Thanks for the advice blackazarro and Manu, I do have a general understanding of TCP/IP concepts but probably not to the level that I should.  At least now I have a place to focus on before getting to far down the wrong path.  Thanks again, SpoonyG.

First off I would like to say hello, this is my first post.  I’m looking for some advice on the right path to become an ethical hacker and work in the IT security field.  I’m been working as an accountant/auditor for the past 8 years but IT security has been a hobby of mine for much of that time.  Right now I’m studying for the CEH exam, but I was also thinking of taking the offensive-security 101 course and getting the OSCP.  I would like to know what the members here think I should focus on.