When I did the ISC2 course on DoS, I felt that the information on some parts was insufficient and sometimes too optimistic.
I tried to re-create the network that was used by the training on VirtualBox and GNS3. For VirtualBox, I use Vagrant to create the virtual machines and provision them. GNS3 is used for easy access to network interfaces. GNS3 makes it possible to use wireshark on those interfaces.
Being a different network, some of the behaviour might also be different.