Nice writeup. Good to see new features being added on the IOS. I am going to try this out today.

This makes me wonder if the LPIC-1 would be worthwhile to pick up.

Hmm....

I agree. Especially for those people who are going to try to pay things by themselves. The offensive security course and the elearnsecurity courses seem to be a bit more down to earth. I would love to see the SANS courses come down to sub 1k prices but I don't think that is ever going to happen.

That would be awesome. It is only a few hours from me so I will probably make it down.

I hope she used a hidden volume....

Thanks for the info Dyn.

Now time to find a team....

Epic links. Thanks for the help.






no worries

Have any of you done any CTF competitions at a security conference? This year I want to go to Derbycon and like most cons I think they are going to do a CTF competition. I would like to participate but I have never been involved with anything like that. If any of you have, how did you prepare for it? Did you have a team or did you go by yourself? Any tips or tricks?


This is a pretty good write up of last years CTF at Derbycon
http://volatile-minds.blogspot.com/2...and-notes.html

It isn't really too much imo (but I could be talking out of the side of my neck). I work with Routers and Firewalls everyday in a somewhat deep capacity. I am sitting my first CCNP:S exam next month (and the second one in Feb). There is a possibility that I will not do CCNP:R/S and instead go for CCIE:S and OSCP. We will see. That extra 600 for exams could go a long way for study material.

The OSCP is something that I want to do just so I can have some horsepower behind my Network Security certifications. I think many Network Security guys are strictly theory and I don't want to be that way.  Plus it will really help with my IPS studies (knowing what types of attacks are really out there, how to do them and how to defend against them).

I might pick it up but I was looking for something a little higher level.

Oh I probably won't get CCIE completely done next year. Just the written. Although if I don't do CCNP:R/S.......

At any rate that is my 18 month goal (CCNP:S,CCNP,CCIE:S) with OSCP possibly mixed in there.

Well my boss helped me make this decision. CCNP,CCNP:S and CCIE:S written it is for this year. Maybe a training course. We will see.

I'm a little shocked that you didn't include the other "TAO" book:
http://www.amazon.com/Extrusion-Detection-Security-Monitoring-Intrusions/dp/0321349962/ref=sr_1_1?ie=UTF8&qid=1324319286&sr=8-1

I've read it for the most part (still need to finish up the Tshark stuff). I was looking for something that would be a low cost version of the GCIA training. 4500 isn't happening anytime soon. OSCP looks cool but the WCNA material would be beneficial. I may just try to squeeze the OSCP in at some point late next year (probably after CCIE written if I do it at all).