After nine industrial protocol investigations, an OT researcher explains how smaller labs, packet captures, and sharper questions improved the work.