you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 1 month ago (2 children)

Still doesn't help with things like understanding routing and subnet masks and frame sizes and jfc how does any of this work

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 1 month ago* (last edited 1 month ago)

    Of course not, but I've found that seeing the protocols in action and looking at real headers can be very helpful in making them click. Understanding DHCP or ARP or mDNS or BGP or whatever is much easier by inspecting a pcap than it is by reading RFCs

  • source
  • parent