@SecurityWriter oh man, I need that mug. I spent a month of my life last summer teaching the networking department how to properly perform a long running capture to get a PCAP for a relatively rare event. Teaching the network team to do this is *not* in my JD or expected responsibilities, but apparently I was the only one with the necessary experience since I cut my teeth in telecom doing VoIP stuff. Ended up proving a bug in a network device that the vendor acknowledged and fixed! But what an aggravating process.