@SecurityWriter oh man, I need that mug. I spent a month of my life last summer teaching the networking department how to properly perform a long running capture to get a PCAP for a relatively rare event. Teaching the network team to do this is *not* in my JD or expected responsibilities, but apparently I was the only one with the necessary experience since I cut my teeth in telecom doing VoIP stuff.

Ended up proving a bug in a network device that the vendor acknowledged and fixed! But what an aggravating process.

@mikemacleod Years ago, I was testing ethernet on a bare-metal SoC when I encountered an issue. Turns out, the packet's checksum wasn't being included by the hardware, and it took Wireshark (and PCAP) to prove it to the SoC guy in charge of the ethernet implementation.

@SecurityWriter