Summary

As we mentioned at the beginning of the chapter, your best tool for diagnostics is a good sniffer. About 80% of our firewall work is done with a sniffer, and even in those situations where the sniffer isn't germane to the topic (writing firewall rules, for example), it always shows up in the verification phase (you did remember to test those rules right?).

By no means is this a complete list of all the tools and gadgets that might assist you in your job. We are constantly seeking out newer, better applications to aid us in our security design work. Some are better than others, and they're constantly changing to keep up with the problems they're trying to solve. Just remember the best tool you have is between your earsat least you know that one will have better documentation!

If you have alternatives to the tools we outlined in this chapter, and they work for you, please continue to use them. Always use the tools that help you to get your work done in the most effective manner possible. And if you have some thoughts you would like to share with other readers about how to use these tools, or even better tools that we have explored in this chapter, please visit the forums at our website (www.gotroot.com) and let the world know what you think!