Pre-Quiz (Wireshark)

How do you start capturing packets in Wireshark?

• Select the "Capture" > "Start" option
• Select a network interface and click "Start"
• Click on "File" > "New Capture"
• Use the "Statistics" menu to begin capture

What does the "Follow TCP Stream" feature do in Wireshark?

• Analyzes encrypted packet data
• Shows the entire communication between two devices over TCP
• Filters out unwanted traffic
• Displays detailed packet headers

What does the "Window Size" field in a TCP segment represent?

• The total data size in the packet
• The amount of data the receiver can accept at once
• The size of the TCP header
• The total number of packets received

What is the purpose of the "Display Filter" in Wireshark?

• To show only packets with certain characteristics
• To limit which packets are captured
• To summarize the captured data
• To show only the TCP traffic

How do you stop a packet capture in Wireshark?

• Click "File" > "Stop"
• Click the red square "Stop" button
• Use the "Capture" menu and select "Stop"
• Use the "Statistics" menu to end capture

How would you filter DNS traffic in Wireshark?

• Use the filter `dns`
• Use the filter `ip.addr == 8.8.8.8`
• Use the filter `tcp.port == 53`
• Use the filter `http`

What is the "Statistics" menu used for in Wireshark?

• To configure capture settings
• To view network traffic analysis like protocol distribution and flow graphs
• To save captured packets
• To view detailed packet data

How can you analyze the packet payload in Wireshark?

• Click on the packet in the "Packet Details" pane
• Use the "Packet Bytes" pane to view raw data
• Click "Statistics" to analyze data flow
• Use the "Coloring Rules" feature to highlight the payload

What is the primary purpose of the "Expert Info" feature in Wireshark?

• To analyze the payload of packets
• To summarize packet data for troubleshooting
• To show potential network problems and errors
• To display all captured traffic in real-time

What does the "Time" column in Wireshark represent?

• Total capture duration
• The timestamp when the packet was captured relative to the first packet
• The time spent on packet transmission
• Arrival time of the packet on the network