02 / UNDERSTAND
Start with the topic guide.
This tcpdump micro-course focuses on Operational configuration changes. The practice brief below is available while the full tutorial is prepared.
This is a learning outline. A complete worked tutorial has not been published for this topic yet.
Practice brief
Inspect evidence for operational configuration changes in tcpdump; explain the diagnosis and verify a proposed correction in a lab. Keep the exercise bounded and record the behavior supported by the chosen version.
Evidence to produce
Evidence log and reviewed diagnosis