As with any tool, protocol analyzers need skilled implementation. Here is advice from the front lines.
Read more in the companion article Protocol analyzers: How to choose and use them (no registration is required).
DO make sure you have the right expertise on your network operations and security teams to make effective use of protocol analysis tools to troubleshoot network problems, tune firewalls and other security devices, and investigate the cause of attacks on the enterprise.
In a large organization, chances are there are IT people with the right credentials to make effective use of these tools, but they are thin on the ground. "A lot of network admins would be stunned by what they see in Wireshark," says Opus One's Joel Snyder. Generally, look for experienced network engineers or security personnel with a strong hands-on background configuring network firewalls and intrusion-protection systems.
To continue reading, register here and become an Insider. You'll get free access to premium content from CIO, Computerworld, CSO, InfoWorld, and Network World. See more Insider content or sign in.
This story, "Protocol analyzers: Dos and don'ts" was originally published by CSO.