Here's my primer for anyone interested:

https://danielmiessler.com/study/tcpdump/