you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 5 days ago (2 children)

Still doesn't help with things like understanding routing and subnet masks and frame sizes and jfc how does any of this work

  • source
  • parent
  • hideshow 4 child comments
  • [–] 3 points 5 days ago* (last edited 5 days ago)

    Of course not, but I've found that seeing the protocols in action and looking at real headers can be very helpful in making them click. Understanding DHCP or ARP or mDNS or BGP or whatever is much easier by inspecting a pcap than it is by reading RFCs

  • source
  • parent