I started the network forensics security contest at DEFCON (separate from the wall of sheep contest that I believe is still running) and one of my favorite challenges was recovering printer traffic. The contest was a race to see who could finish X number of challenges first with each round getting harder. The last puzzle was a TCP dump of MiTM’d printer traffic. I intended for them to carve out the document data and feed it into Gutenprint, but in the name of speed they speed over to Fry’s, shoved a piece of promo paper into a printer and powered it on, then replayed the TCP traffic to the printer. Probably one of my favorite solutions. About an hour later they also did it via Gutenprint just to show they could.