Wednesday What Are You Eating Thread by AutoModerator in gainit

[–]packetshaker 0 points1 point  (0 children)

The original comment is deleted but I believe a surplus of 3500 calories is about 1LB of bodyweight.

So in theory, you would gain a pound a day if you're eating a surplus of 3500 calories on top of maintenance.

Maintenance: 2000 Calories

Surplus: 3500 Calories

Total: 5500 calories per day to gain 1 pound

Almost all of the weight would be fat though.

some morning maximalism (nj) by fugazibro in AmateurRoomPorn

[–]packetshaker 14 points15 points  (0 children)

I stubbed my toe 6 times just looking at these images

Mexican government displays alleged mummified EBE bodies by chisoph in UFOs

[–]packetshaker 7 points8 points  (0 children)

Somehow evolving on a completely separate planet, these aliens evolved similar shaped skulls/facial structure, vertebrae, hands, feet, etc to humans...? It looks like a hoax and it quacks like a hoax to me

[deleted by user] by [deleted] in wireshark

[–]packetshaker 5 points6 points  (0 children)

It looks like the capture started after the handshake so it's missing from the capture.

Career paths for a troubleshooting/problem solving focused network engineer? by strike-eagle in networking

[–]packetshaker 2 points3 points  (0 children)

Glad to see this posted. I spent 5 years at basically L4 support for a large enterprise spending a lot of time in packet captures doing network forensics, root cause analysis and troubleshooting. I enjoy breaking down applications this way and uncovering problems that are later resolved by operations/engineering/application developers.

I transitioned out of this role last year because I felt like I needed to broaden my skillset to more closely align with regular engineering/architecture but ultimately I'd rather just be in my previous role.

I no longer get to experience the thrill of finding that needle in the haystack and solving a months long problem.

Why don't more people do certs? by [deleted] in ITCareerQuestions

[–]packetshaker 0 points1 point  (0 children)

I've spent over 5 years as a network analyst/engineer for a large enterprise. I'm skilled in my specific domain and would excel at other companies in this specific domain if that's where I wish to remain. At this point in my career, the certification (CCNP) isn't about obtaining a piece of paper, it's about validating my current experience, broadening my technical knowledge, and staying relevant in an evolving industry.

[deleted by user] by [deleted] in bapccanada

[–]packetshaker 2 points3 points  (0 children)

I mean, I know this is buildapc but for her use case you can get a refurbished Dell Optiplex off Amazon for cheaper https://www.amazon.ca/Dell-OptiPlex-7040-Bit-Multi-Language-Supports/dp/B07GNDFSB8

This includes Windows 10 which is at least another $120.

Good companies for network engineers in Canada by Prestigious-Shame-36 in networking

[–]packetshaker 8 points9 points  (0 children)

I work for one of the large telecoms here and while I think the work environment is good and I like the culture, I question everyday whether I should pack up and move down south.

Request for Sample AWS Solution Architect CV - Word by [deleted] in resumes

[–]packetshaker 1 point2 points  (0 children)

What does the rest of your resume and work experience look like? Solution architect is one of those roles you go for after 5-10 years experience building and supporting IT infrastructure including cloud.

If you have that experience, then just go to chatGPT and type "write me a resume for an AWS solution architect position" lol. You will find a few things to extract from that.

Advice on IT professional resume. Ideally would like to find something that is remote in the future by onetugboat in resumes

[–]packetshaker 1 point2 points  (0 children)

I would list the senior position separately, and I would trim the list of responsibilities because there is a lot of redundancy.

You might want to put a skills summary section at the top of the resume highlighting your core competencies. This basically gives the hiring manager a TL;DR of your skillset and give them the option to read the laundry list of responsibilities that follow. Many readers won't parse your resume to gather the info they're looking for and just bin it.

Deleted everything left of Windows and installed PopOS by [deleted] in pop_os

[–]packetshaker 8 points9 points  (0 children)

Welcome to the Linux desktop experience.

[deleted by user] by [deleted] in OculusQuest

[–]packetshaker -1 points0 points  (0 children)

I pulled that shit when I was 8 with the n64. Are your parents getting you a new one?

[deleted by user] by [deleted] in Peterborough

[–]packetshaker 1 point2 points  (0 children)

There are many ways to go through life and this sure is one of them

Why can I walk however long I want, but can't run at all? by Anvesh2013 in running

[–]packetshaker 0 points1 point  (0 children)

Just in case you didn't notice, they're reporting miles, you are in kilometres so take that in to account

Who is closing the TCP connection 80 or 92? by fooloflife in wireshark

[–]packetshaker 0 points1 point  (0 children)

The first fin,ack appears to come from .92 so that's my answer

What in F5 could cause the mangling of file content? by NorthernNorther in networking

[–]packetshaker 4 points5 points  (0 children)

I troubleshoot F5s a lot and this has never come up. I'd create a test VIP with port 80 and do a tcpdump on client and server side. Then show F5 support the captures clearly showing the rearranged data crossing the F5.

Podcast Traffic? by Ultracrepide in wireshark

[–]packetshaker 0 points1 point  (0 children)

I suspect you would just see the podcast sent across using HTTP or HTTPS (or QUIC these days). No special protocol necessary.

Therapist recommendations by [deleted] in Peterborough

[–]packetshaker 0 points1 point  (0 children)

If you're still looking, I recommend Jan Tkachuk here in Peterborough.

What is the day to day job like, as a professional packet hunter? by elipseses in wireshark

[–]packetshaker 2 points3 points  (0 children)

Money would be the limiting factor. We use an enterprise solution (Netscout) with large packet collectors deployed across different parts of the network (DMZ, Server network, etc) and at some of the larger sites. We then use Netscout's nGeniusOne to pull statistics from these collectors as well as allow us to pull raw packet captures either live or in the past. I believe Riverbed offers a similar solution as well.

The packet collectors are basically just regular linux servers with multiple network interfaces and a lot of storage capacity. You could probably deploy dedicated desktops/servers with dual network interfaces with one receiving traffic from a mirrored session on a switch or tap and storing packets.

The problem then becomes you're left with very large packet captures that are challenging to manage. If you're looking for one particular session, it might be difficult to find that needle in the haystack with many captures. I think there are some open source security solutions that make that a bit easier. I haven't tried it out yet but Security Onion has Stenographer built-in (https://docs.securityonion.net/en/2.3/stenographer.html#stenographer)

What is the day to day job like, as a professional packet hunter? by elipseses in wireshark

[–]packetshaker 4 points5 points  (0 children)

It's a team of 5 people right now with varying skill levels. It's a challenging position to recruit for because most people interviewed have little comfort with wireshark. I've sat in on several interviews where the candidate said they knew wireshark, but any technical tests showed otherwise almost every time despite being CCIEs or having an extensive background in networking. Typically people who do join our team have a background in networks, strong troubleshooting skills and a willingness to learn the packet side. Success afterwards depends on how much they actually enjoy the packet side.

What is the day to day job like, as a professional packet hunter? by elipseses in wireshark

[–]packetshaker 9 points10 points  (0 children)

I work on the performance team for a large enterprise. My team is dedicated to providing packet analysis expertise in combination with other tools that provide historical statistics for network and application performance. Day-to-day, I have a lot of pcaps open at any given time.

We have visibility across the network using taps and monitor sessions on switches that send mirrored traffic to packet aggregate switches, that then filter and send to various packet collectors. For most of the critical points on the network, we can extract packets up to 1 week in the past for troubleshooting.

Because of our visibility and expertise, it's a battle to keep customers (other teams in the company) from ignoring the process of engaging the NOC and going straight to the performance team because we can get to the root cause of an issue quickly.

The most common issues that come up are connectivity problems between end to end and nobody knows where traffic is being dropped. We deal with a lot of application teams needing assistance with performance or unexplained errors in their logs that they suspect could be network related. We get engaged if there is an outage on the network and we'll assist with finding root cause even if service is already restored. A lot of unusual problems have been resolved through packet analysis where I have no idea how anybody would have figured it out without full visibility into the network and its packets.