Wireshark and tshark past the basics — capture versus display filters, following streams, decrypting TLS, and scripting tshark for batch analysis — the parts that turn 'I took a capture' into 'I found the problem in thirty seconds'.
Packet-Capture
-
Wireshark and tshark for Engineers: Capture Filters, Display Filters, and Scripting Batch Analysis