So my homework for the weekend is to identify each byte in several packet captures. My question is: Is layer 2 always the Ethernet Header (destination MAC, source MAC, and Protocol type)?
Also, when they ask for the Application Protocol I should refer to the Source Port not the Destination...