This note is intended for students in days one and two of TCP/IP Weapons School on 3-4 December 2006 at USENIX LISA in Washington, DC. The traces we will analyze are available at www.taosecurity.com. There are still a few seats available for Part 2, which covers a little more on layer 3 and then covers layers 4,5,6 and probably 7. I will post a summary of Part 2 of that class’ contents soon.”]
Source: https://taosecurity.blogspot.com/2006/12/notes-for-tcpip-weapons-school-part-1.html