When asked for advice on how to be a proficient protocol analyst, I give 2 pieces of advice;
Practice looking for patterns. In most cases, you are looking for patterns or a break in a pattern.....
Replay: Wireshark Display IP Subnet Filter - Tony Fortunato