The document summarizes a presentation about increasing the effectiveness of Wireshark network analysis software by tapping into network data. It discusses how to connect Wireshark to a network using different access technologies like hubs, switch port mirroring, and traffic access points (TAPs). TAPs are presented as the best option for permanent, secure access that avoids issues with span ports like packet loss and latency. The presentation provides an overview of different TAP products and configurations that can be used to easily tap network connections and capture full traffic for Wireshark analysis.

1. SHARKFEST '08 | Foothill College | March 31 - April 2, 2008 Increase Wireshark’s Effectiveness by Tapping your Network Data Wednesday, April 2, 2008 Chris Bihary Managing Director | Network Critical SHARK FEST '08 Foothill College March 31 - April 2, 2008

4. Network Monitoring Basics SHARKFEST '08 | Foothill College | March 31 - April 2, 2008 Three Basic Components with any Network Monitoring Solution

5. Network Monitoring Solutions Network Appliances ◊ Software Tools ◊ Network Tools Network Monitoring, Network Analyzers, Sniffers, Security, Compliance, Analysis, Lawful Interception, Forensics, Quality of Service, Data Leakage, Intrusion Detection, Intrusion Prevention, Bandwidth Shaping, Content Filtering T1-1 I’ve downloaded Wireshark…Now what? Instructor: Betty DuBois, Wireshark U T2-2 Analyzing the TCP/IP Resolution Processes - Port, Name, Route and Hardware Address Resolution Instructor: Laura Chappell, WSU T2-4 Trace File Analysis - Identifying Wire Latency, Client Latency and Server Latency Issues (Includes Charting Techniques) Instructor: Laura Chappell, WSU T1-3 Case Studies: Solving Network Performance Problems with Wireshark Instructors: Laura Chappell, WSU and Loris Degioanni, CTO, CACE Technologies T1-3 Case Studies: Solving Network Performance Problems with Wireshark Instructors: Laura Chappell, WSU and Loris Degioanni, CTO, CACE Technologies T1-10 Expose VOIP Problems Using Wireshark Instructor: Sean Walberg

7. Network Monitoring Solutions How do I access the data on my Network?

9. Access Technology is the Foundation

18. Tapping Technology Aggregating TAP Many-to-One or One-to-Many TAPs Aggregation or Regeneration V-Line (Virtually In-Line) By-pass TAPs

19. Aggregation / Many-to-One / One-to-Many CRITICALCONNEX™ MANY TO ONE 10/100 meg network connections 1000 meg monitoring device

20. Router Switch Network Link Traffic with heartbeat Fail - over path V-Line (Virtually In-Line) By-Pass TAP

22. TAP Your Network for Wireshark

25. CriticalConneX ™ Modular Chassis CC1000: CriticalConneX 1U Modular Chassis, Four (4) Hot Swappable Slots, Dual AC Power Supplies CC1010: CriticalConneX 1U Modular Chassis, Four (4) Hot Swappable Slots, Single AC Power Supply CC1020: CriticalConneX 1U Modular Chassis, Four (4) Hot Swappable Slots, Dual AC Power Supplies, Aggregating Backplane Add –DC to the part number for -48vdc power supplies

26. CriticalConneX ™ Modular Chassis

27. CriticalConneX ™ Modular Chassis

28. CriticalConneX ™ Modular Chassis

30. Any Questions? ACCESS CAPTURE ANALYZE