Re: where should I start?

[Liran Cohen <theog () tehila gov il>]

Hi Chang ,

It various depending on you're needs , and services , basically I wouldnt use a just a sniffer to detect abnormal 
traffic , try snort .

TheOg

chang zhu wrote:
> hi,all
>
> I want to learn how to use sniffer tools such as
> Etherreal...but I do not know how to detect abnormal
> traffic...Any advice or link will be greatly
> appreciated.
>
> Thanks,
>
> Chang
>
>
>                 
> _______________________________
> Do you Yahoo!?
> Win 1 of 4,000 free domain names from Yahoo! Enter now.
> http://promotions.yahoo.com/goldrush
>
> ---------------------------------------------------------------------------
> Computer Forensics Training at the InfoSec Institute. All of our class sizes
> are guaranteed to be 12 students or less to facilitate one-on-one
> interaction with one of our expert instructors. Gain the in-demand skills of
> a certified computer examiner, learn to recover trace data left behind by
> fraud, theft, and cybercrime perpetrators. Discover the source of computer
> crime and abuse so that it never happens again.
>
> http://www.infosecinstitute.com/courses/computer_forensics_training.html
> ----------------------------------------------------------------------------

--
Liran Cohen
Security and communication consultant.
Tehila project
Governement of Israel.
Tel. +972-54-898817
e-mail: theog () tehila gov il

---------------------------------------------------------------------------
Computer Forensics Training at the InfoSec Institute. All of our class sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand skills of
a certified computer examiner, learn to recover trace data left behind by
fraud, theft, and cybercrime perpetrators. Discover the source of computer
crime and abuse so that it never happens again.

http://www.infosecinstitute.com/courses/computer_forensics_training.html
----------------------------------------------------------------------------