you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 2 months ago (2 children)

Still doesn't help with things like understanding routing and subnet masks and frame sizes and jfc how does any of this work

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 2 months ago* (last edited 2 months ago)

    Of course not, but I've found that seeing the protocols in action and looking at real headers can be very helpful in making them click. Understanding DHCP or ARP or mDNS or BGP or whatever is much easier by inspecting a pcap than it is by reading RFCs

  • source
  • parent