New to packet and flow analysis. Some related basic Qs:
Having a .PCAP file, how does one determine if the entirety of packets were captured?
Would the size of the entire packet, and their collective size, be the representation of the amount of data across the wire?
I've been using tcpdump.