let the packets be with you

geek00l and i will be conducting a two-day training titled structured network threat analysis and forensics at the next hitbsecconf2006 conference. this is a hands-on, highly-technical two day training that will teach you on how to detect, analyze, and perform incident response and handling. we will throw at you tons of packet capture files, and we will show you how to analyze them using Open Source tools. when we say analyze, we mean: looking for signs of attacks, determining the source and attack destination, and detecting targetted vulnerabilities. we will also show you how to build, deploy and manage NSM (Network Security Monitoring) architecture.

heh, this is gonna be a totally ghetto, old skool packet analysis training.

details of the training can be found here. the full training syllabus will be made available by next week. i will also create a wiki page a couple of months before the training, that if we have enough people registering for it.

4500 0028 b5cb 4000 fe01 b229 0102 0304 c0a8 0505

what is the length of the ip header in the capture above? how many bytes are in the ip header? if you want to know the answer by just looking at the dump, our training class will show you the way of the packet

listening to: queens of the stone age - in the fade