tshark and tcpdump: A Working Guide for Network Engineers
Capture filters versus display filters, the field extraction that turns a capture into data, and which of the two tools to reach for.
observability
Observability
Making networks observable: packet analysis with tshark and tcpdump, SNMP and MIBs, log pipelines on the Elastic Stack, and distributed monitoring with Zabbix.