From: Scott Morris (smorris@ipexpert.com)
Date: Thu Dec 06 2007 - 18:40:29 ART
Deploying an IPS and dealing with the flags is different than knowing them
all off the top of your head during an interview (short of the "common"
ones).
But you are correct, that if presented with a flag they should be able to
explain the general use/function.
Scott
_____
From: Ramya S [mailto:ramya_1975@hotmail.com]
Sent: Thursday, December 06, 2007 4:29 PM
To: smorris@ipexpert.com; sheherezada@gmail.com
Cc: guxiaojian@gmail.com; sohail.nedaria@gmail.com; cciefun@gmail.com;
narbikk@gmail.com; ccielab@groupstudy.com
Subject: RE: I know this CCIE who wouldn't know a packet if it hit him in
the ass! ~CCIE Interview Qs~
Well a security ccie must have an understanding of the flags and not
memorize them. Then how will one operate the IDS without knowing what flags
are present and what do they do?
Ramya Sen
> From: smorris@ipexpert.com
> To: ramya_1975@hotmail.com; sheherezada@gmail.com
> CC: guxiaojian@gmail.com; sohail.nedaria@gmail.com; cciefun@gmail.com;
narbikk@gmail.com; ccielab@groupstudy.com
> Subject: RE: I know this CCIE who wouldn't know a packet if it hit him in
the ass! ~CCIE Interview Qs~
> Date: Thu, 6 Dec 2007 16:17:13 -0500
>
> Exactly why does one need to know the TCP flags off the top of their head?
> I thought I was the only strange person whoever cared about it to begin
> with, but you think that a security person needs to have them memorized???
>
> Scott
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Ramya S
> Sent: Thursday, December 06, 2007 3:40 PM
> To: sheherezada@gmail.com
> Cc: guxiaojian@gmail.com; sohail.nedaria@gmail.com; cciefun@gmail.com;
> narbikk@gmail.com; ccielab@groupstudy.com
> Subject: RE: I know this CCIE who wouldn't know a packet if it hit him in
> the ass! ~CCIE Interview Qs~
>
> Knowing whats there in a packet is not a big deal, its fundamental. But if
> one were to be a security ccie, he must know what flags are there in a tcp
> packet.
>
>
> Ramya Sen
>
>
>
>
>
>
>
> > Date: Thu, 6 Dec 2007 19:16:50 +0200> From: sheherezada@gmail.com> To:
> tapas_75@hotmail.com> Subject: Re: I know this CCIE who wouldn't know a
> packet if it hit him in the ass! ~CCIE Interview Qs~> CC:
> guxiaojian@gmail.com; sohail.nedaria@gmail.com; cciefun@gmail.com;
> narbikk@gmail.com; ccielab@groupstudy.com> > I had some interviews with
> Google and some other very large employers.> They seem to have a screening
> interview with questions down to TCP> flag level, which I didn't like too
> much. From my CV, it was
> obvious> that my previous jobs were on the higher "OSI" level, like
> obvious> design
> for> example. I expected to be given questions about optimization,>
> for> security
> and the likes, but their questions were oriented towards> packet analysis.
> So, I felt miserably. Besides, if I want to see all> the options, I know
> where to search, not to memorize. Now I am> working for a Cisco partner
and
> enjoy what I am doing, simply because> the job profile matches with my
> project experience and personal> skills, not with the TCP packet that I
see
> very rarely.> >
> Mihai> > On Dec 6, 2007 4:46 PM, Tapas Das <tapas_75@hotmail.com>
> Mihai> > wrote:> >
> The device will see the "ether-type" to find the upper layer protocol,
and>
> > will treat it accordingly... (either to route or switch)> >> > > Date:
> Wed, 5 Dec 2007 22:54:32 -0800> From: guxiaojian@gmail.com> To:> >
> sohail.nedaria@gmail.com> Subject: Re: I know this CCIE who wouldn't know
a>
> > packet if it hit him in the ass! ~CCIE Interview Qs~> CC:
> cciefun@gmail.com;>
> > narbikk@gmail.com; ccielab@groupstudy.com> > Sure, here is one I
> > like,> >
> How> >> > does a L3 switch router know when to L2 switch an incoming
> How> >> > frame
> and> when to> > L3 switch an incoming frame?> > On Dec 5, 2007 10:00 PM,
> Sohail Nedaria> > <sohail.nedaria@gmail.com> wrote:> > > Hi Guys> >> > Can
> you guys provide me> > CCIE Interview questions so i can> > also prepare
my
> self well before i take> > on any interview.> >> > Thanks> > Suhail> >
> CCIE#19337>
> >> >> > On 12/6/07,> > ccie ccie <cciefun@gmail.com> wrote:> > >> > >
> >> >> > Hi,> >
> >> > > I am going off> > bit, but like to share something with you.> >
> >> > > >> > >
> I gave lots of interview> > include CISCO, Google, Yahoo......no end & i>
>
> gave> > > with out any> > interest to join but to test myself :). I gave
> interview> > for> > > small to> > big organization & i found you can't
> interview> > for> > > impress
> the interviewer> > only> > > by> > your techniqual knowledge.> > >> > >
> Thing to impress them as per my> > understanding are as.> > >> > > 1. Good
> Techniqual Approach> > > 2. If you> > dont know say you dont know this
time,
> but you will learn &> > find> > > the> > answer.> > > 3. Good
> troubleshooting approach (In network always answer withh>> > > refrance> >
>
> to> > > OSI layer)> > > 4. Listen interviewer carefully take> > own time
to
> think &
> answer> > > 5. Never underestimate interviewer who knows> > what the
> answer> > > other
> side person> > > is.> > > 6. Respect interviwer & appreciate> > him for
some
> good question.> > > 7. Before go to the interview do your study> > about
the
> oganization.> > > 8. Last be not least. Give an impression that you> >
> respect
> the> > organization> > > lot, you will love to work for them, you will>
> the> > organization> > > > give
> longer association &> > > your> > > placement in organization will> >
> contributing lot to generate revenue.> > >> > > Dont forget final
interview
> is> > always by the management people.> > >> > >> > > Regards,> > >
> is> > Mike> > >>
> > >>> > > >> > > On 12/6/07, Narbik Kocharians <narbikk@gmail.com>
> > >>> > > >> > > wrote:> > >
> >> > >> > > Darth, Are you a CCIE? I don't see your number. But what
> >> > >> > > would
> you> > hate>> > > > to> > > > be asked in the interview? that's the
> you> > hate>> > > > to> > > > question i
> would ask.> > >> > > I would ask him/her what are your weak points and
what
> are your strong> > >> > > points. Go from there.> > > > Talk to him/her
> about some of the problems> > that your firm had and see> > > > what the
> person responds, but don't expect> > the poor CCIE to solve it> > for> > >
>
> you> > >
> > in a second. But he/she> > should have an idea as to where to look,
> > from> >
> > that> > > > you should know> > the depth of his/her knowledge.> > > >
> > that> > > > If you
> or the interviewer is> > experienced enough, the second this> > person> >
>
> > opens his/her mouth, you> > should know the depth of his knowledge.> > >
> >> >
> > > But once again, CCIEs> > are not gods, they can have a bad day as
> > > well. I>
> > > > personally like to> > focus on the person's attitude and
> > > > personality,> >
> > > obviously> > > > he/she> > got the CCIE cert, which means that the
> > > obviously> > > > person
> either knows or> > > knew> > >> > > the stuff and can easily pick up the
> info.> > > >> > > >> > > > My 2 Cent.>> > > > >> > > > On 12/5/07, darth
> router <darklordrouter@gmail.com> wrote:> > > >> > >> > > > > Ok guys,> >
>
> >
> >> > > > > there was a thread a while back talking> > about dumbass
> >> > > > > CCIE's. As
> I> > > > prefer> > > > > not to be the dumbest CCIE> > on the planet,
> I> > > > prefer> > > > > help me
> out with questions> > > > that> > > > > you might ask a> > CCIE candidate
in
> an interview. I have had some> > brutal> > > > > interviews> > since I
> became IE. Honestly the questions seem a bit> > basic> > > so> > > > >> >
> far, but I have had some really in depth questions about> > >
> spanning-tree,>> > > > > > troubleshootin real world EIGRP scenarios,
etc..
> that really caught> >> > me>
> > > > off> > > > > guard. It's not that I could not have solved these> >
> issues, had I> > been> > > > > there> > > > > logged into the routers,
its>
> > explaining things we take for granted> > can> > > > be> > > > > tough,>
>
> especially in interviews. It seems like a lot of> > > > > people are
amazed>
> > that a CCIE couldn't answer this or that question.> > > > > Personally,
I
> am>
> > trying to come up with a knowledge maintanance> > plan,> > > > > like
> reading> > a chapter in the exam cert guide every week. The tasks> > I>
> reading> > > > >
> > do not do> > on a daily basis fade quickly.> > > > >> > > > >> > > > >
> > I
> have of late been> > going way back to basics, reading up on TCP/IP> > > >
> flows,> > > > >> > Ethernet, ARP, looking at packet sniffing traces, etc..
> Someone made> > > > >> > mention> > > > > of the CAM table populating
> entries, so I read up on that> > too.> > > > >> > > > > I certainly don't
> know everything, but I would love to.> > Care to give> > > me> > > > >
some>
> > > >
> > example questions you might ask a> > CCIE in an interview, or> > >
> technologies> > > > > you> > > > > would expect> > to have him/her to
> technologies> > > > > you> > > > > have
> down pat?> > > > >> > > > > DR> > > > >> > > > >> > >> >
> _______________________________________________________________________> >
>
> >> > > Subscription information may be found at:> > > > >> >
> http://www.groupstudy.com/list/CCIELab.html> > > > >> > > >> > > >> > > >>
>
> >> > > --> > > > Narbik Kocharians> > > > CCIE# 12410 (R&S, SP,
> >> > > --> > > > Security)> > >
> >> > CCSI# 30832> > > > www.MicronicsTraining.com> > > > Sr. Technical
> Instructor>> > > > > www.Net-WorkBooks.com> > > >> > > >> >> >
> _______________________________________________________________________> >
>
> >> > Subscription information may be found at:> > > >> >
> http://www.groupstudy.com/list/CCIELab.html> > >> > >> >
> _______________________________________________________________________> >
> >>
> > Subscription information may be found at:> > >> >
> http://www.groupstudy.com/list/CCIELab.html> > >> >> >> >> > --> > Thanks
> And>
> > Regards> > Suhail.U.Nedaria> > 9833256425> > CCIE# 19337.> >> >> >
> _______________________________________________________________________>
>>
> > Subscription information may be found at:> >> >
> http://www.groupstudy.com/list/CCIELab.html> >> >
> _______________________________________________________________________>>
>
> Subscription information may be found at: >> >
> http://www.groupstudy.com/list/CCIELab.html> >
> _________________________________________________________________> > Post
> free property ads on Yello Classifieds now! www.yello.in> >
> http://ss1.richmedia.in/recurl.asp?pid=219> >> >> >
> _______________________________________________________________________> >
> Subscription information may be found at:> >
> http://www.groupstudy.com/list/CCIELab.html> >
> _______________________________________________________________________>
> Subscription information may be found at: >
> http://www.groupstudy.com/list/CCIELab.html
> _________________________________________________________________
> Post free property ads on Yello Classifieds now! www.yello.in
> http://ss1.richmedia.in/recurl.asp?pid=221
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
_____
Fly HYD-BLR for Rs.499 Log on to MakeMyTrip! Check it out!
<http://ss1.richmedia.in/recurl.asp?pid=266>
This archive was generated by hypermail 2.1.4 : Tue Jan 01 2008 - 12:04:29 ARST