Dictionary (Protocols by Layer)
Protocol pages explain each protocol as a whole: purpose, where it sits in the stack, a readable header overview, typical Wireshark appearance, and common troubleshooting patterns. This index is organized by OSI-like layers (L2/L3/L4/L7) so you can quickly jump from the capture you see to the right conceptual page. For precise meanings and values of a single header element (TTL, DF, SYN, Window, RCODE, SNI), use Fields. For real-world symptoms and step-by-step verification flows, use Topics.
In-progress entries are shown as “Soon” without links to prevent 404s. When a page becomes complete, you replace “Soon” with a link.
Layer Tabs
How to use
1) Choose the layer based on what you see in a capture (Ethernet/ARP/IP/TCP/DNS…).
2) Read the protocol overview page to get the full picture quickly.
3) Jump to Fields for exact bit sizes/values, or Topics for debugging flows.
- Ethernet II
- VLAN (802.1Q) Soon
- ARP