It had its use, back then it was mostly intranets, so it was useful, back then there werent much concepts of spoofing, vpn, tor like layering and routing, encapsulation, etc Yes in modern world on public internet it might not be much useful

But still it gives basic overview a starting point for any forensic investigation or debugging network problemns