Analyze a TCP stream in a packet capture

Packet capture turns TCP from a textbook into observable state. A good analysis tracks the five-tuple, handshake, sequence/acknowledgement numbers, window advertisements, retransmissions, round-trip timing and connection teardown. The goal is to reconstruct the story the endpoints are telling each other.