Wireshark has released a new version as of July 15th 2009. The new version number is 1.2.0 and has allot of new improvements in it. Below are some of the changes that are from the Wireshark homepage.
- Wireshark has a spiffy new start page.
- Display filters now autocomplete.
- A 64-bit Windows (x64) installer is now provided.
- Support for the c-ares resolver library has been added. It has many advantages over ADNS.
- Many new protocol dissectors and capture file formats have been added.
- Macintosh OS X support has been improved.
- GeoIP database lookups.
- OpenStreetMap + GeoIP integration.
- Improved Postscript(R) print output.
- The preference handling code is now much smarter about changes.
- Support for Pcap-ng, the next-generation capture file format.
- Support for process information correlation via IPFIX.
- Column widths are now saved.
- The last used configuration profile is now saved.
- Protocol preferences are changeable from the packet details context menu.
- Support for IP packet comparison.
- Capinfos now shows the average packet rate.
I have not had a chance to install the new version yet, but I am looking forward to it. Below are some links that you could find of interest to more about the new version of wireshark.
Version 1.2.0 Release Notes
http://www.wireshark.org/docs/relnotes/wireshark-1.2.0.html
Laura Chappell’s v 1.2 Blog Entry
http://laurachappell.blogspot.com/2009/06/wireshark-v12-enhancements.html
I was able to take the new 83-640 test this week. I was very impressed with the test as it actually can measure hands on experience of the person taking the test. There was a nice balance between hands on labs that used live virtual machines along with the traditional questions. I really hope that Microsoft will implement this style for the majority of their tests. The best advice I can give to prepare for the test is to use some sort of virtual technology. Hyper-V would be perfect as it is free. You can then use the trail version of Server 2008 which will again cost you nothing. I would set up a couple servers that are running the AD role. Once you have that done practice everyday tasks that a normal administrator would be asked to do. This would include everything from administrating accounts to configuring DNS. I would highly recommend checking out the study guide from Microsoft that I included in my previous post. This pretty much sums up everything that could be on the test. Please feel free to let me know what you think of the test if you have taken it.
I have been working on getting my certification for MCITP: Enterprise Administrator. So far the tests have been the standard multiple choice tests that we are used to seeing from Microsoft. That has all changed with 83-640 replacing 70-640 in the United States. The 83-640 is the first test that has been released by Microsoft to use virtual machines to simulate real world scenarios. This test was piloted as 70-113 and has received great reviews. So far it sounds like this approach does a better job at evaluating the real skills of the test takers. From all current reviews that I have been able to read the virtual machines are the real deal. That means if you need to run something from the command prompt you can type your “command” /? and receive the normal help. The one thing you cannot do is access the internet to look up the answer. It also sound like most of the AD pre configuration has already been completed. You will be expected to complete everyday task that an administrator would complete.
With the new test format there has been a couple companies that have created virtual testing environments for you to simulate what the test will feel like. It looks like with the purchase of the normal test material you get access to the virtual machines for sixty days to practice administrator tasks in the test. The other option you have is to download the evaluation copies of server 2008 and set up your own lab. I have personally taken advantage of virtual technology to set up my own lab. This has given me a playground to practice everything I need to do. If for some reason I do not pass on the first time I will probably look into formal training. I am currently schedueled to take the test in about week. I will report back on my experience.
83-640 “Study Guide” From Microsoft
http://www.microsoft.com/learning/en/us/exams/83-640.aspx
