Do a simple example example record and look at the pattern and sizing of the send and receive buffers. It's pretty easy after that, but takes a fair amount of time especially with dynamic response sizes. This used to be an integral part of the LR exams. Was one of the hardest part but turns out one of the most useful exercises. That was back in the days when it was a take home test and you could work and learn your way through it. Honestly, do the simple record of say just opening your web browser of choice and then quitting. Then looking at the send and receives going on. That should help a lot and expose you to what's behind the protocol layers too.
