+1. Although you know things are _bad_ when you end up reaching for Wireshark / tcpdump normally!