certifications Revisited -
====
Last month's Starting Delimiter, discussing the demise of the CNX and the rise of other network-related industry certifications, was met with some interest according to the email messages that followed. Many people were asking about the ex-CNX exam and the future of network certification, but others were debating the usefulness of certifications that most managers don't understand or don't recognize. Some folks commented that it was a waste of time to work towards a certification that didn't have the word 'Microsoft' or 'Cisco' in the title.
It was that last comment that confused me. Obviously, we all want to be as well-rounded as possible in our position. Indeed, the Cisco and Microsoft certifications are well known and most HR directors and Directors of Networking know what an MCSE or CCNA means. However, if you're interviewing for a security position, you'll be in much better shape if you lead with a CheckPoint certification than a MCSE. For networking, a CNX-like certification certainly puts you in a better position for a network management or network troubleshooting position than a CCNA or MCSE.
Don't misunderstand me, the MCSE and CCNA certifications are very important, especially in our current environment. I have my MCSE and I'm working towards the CCNA, but I know that I want my emphasis to be on network management and network analysis - a topic on which both the MCSE and CCNA is pretty weak. My CNX certification is the first one listed on my business card, and I'm more than happy to explain the position of the certification to anyone who asks.
And, for those of you who asked, the CNX really is dead. Gone. Vapor. History. Wildpackets and Network Associates have created new certifications that have 'migration' paths for CNX holders, and both companies are very interested in having you get their personal certification. WildPackets is touting their NAX certification as a 'vendor neutral' certification, which may be correct if only Cisco or Microsoft are considered 'vendors.' Since WildPackets and Network Associates make their own certification now (based on their own analysis tools), none of the new certifications can really be considered vendor _neutral_, can they?
Our Network Uptime PING last month ended with 68.8% interested in a tip-of-the-week newsletter, if we ever put one together. This was more than I was expecting, so I suppose I should complete the finishing touches on a new newsletter. Keep watching this space for more info.
The poll this month relates to certification. What will be your next certification? Let us know at http://www.NetworkUptime.com
We've also changed the publication date of Network Uptime. Network Uptime should arrive in your Inbox around the first of the month, rather than the middle. Although it probably won't mean much for most of you, it's going to help a lot on this end! We're also taking a end-of-the-school-year break with a 'light' version of Network Uptime. We'll be back next month with a new series of articles on network baselining for people who need to tell a story or make a simple point with seemingly complex network statistics.
- James 'Still CNX' Messer
Editor, Network Uptime
James@NetworkUptime.com
*** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
====
Network Uptime Surf Report
- Microsoft and the Network -
====
Some would say that learning the Microsoft way of networking is a lot like learning networking all over again. Some of it is goofy, some of it is tolerable, and some of it works really well. These links from Microsoft's TechNet should help you learn more about the way those Redmond people think.
Microsoft Network Traffic Analysis and Optimization
(Windows NT 3.5x and 4.0 and Windows 95)
http://www.microsoft.com/technet/winnt/winntas/tips/net405ef.asp
This very detailed Microsoft TechNet support document details DHCP traffic patterns, WINS, logon validation, network browser traffic, ARP, NETBIOS, data transfers, DNS, HTTP, domain controller traffic analysis, trust analysis, SMB information, and more! If you're managing a network that contains Microsoft clients or servers, you should spend some time reading through this BEFORE a problem occurs.
Network Analysis and Optimization Techniques
http://www.microsoft.com/technet/network/networka.asp
This TechNet document is actually a reprint of 'Network Performance Baselining' by Daniel J. Nassar. Although it's on Microsoft's TechNet, it has no Microsoft-specific information which makes it a good technical resource for any networking environment, not just Microsoft.
====
Network Uptime Analyzer Tip
- Multiple Filtering Multiple Filtering -
====
Ever need to do a REALLY complicated filter that was beyond the capabilities of your network analyzer? One example might be a filter that contains a large number of IP addresses. Even the most complex network analyzers only provide a finite number of boolean operators.
However, there's nothing keeping you from filtering on a filter on a filter! If you need more power than a single filter provides, then create multiple filters and process the filters in succession. If you had to filter 100 IP addresses, you could tackle the problem with ten separate filters!
One of the disadvantages of multiple filters is managing all of those numerous filters! Some network analysis tools have an easy method of using multiple filters, but others aren't as simple to manage. Almost all network analysis tools will have limitations on capture filters, since that process consumes an enormous amount of processing cycles and resources.
====
Bonus Surf Report
Free IEEE Specifications! No, really!
====
Have you ever wanted to peruse the IEEE specifications for your favorite topology, only to find that the specs cost mucho dinero? Although access to the latest specifications from the IEEE are still only available for a fee, specifications older than six months are free for the asking! You can now view and download Ethernet, Token Ring, Wireless and many other specifications in Adobe Acrobat format directly from the IEEE.
Read the IEEE announcement about the free specifications at:
http://standards.ieee.org/announcements/getieee802.html
Visit the 'Get IEEE 802' webpage at:
http://standards.ieee.org/getieee802/
*** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
====
Ending Delimiter
====
If you're reading a forwarded copy of Network Uptime, sign up for your own FREE subscription:
http://www.NetworkUptime.com/newsletter/
Promote Network Uptime! Add Network Uptime graphics and banners to your web page:
http://www.NetworkUptime.com/graphics
To unsubscribe from Network Uptime, use the above URL, or email majordomo@NetworkUptime.com with the following text in the body of the mssage:
unsubscribe NetworkUptime
For questions or comments, email us at James@NetworkUptime.com or visit the Network Uptime web page at http://www.NetworkUptime.com!
Posted by james_messer at June 1, 2001 02:42 PM

