The original domain name is crypto bait now. Wireshark and its predecessors have made it easy to visualize how protocols actually work, and peel back the magic

The original domain name is crypto bait now. Wireshark and its predecessors have made it easy to visualize how protocols actually work, and peel back the magic that makes the internet work. Between the ability to "follow TCP stream" or the "conversation" views between two hosts, wireshark has helped connect the abstract and the observed / real behavior of networks. Which seems to make the difference for people trying to get beyond the basics of networking in workshops / training sessions. The built-in protocol dissectors are also a big help for teaching. Some common situations won't work well out of the box (multi interface PCAPs), or I need to read the manual again... but with a bit of scripting / light processing of the PCAP it works very well.