SHARKFEST'10 ABSTRACTS & BIOS BASIC TRACK 050410

Wireshark Developerand User ConferenceStanford University, Palo Alto, CAJune 14-17, 2010Basic Track Session AbstractsMay 4, 2010

SHARKFEST '10 BASIC TRACK Session Abstracts and Speaker Bios Page 1 of 3TUESDAY, June 15thKEYNOTE: "25 Years of Packet Tracing - A Personal Retrospective" Presenter: Van Jacobson, tcpdump Creator, Research Fellow, PARCVan Jacobson will take us all on a fascinating journey through his years in One of the primary contributors to the technological foundations of today'sthe industry and his packet analysis experiences along the way.Internet, Van Jacobson joined PARC in 2006 as a Research Fellow to leadits content-centric networking research program. Van's algorithms for theTransmission Control Protocol (TCP) helped solve the problem ofcongestion and are used in over 90% of Internet hosts today. Van has cowrittenmany network diagnostics tools (traceroute, pathchar, and9:00 – 10:00 amtcpdump) that are widely used by the Internet research and developmentcommunity. Besides authoring dozens of seminal, Internet-definingdocuments, he also helped lead the development of the Internet MulticastBackbone (MBone) and the popular Internet audio and video conferencingtools (vic, vat, wb) that laid the groundwork and defined the standards forcurrent Internet VoIP and multimedia applications.10:00 – 10:15 amBREAKB-1: 802.11 Secrets RevealedInstructor: Joe Bardwell, President, Connect802, Inc.The bits in 802.11 packets are represented by electromagnetic signals inthe air. Combining RF spectrum analysis with Wireshark packet-levelMr. Bardwell is the President of Connect802 Corporation, a nationalwireless system solution provider. Mr. Bardwell was the founding engineer10:15 – 11:30amanalysis (and, the RadioTap header in particular) provides a more and program manager for the Certified Network Expert (CNX) professionalcomplete picture of WLAN behavior than just looking at TCP. In this certification program. His professional career, which spans over 30 years,session you’ll see how the information presented by Wireshark can beused to infer the behavior of the RF spectrum.includes technical management and executive positions with a number ofnetwork industry leaders, including WildPackets and Network General.11:30 – 11:45amBREAKB-2: Analyzing TCP/IP Networks with WiresharkInstructor: Ray Tompkins, Founder and CEO, Gearbit11:45am – 1:00pmThis course will help you discover the communications patterns of TCP/IP& UDP protocols. We will drill down into TCP, revealing how this protocolestablishes the connection and how its algorithms affect data speed,Ray is a Senior Network Specialist with over 30 years experience introubleshooting, design, and implementation. His background includes 911emergency consulting, and identifying the root cause of critical networkperformance and throughput. We’ll also cover the tools, graphs and charts problems.within Wireshark that can increase your speed in identifying problems andsolutions. With the real-world case studies we present, you will gainvaluable skills that can be used immediately.1:00 – 1:55pmLUNCHB-3: Where NetFlow and Packet Capture Complement Each Other Instructor: Michael Patterson, President & CEO, Plixer Int'l, Inc.In this session, we will cover what NetFlow is and how it works. Topics to Michael Patterson is the CEO of Plixer International, Inc. Prior to Foundingbe covered include: NetFlow v5, v9, IPFIX and Flexible NetFlow; Exporting Plixer, he was the President of Somix Technologies. He also worked asMAC addresses, VLAN IDs; sFlow Vs. NetFlow; NBAR via NetFlow and the Director of Professional Services at Cabletron Systems. He has a2:00 – 3:15pm deep packet inspection; Traffic types (e.g. VoIP) captured with NetFlow vs. Master of Science degree in Computer Information Systems from Southernpacket analyzer; Reporting on NetFlow: ToS (DSCP), Defining Application New Hampshire University and a Bachelors in Business Management fromGroups; Advanced Filtering to narrow in on problems, leveraging reports; the University of Maine.Detecting Malware – Network Behavior Analysis; What’s next in NetFlow,where the technology is going.3:15pm – 3:30pmBREAKB-4: Network Access Security - It's Broken, Now What?Instructor: Jeff Carrell, Network Systems & Security Instructor3:30pm – 4:45pmIn this session, we will discuss network access security system topicareas, review what a properly functioning secure access systemcommunications flow looks like, "decode" many of the error messageswhen the system is not working correctly into terms we can action on, andsee live demonstrations that will simulate both working and non-workingauthenticating sessions of computers and VoIP phones, and then reviewthe various systems logs of information that are available and tracecaptures to assist in troubleshooting the overall system issue.Jeff is a network systems and security instructor on ProCurve Networkingby HP products, delivering technical courses throughout North America. Inaddition, he provides network consulting services with an emphasis insecurity on wired, wireless and VoIP networks.His involvement in the computer industry for 29 years has culminated inthe concentration of his endeavors in the internetworking portion of theindustry for over 21 of those years.

SHARKFEST '10 BASIC TRACK Session Abstracts and Speaker Bios Page 2 of 3WEDNESDAY, June 16thB-5: HANDS-ON LAB: WLAN Analysis with Wireshark & AirPcap9:00 – 10:30 amThis unique session is dedicated to helping you capture and analyze802.11 wireless frames. We’ll help you configure your Wireshark andAirPcap adapters and start on a journey in understanding how WLANswork. Using in-class examples, you’ll capture the frames involved inAssociation, Arbitration, Data Transfer, and a few ‘surprise’ scenarios tohelp you learn through doing. Examples of 802.11 a, b, g, & n, with boththe STA (client) and Access Points, will illustrate how they negotiate thentransfer data. You’ll walk away having completed live in-class analysis,helping you feel confident in returning home and doing the same in yournetwork.Instructor: Keith R. Parsons, Managing Director, Institute for NetworkProfessionalsA gifted presenter, Keith is known for his wit and broad technical expertise.He holds over 50 technical certifications and has earned an MBA from theMarriott School of Management. He is author (or editor) of a dozentechnical publications and has developed seven technical certificationprograms. Mr. Parsons has developed and delivered Hands-OnTechnology training to thousands of individuals worldwide for Fortune 100companies. For the past eight years, Mr. Parsons has focused on WirelessLANs, providing high-quality customized training and WLAN consulting.10:30 - 10:45 amBREAKB-6: Discovering IPv6 with WiresharkInstructor: Rolf Leutert, Consultant &Trainer, Leutert NetServicesWe now have clear indications that IPv4 address space will run out in a Rolf Leutert, a native of Switzerland, founded Leutert Net Services tofew years. Even if you have reserved plenty of IPv4 addresses , what provide network training, network troubleshooting, and consulting in 1988.about your customers or your strategic partners? They may ask you for Since then, the company has delivered hundreds of trainings for SnifferIPv6 support soon, so it’s time to get IPv6 ready. It’s not only the huge University and other training organizations, and Rolf has attained both10:45 am – 12:15 pm address space that differentiates IPv6 from IPv4, there’s also the new Certified Network Expert (CNX) and Sniffer Certified Master status.address allocation process, the absence of broadcasts on layers 2 and 3,the better support for mobility, and more. Wireshark is the ideal tool todiscover the main protocol differences. During this introductory session,you will learn about new IPv6 fields, address allocation, and neighbordiscovery processes, and will be prepared to discover more for yourself.12:15 – 1:15 pmLUNCHB-7: TAPS DemystifiedInstructor: Sam Battaglia, US Technical Mgr, Network Critical NA1:15 – 2:45 pm2:45 – 3:00 pm3:00– 4:30 pmWhat is a TAP? Why might I need them in my network? What kind ofTAPs are there? Where should they be deployed? How do I use them?All of these questions and more will be answered during this session. Joinus while we demystify network TAPs.Sam has experience in computing, administration, support, networking,telephony systems, and is currently the Technical Manager at NetworkCritical. He is active in the engineering and design process, and offersdeployment solutions and support to customers needing assistanceinstalling access solutions into their networks.BREAKB-8: 10 Cool Things You Should Know How To Do With Wireshark Instructor: Laura Chappell, Founder, Wireshark & Chappell UIn this session, Laura takes you through the top skills you should acquire to Laura Chappell is the Founder of Wireshark U, Chappell U and Protocoluse Wireshark more efficiently to find network problems and spot securityissues. From specialized graphs to customized settings to profile creation,Laura launches you to Wireshark guru in a fast (and humorous) way.Analysis Institute, as well as a highly-energetic speaker and author ofnumerous industry titles on network communications, analysis andsecurity. She has presented to thousands of State, Federal andinternational law enforcement officers, judicial members, engineers,network administrators, technicians and developers. Ms. Chappell is amember of the High Technology Crime Investigation Association (HTCIA)and an Associate Member of the Institute for Electrical and ElectronicEngineers (IEEE) since 1989. Her blend of humor, personal experiences,energy and clarity have earned her a top spot as an industry speaker.Disney has optioned a script entitled “Mother of Invention” based onLaura’s life.

SHARKFEST '10 BASIC TRACK Session Abstracts and Speaker Bios Page 3 of 3THURSDAY, June 17thB-9: Analysis of WISPr Implementations9:00 – 10:30am10:30 – 10:45am10:45am – 12:15pm12:15 – 1:30 pm1:30 – 3:00pm3:00pm –3:15pm3:15 – 4:15 pmWISPr (“Wireless Internet Service Provider roaming”) allows Wi-FiHotSpot access points to authenticate users in through a back-end weband a RADIUS server. Because packets are often flying around theInternet (between the local WISPr access point, the web server, and theRADIUS server) it’s through packet-level analysis of the behavior thatproblems can be isolated. In the coming year expect to see WISPr risefrom obscurity and become a typical Wi-Fi component. This sessionexplains WISPr and will walk through a number of Wireshark examples.Instructor: Joe Bardwell, Founder and President, Connect802CorporationMr. Bardwell is President and Chief Scientist at Connect802 Corporation, anational wireless system solution provider. Mr. Bardwell was the foundingengineer and program manager for the Certified Network Expert (CNX)professional certification program. His professional career, which spansover 30 years, includes technical management and executive positionswith a number of computer network industry leaders including WildPacketsand Network General.BREAKB-10 Wireshark vs. "the Cloud" Instructor: Jasper Bongertz, Sr. Technical Consultant and co-founder,Synerity Systems“Cloud Computing” is the latest buzzword, aiming at reduced costs for Jasper Bongertz is a Senior Technical Consultant and co-founder ofserver hardware, reduced power consumption, and consolidation of many Synerity Systems. Jasper studied computer science at the Technicalsystems into a few servers running virtualization software. ThisUniversity of Aachen, mainly in the area of database maintenance andpresentation focuses on the challenges of capturing network traffic, using performance tuning, database and web programming, computer networks,the example of an environment where you can’t tell on which specific IT security and VMWare. In 2005, he co-founded Synerity Systems,server a virtualized machine is actually being run. After an introduction to focusing on network analysis and troubleshooting, network security and ITthe underlying mechanisms, various approaches and techniques to get to forensics projects. Jasper is a Sniffer Certified Professional (SCP),the packets you actually want will be demonstrated in a live environment – VMware Certified Professional (VCP3/4) and VMware Certified Instructorusing Wireshark, of course!(VCI).B-11: Basic TCP/IP AnalysisIn this session, Hansang will use his clear and focused style to explain andillustrate the innerworkings of TCP/IP in a manner accessible to anyone.LUNCHInstructor: Hansang Bae, VP, CATE-Network Engineering, CitiCorpHansang Bae currently leads the Network/Application PerformanceEngineering Team with direct responsibility for Packet CaptureInfrastructure at Citi. He brings a unique perspective with his broadknowledge of protocol analysis in a complex enterprise infrastructure.BREAKKEYNOTE: "Reading the Traffic: Learning Behavior from Watching Presenter: Dr. Harry Saal, Chairman, Technical Committee - USDOJBits"vs. Microsoft Consent Decree and Founder & CEO, Network GeneralDr. Saal is a founding father of the network diagnostics market and a majorinspiration for the creation of the Ethereal/Wireshark Project. Through hiswork, Dr. Saal paved the way for the expansion and legitimization of thenetwork and protocol analysis market which provides employment andcarrer opportunities for amny SHARKFEST attendees. In this Keynote,Dr. Saal will grace us with a retrospective of his years of experience inreading bits and learning to determine network characteristics andbehavior from these exercises.Dr. Harry J. Saal was chosen by the US Department of Justice to lead theTechnical Committee charged with monitoring and enforcing the MicrosoftAntitrust case. His work to restore competition in the personal computerindustry is an exciting and significant challenge. Dr. Saal was also theFounder and CEO of Network General Corporation, the first companywholly dedicated to the area of network diagnostics. From 1993 through1995, Dr. Saal served as founding CEO and President of Smart Valley,Inc., a non-profit organization chartered to create a regional electroniccommunity based on an advanced information infrastructure and thecollective ability to use it. He has served as Director of several private andpublically traded high technology firms. Ernst & Young named Dr. Saal theBay Area 1990 Software Entrepreneur of the Year and he is also therecipient of the ADL Torch of Liberty Award, the ACM/Computer Museum1994 Computer Bowl MVP, and the JNF Tree of Life Award. In 1997,Columbia University awarded Dr. Saal its highest honor, the John JayAward. Dr. Saal is a magna cum laude graduate of Columbia Universitywhere he received his Ph.D. in High Energy Physics in 1969. He thenserved as Deputy Director of the Stanford Linear Accelerator Center'sComputation Group and later as Visiting Associate Professor of ComputerScience at the State University of New York at Buffalo.

SHARKFEST '10 BASIC TRACK Session Abstracts and Speaker Bios Page 1 of 3TUESDAY, June 15thKEYNOTE: "25 Years of Packet Tracing - A Personal Retrospective" Presenter: Van Jacobson, tcpdump Creator, Research Fellow, PARCVan Jacobson will take us all on a fascinating journey through his years in One of the primary contributors to the technological foundations of today'sthe industry and his packet analysis experiences along the way.Internet, Van Jacobson joined PARC in 2006 as a Research Fellow to leadits content-centric networking research program. Van's algorithms for theTransmission Control Protocol (TCP) helped solve the problem ofcongestion and are used in over 90% of Internet hosts today. Van has cowrittenmany network diagnostics tools (traceroute, pathchar, and9:00 – 10:00 amtcpdump) that are widely used by the Internet research and developmentcommunity. Besides authoring dozens of seminal, Internet-definingdocuments, he also helped lead the development of the Internet MulticastBackbone (MBone) and the popular Internet audio and video conferencingtools (vic, vat, wb) that laid the groundwork and defined the standards forcurrent Internet VoIP and multimedia applications.10:00 – 10:15 amBREAKB-1: 802.11 Secrets Revealed - Part 1: RF Signal Propagation Instructor: Joe Bardwell, President, Connect802, Inc.The AirPcap Radiotap Header presents dBm signal and noise information. Mr. Bardwell is the President of Connect802 Corporation, a nationalThis session explains the underlying physics behind these RF signal wireless system solution provider. Mr. Bardwell was the founding engineer10:15 – 11:30ampropagation measurements. You’ll be surprised to find out what really goes and program manager for the Certified Network Expert (CNX) professionalinto Free Space Path Loss calculation and why, despite popular myth, 5 certification program. His professional career, which spans over 30 years,GHz signals are not more significantly attenuated relative to the lowerfrequency 2.4 GHz signals. The secrets of RF signal propagation will beincludes technical management and executive positions with a number ofnetwork industry leaders, including WildPackets and Network General.revealed!11:30 – 11:45amBREAKB-2: Analyzing TCP/IP Networks with WiresharkInstructor: Ray Tompkins, Founder and CEO, Gearbit11:45am – 1:00pmThis course will help you discover the communications patterns of TCP/IP& UDP protocols. We will drill down into TCP, revealing how this protocolestablishes the connection and how its algorithms affect data speed,Ray is a Senior Network Specialist with over 30 years experience introubleshooting, design, and implementation. His background includes 911emergency consulting, and identifying the root cause of critical networkperformance and throughput. We’ll also cover the tools, graphs and charts problems.within Wireshark that can increase your speed in identifying problems andsolutions. With the real-world case studies we present, you will gainvaluable skills that can be used immediately.1:00 – 1:55pmLUNCHB-3: Where NetFlow and Packet Capture Complement Each Other Instructor: Michael Patterson, President & CEO, Plixer Int'l, Inc.In this session, we will cover what NetFlow is and how it works. Topics toMichael Patterson is the CEO of Plixer International, Inc. Prior to Foundingbe covered include: NetFlow v5, v9, IPFIX and Flexible NetFlow; Exporting Plixer, he was the President of Somix Technologies. He also worked asMAC addresses, VLAN IDs; sFlow Vs. NetFlow; NBAR via NetFlow and the Director of Professional Services at Cabletron Systems. He has a2:00 – 3:15pm deep packet inspection; Traffic types (e.g. VoIP) captured with NetFlow vs. Master of Science degree in Computer Information Systems from Southernpacket analyzer; Reporting on NetFlow: ToS (DSCP), Defining Application New Hampshire University and a Bachelors in Business Management fromGroups; Advanced Filtering to narrow in on problems, leveraging reports; the University of Maine.Detecting Malware – Network Behavior Analysis; What’s next in NetFlow,where the technology is going.3:15pm – 3:30pmBREAKB-4: Network Access Security - It's Broken, Now What?Instructor: Jeff Carrell, Network Systems & Security Instructor3:30pm – 4:45pmIn this session, we will discuss network access security system topicareas, review what a properly functioning secure access systemcommunications flow looks like, "decode" many of the error messageswhen the system is not working correctly into terms we can action on, andsee live demonstrations that will simulate both working and non-workingauthenticating sessions of computers and VoIP phones, and then reviewthe various systems logs of information that are available and tracecaptures to assist in troubleshooting the overall system issue.Jeff is a network systems and security instructor on ProCurve Networkingby HP products, delivering technical courses throughout North America. Inaddition, he provides network consulting services with an emphasis insecurity on wired, wireless and VoIP networks.His involvement in the computer industry for 29 years has culminated inthe concentration of his endeavors in the internetworking portion of theindustry for over 21 of those years.

SHARKFEST '10 BASIC TRACK Session Abstracts and Speaker Bios Page 2 of 3WEDNESDAY, June 16thB-5: HANDS-ON LAB: WLAN Analysis with Wireshark & AirPcap9:00 – 10:30 amThis unique session is dedicated to helping you capture and analyze802.11 wireless frames. We’ll help you configure your Wireshark andAirPcap adapters and start on a journey in understanding how WLANswork. Using in-class examples, you’ll capture the frames involved inAssociation, Arbitration, Data Transfer, and a few ‘surprise’ scenarios tohelp you learn through doing. Examples of 802.11 a, b, g, & n, with boththe STA (client) and Access Points, will illustrate how they negotiate thentransfer data. You’ll walk away having completed live in-class analysis,helping you feel confident in returning home and doing the same in yournetwork.Instructor: Keith R. Parsons, Managing Director, Institute for NetworkProfessionalsA gifted presenter, Keith is known for his wit and broad technical expertise.He holds over 50 technical certifications and has earned an MBA from theMarriott School of Management. He is author (or editor) of a dozentechnical publications and has developed seven technical certificationprograms. Mr. Parsons has developed and delivered Hands-OnTechnology training to thousands of individuals worldwide for Fortune 100companies. For the past eight years, Mr. Parsons has focused on WirelessLANs, providing high-quality customized training and WLAN consulting.10:30 - 10:45 amBREAKB-6: Discovering IPv6 with WiresharkInstructor: Rolf Leutert, Consultant &Trainer, Leutert NetServicesWe now have clear indications that IPv4 address space will run out in a Rolf Leutert, a native of Switzerland, founded Leutert Net Services tofew years. Even if you have reserved plenty of IPv4 addresses , what provide network training, network troubleshooting, and consulting in 1988.about your customers or your strategic partners? They may ask you for Since then, the company has delivered hundreds of trainings for SnifferIPv6 support soon, so it’s time to get IPv6 ready. It’s not only the huge University and other training organizations, and Rolf has attained both10:45 am – 12:15 pm address space that differentiates IPv6 from IPv4, there’s also the new Certified Network Expert (CNX) and Sniffer Certified Master status.address allocation process, the absence of broadcasts on layers 2 and 3,the better support for mobility, and more. Wireshark is the ideal tool todiscover the main protocol differences. During this introductory session,you will learn about new IPv6 fields, address allocation, and neighbordiscovery processes, and will be prepared to discover more for yourself.12:15 – 1:15 pmLUNCHB-7: TAPS DemystifiedInstructor: Sam Battaglia, US Technical Mgr, Network Critical NA1:15 – 2:45 pm2:45 – 3:00 pm3:00– 4:30 pmWhat is a TAP? Why might I need them in my network? What kind ofTAPs are there? Where should they be deployed? How do I use them?All of these questions and more will be answered during this session. Joinus while we demystify network TAPs.Sam has experience in computing, administration, support, networking,telephony systems, and is currently the Technical Manager at NetworkCritical. He is active in the engineering and design process, and offersdeployment solutions and support to customers needing assistanceinstalling access solutions into their networks.BREAKB-8: 10 Cool Things You Should Know How To Do With Wireshark Instructor: Laura Chappell, Founder, Wireshark & Chappell UIn this session, Laura takes you through the top skills you should acquire toLaura Chappell is the Founder of Wireshark U, Chappell U and Protocoluse Wireshark more efficiently to find network problems and spot securityissues. From specialized graphs to customized settings to profile creation,Laura launches you to Wireshark guru in a fast (and humorous) way.Analysis Institute, as well as a highly-energetic speaker and author ofnumerous industry titles on network communications, analysis andsecurity. She has presented to thousands of State, Federal andinternational law enforcement officers, judicial members, engineers,network administrators, technicians and developers. Ms. Chappell is amember of the High Technology Crime Investigation Association (HTCIA)and an Associate Member of the Institute for Electrical and ElectronicEngineers (IEEE) since 1989. Her blend of humor, personal experiences,energy and clarity have earned her a top spot as an industry speaker.Disney has optioned a script entitled “Mother of Invention” based onLaura’s life.

SHARKFEST '10 BASIC TRACK Session Abstracts and Speaker Bios Page 3 of 3THURSDAY, June 17thB-9: 802.11 Secrets Revealed – Part 2: Bit Transmission and ChannelCapacityInstructor: Joe Bardwell, Founder and President, Connect802Corporation9:00 – 10:30amWireshark discloses data rate information in the 802.11 frame headerdecode. This session explains how to interpret the decode on the basis ofRF signal modulation and the new 802.11n improvements in channelcapacity. You’ll learn the significance of the Modulation Coding SchemeIndex and how the final 802.11n standards for Beamforming improveperformance. The secrets of 802.11 bit transmission will be revealed!Mr. Bardwell is President and Chief Scientist at Connect802 Corporation, anational wireless system solution provider. Mr. Bardwell was the foundingengineer and program manager for the Certified Network Expert (CNX)professional certification program. His professional career, which spansover 30 years, includes technical management and executive positionswith a number of computer network industry leaders including WildPacketsand Network General.10:30 – 10:45amBREAKB-10 Wireshark vs. "the Cloud" Instructor: Jasper Bongertz, Sr. Technical Consultant and co-founder,Synerity Systems“Cloud Computing” is the latest buzzword, aiming at reduced costs forserver hardware, reduced power consumption, and consolidation of manysystems into a few servers running virtualization software. This10:45am – 12:15pm presentation focuses on the challenges of capturing network traffic, usingthe example of an environment where you can’t tell on which specificserver a virtualized machine is actually being run. After an introduction tothe underlying mechanisms, various approaches and techniques to get toJasper Bongertz is a Senior Technical Consultant and co-founder ofSynerity Systems. Jasper studied computer science at the TechnicalUniversity of Aachen, mainly in the area of database maintenance andperformance tuning, database and web programming, computer networks,IT security and VMWare. In 2005, he co-founded Synerity Systems,focusing on network analysis and troubleshooting, network security and ITforensics projects. Jasper is a Sniffer Certified Professional (SCP),the packets you actually want will be demonstrated in a live environment – VMware Certified Professional (VCP3/4) and VMware Certified Instructor12:15 – 1:30 pmusing Wireshark, of course!(VCI).LUNCHB-11: Basic TCP/IP AnalysisInstructor: Hansang Bae, VP, CATE-Network Engineering, CitiCorp1:30 – 3:00pm3:00pm –3:15pm3:15 – 4:15 pmIn this session, Hansang will use his clear and focused style to explain andillustrate the innerworkings of TCP/IP in a manner accessible to anyone.Hansang Bae currently leads the Network/Application PerformanceEngineering Team with direct responsibility for Packet CaptureInfrastructure at Citi. He brings a unique perspective with his broadknowledge of protocol analysis in a complex enterprise infrastructure.BREAKKEYNOTE: "Reading the Traffic: Learning Behavior from Watching Presenter: Dr. Harry Saal, Chairman, Technical Committee - USDOJBits"vs. Microsoft Consent Decree and Founder & CEO, Network GeneralDr. Saal is a founding father of the network diagnostics market and a major Dr. Harry J. Saal was chosen by the US Department of Justice to lead theinspiration for the creation of the Ethereal/Wireshark Project. Through his Technical Committee charged with monitoring and enforcing the Microsoftwork, Dr. Saal paved the way for the expansion and legitimization of the Antitrust case. His work to restore competition in the personal computernetwork and protocol analysis market which provides employment and industry is an exciting and significant challenge. Dr. Saal was also thecarrer opportunities for amny SHARKFEST attendees. In this Keynote,Dr. Saal will grace us with a retrospective of his years of experience inreading bits and learning to determine network characteristics andbehavior from these exercises.Founder and CEO of Network General Corporation, the first companywholly dedicated to the area of network diagnostics. From 1993 through1995, Dr. Saal served as founding CEO and President of Smart Valley,Inc., a non-profit organization chartered to create a regional electroniccommunity based on an advanced information infrastructure and thecollective ability to use it. He has served as Director of several private andpublically traded high technology firms. Ernst & Young named Dr. Saal theBay Area 1990 Software Entrepreneur of the Year and he is also therecipient of the ADL Torch of Liberty Award, the ACM/Computer Museum1994 Computer Bowl MVP, and the JNF Tree of Life Award. In 1997,Columbia University awarded Dr. Saal its highest honor, the John JayAward. Dr. Saal is a magna cum laude graduate of Columbia Universitywhere he received his Ph.D. in High Energy Physics in 1969. He thenserved as Deputy Director of the Stanford Linear Accelerator Center'sComputation Group and later as Visiting Associate Professor of ComputerScience at the State University of New York at Buffalo.