Wireshark certification - any value?

As a hiring manager, I can tell you that I always hire the person with more experience. However, if I have two equal candidates (equal in presentation skills etc.) I choose the one with more certification. I have just about all the certifications that exist in TI (CCIE, Novell, Microsoft, Sniffer, and even CNX). I got them because it helped my reseller and not necessarily because it helped me. The only one that I really studied for and was proud of was my CCIE.

To me, experience always trumps certification. But experience with certification is better! Also, if it can you past the HR gatekeepers, it may be worth it. In larger enterprises, there is an army of HR people who screen candidates based solely on key words.

I once told someone "just because you've been doing it for 10 years doesn't mean you've been doing it right!" So I realize longevity doesn't always equal experience. As a manager, you have to be able to separate the "phonies" from a real candidate.

A real technical interview and a weed-out written test is the only way to do this, IMHO.

Good luck!

As a professional, I have had to pass some certification exams for the companies that I worked for. Personally I see a few reasons for certification:

• When working for a distributor/reseller, the Vendors demand certain levels of certification before doing business or before giving discounts. So basically this means your employer needs you to certify. Having the certificates can help to get a job at these companies.
• When you want to be an instructor for a certain vendor, you also need certification.
• As Hansang already pointed out, there is a large HR-force at the gate of each big company that need to sift through lots of applications. They have received some keywords (of which certification levels are often a big part) to filter on. Of course some good guy might be filtered out, but if there are enough people "Good Enough", then losing a better guy does not weigh against making the hiring process more efficient. So to mitigate this barrier, make sure you have the requested certifications for the jobs you'd like to have.

To me, experience is more important. I have done my share of interviewing people and I don't care about their certifications. I had a CCNP certified guy who could not tell me what a 3-way handshake was. I like to draw a network and try to stretch it until the interviewee needs to leave his comfort zone. It's at that point that you get to see how someone handles the inevitable situation of having to improvise. Will he isolate himself to dig into books/labs/internet, will he turn to colleagues to work together, will he just tell his manager it is over his head or will he silently fail to address the issue. None of them are bad, but it needs to match the culture of the company, otherwise it will turn bad...

As for Wireshark certification. At the moment, I don't think there is a demand from companies, but that might change in the future as I do believe Wireshark skills will become more and more important.

Ok... I just have to jump in here and mention a few items.

We are receiving calls from companies who would like to "hire WCNAs" to analyze their traffic. We hope to pass those opportunities on to the WCNA team.

The goal of the certification is to test proficiency in Wireshark. Can you identify issues in a TCP handshake? Can you spot the problem in a slow browsing session? Can you define where high latency is stinking up network performance? Can you locate unusual traffic patterns that indicate a recon or breach is underway? The 33 objectives are defined in the Info Pack document at www.wiresharktraining.com/certfication - I recommend you look through those - they are on the last pages of that document.

It is not a replacement for experience. I also value experience above any certification. It is, however, a way to demonstrate that you have a certain level of competency and capability. When an employer asks about network troubleshooting/security skills, knowing Wireshark functionality, TCP/IP communications, packet-level troubleshooting and communications analysis for security purposes is key.

Wireshark is key. That is the goal of the cert program. If you have any questions, let me know.

This employer does. I would rather hire someone that has shown some initiative. I challenge all my employees to improve their skill sets. I myself just passed the WCNA a few weeks ago and I haven't stopped studying yet. I take it seriously so my people do. I have admins and engineers that have worked for me over 11 years that I continue to challenge on a regular basis. I meet with each member of the dept regularly to discuss their desired career path. When I hire someone, I invest a lot of time in them. I prefer people that may not have a lot of experience but are motivated and want to learn. If they have a lot of experience but don't have any certifications, it tells me that they are more interested in a paycheck than a career.

I would like to get the certification and have mentioned it to a couple of people. One is a close friend that I have worked with for several years and the other was my primary employer. The response from both of them is "why?". I believe that the use of Wireshark and the Wireshark materials allow you to learn more about how things "really" work than any other program out there. To the credit of those two people questioning me, I've not had or seen many people requesting it as an employment or contract prerequisite. However, I think those that are more see the value of protocol analysis.

I think over time hiring managers will start to realize that these individuals are the ones who can really see what is going on and can often fix problems exponentially quicker. I guess at this point, it is a personal challenge as opposed to getting it to get a job. I just really enjoy looking at things from the wire perspective and Wireshark is a great way to do it.