diff --git a/document.pdf b/document.pdf
index 71bf224..aaa691a 100644
Binary files a/document.pdf and b/document.pdf differ
diff --git a/document.tex b/document.tex
index e7458ff..eac1d94 100644
--- a/document.tex
+++ b/document.tex
@@ -29,10 +29,11 @@
 \begin{frame}
 \frametitle{Networking Basics}
 \begin{itemize}
-	\item How do you capture network traffic?
+	\item How do you get the traffic between Alice and Bob?
 \end{itemize}
+\vfill
 \begin{center}
-	\begin{tikzpicture}
+	\begin{tikzpicture}[scale=0.8]
 		\Vertex[ x=0, y=0, color=sigflagblue]{A}
 		\Vertex[ x=6, y=0, color=sigflagblue]{B}
 		\Vertex[ x=3, y=-3, Pseudo]{C}
@@ -41,7 +42,7 @@
 		\Text[ x=6, y=0,color=white, position=above,distance=5mm]{\texttt{Bob}}
 		\Edge[color=white,Direct](C)(D)
 		\Edge[color=white](A)(B)
-		\Plane[x=-3, y=2, width=2, height=2,image=logos/thinkface, NoBorder]
+		\Plane[x=-2.75, y=2.25, width=1.5, height=1.5,image=logos/thinkface, NoBorder]
 		\Text[ x=3, y=-3.5,color=white]{\texttt{Charlie}}
 	\end{tikzpicture}
 \end{center}
@@ -50,25 +51,58 @@
 \begin{frame}
 \frametitle{Networking Basics}
 \begin{itemize}
-	\item Use a managed switch and mirror the port of either Alice or Bob to the port of Charlie
+	\item Alice and Bob are connected directly: 
+	\begin{itemize}
+		\item Use two bridged interfaces on your computer and connect them to Alice and Bob
+	\end{itemize}
+	\item Alice and Bob are connected via a hub
+	\begin{itemize}
+		\item Just plug in to one port of the hub
+	\end{itemize}
 \end{itemize}
+\vfill
 \begin{center}
-	\begin{tikzpicture}
-	\Vertex[ x=0, y=0, color=sigflagblue]{A}
-	\Vertex[ x=6, y=0, color=sigflagblue]{B}
-	\Vertex[ x=3, y=-3, Pseudo]{C}
-	\Vertex[ x=3, y=0, opacity=0, style={color=sigflagblue}]{D}
-	\Text[ x=0, y=0,color=white, position=above,distance=5mm]{\texttt{Alice}}
-	\Text[ x=6, y=0,color=white, position=above,distance=5mm]{\texttt{Bob}}
-	\Edge[color=white,Direct](C)(D)
-	\Edge[color=white](A)(D)
-	\Edge[color=white](B)(D)
-	\Plane[x=-3, y=2, width=2, height=2,image=logos/trollface, NoBorder]
-	\Text[ x=3, y=-3.5,color=white]{\texttt{Charlie}}
+	\begin{tikzpicture}[scale=0.8]
+		\Vertex[ x=0, y=0, color=sigflagblue]{A}
+		\Vertex[ x=6, y=0, color=sigflagblue]{B}
+		\Vertex[ x=3, y=-3, Pseudo]{C}
+		\Vertex[ x=3, y=0, opacity=0, style={color=sigflagblue}]{D}
+		\Text[ x=0, y=0,color=white, position=below,distance=5mm]{\texttt{Alice}}
+		\Text[ x=6, y=0,color=white, position=below,distance=5mm]{\texttt{Bob}}
+		\Edge[color=white,Direct](C)(D)
+		\Edge[color=white](A)(B)
+		\Plane[x=-3, y=2, width=2, height=2,image=logos/trollface, NoBorder]
+		\Text[ x=3, y=-3.5,color=white]{\texttt{Charlie}}
 	\end{tikzpicture}
 \end{center}
 \end{frame}
 
+\begin{frame}
+\frametitle{Networking Basics}
+	\begin{itemize}
+		\item Alice and Bob are connected via a switch: 
+		\begin{itemize}
+			\item Managed switch: Mirror the port of either Alice or Bob to Charlie
+			\item Unmanaged switch: use a managed switch
+		\end{itemize}
+	\end{itemize}
+\vfill
+	\begin{center}
+		\begin{tikzpicture}[scale=0.8]
+		\Vertex[ x=0, y=0, color=sigflagblue]{A}
+		\Vertex[ x=6, y=0, color=sigflagblue]{B}
+		\Vertex[ x=3, y=-3, Pseudo]{C}
+		\Vertex[ x=3, y=0, opacity=0, style={color=sigflagblue}]{D}
+		\Text[ x=0, y=0,color=white, position=below,distance=5mm]{\texttt{Alice}}
+		\Text[ x=6, y=0,color=white, position=below,distance=5mm]{\texttt{Bob}}
+		\Edge[color=white,Direct](C)(D)
+		\Edge[color=white](A)(B)
+		\Plane[x=-3, y=2, width=2, height=2,image=logos/trollface, NoBorder]
+		\Text[ x=3, y=-3.5,color=white]{\texttt{Charlie}}
+		\end{tikzpicture}
+	\end{center}
+\end{frame}
+
 \begin{frame}
 \frametitle{Networking Basics}
 \begin{itemize}
@@ -103,33 +137,22 @@
 
 \end{frame}
 
-
-\begin{frame}
-	\frametitle{ANSI C}
-	\begin{exampleblock}{helloworld.c}
-		\lstinputlisting[language=c]{sources/helloworld.c}
-	\end{exampleblock}
-\end{frame}
-
+\section{Wireshark}
 \begin{frame}
-	\frametitle{Java}
-	\begin{alertblock}{helloworld.java}
-		\lstinputlisting[language=java]{sources/helloworld.java}
-	\end{alertblock}
-\end{frame}
+\frametitle{Wireshark}
+\begin{itemize}
+	\item Find the interesting parts in a dump: Filter packets
+	\begin{itemize}
+		\item tcpdump (CLI)
+		\item Wireshark (GUI)
+	\end{itemize}
+\end{itemize}
+\vfill
+\begin{block}{Example: Capturing traffic from \texttt{eth0}}
+	\lstinputlisting[language=bash,numbers=none]{sources/tcpdump.sh}
+\end{block}
 
-\begin{frame}
-	\frametitle{Go}
-	\begin{block}{helloworld.go}
-		\lstinputlisting[language=go]{sources/helloworld.go}
-	\end{block}
 \end{frame}
 
-\begin{frame}
-	\frametitle{Python}
-	\begin{exampleblock}{helloworld.py}
-		\lstinputlisting[language=Python]{sources/helloworld.py}
-	\end{exampleblock}
-\end{frame}
 
 	\end{document}