A learner needs to demonstrate the ability to capture live network packets, filter for specific protocols, and examine packet headers to distinguish normal from suspicious traffic. Which NDE module and toolset directly supports building these skills?