Wireshark D3 V1 - How is traffic captured

The video tutorial provides an overview of packet capture engines for different operating systems, highlighting the use of Libby Cap for Unix/Linux and NP cap for Windows. It explains the three main phases of packet analysis: capturing, decoding, and displaying traffic. The tutorial also covers the decoding process using Wireshark, detailing the Ethereal Packet Analyzer engine and the role of protocol dissectors. Finally, it offers an overview of the Wireshark interface, including the packet list, packet details, and the intelligence scrollbar.

Which capture engine is recommended for modern Windows systems?

• Libby Cap

• Win P Cap

• NP Cap

• Ethereal

What is the first phase in packet analysis using Wireshark?

• Decoding the traffic

• Capturing the traffic

• Displaying the traffic

• Filtering the traffic

What does the Ethereal Packet Analyzer engine (EPON) do in Wireshark?

• Captures traffic from the network

• Filters the traffic

• Decodes traffic into a human-readable format

• Displays the packet list

Which section of the Wireshark interface shows all the packets in the current capture?

• Packet Details

• Packet Bytes

• Intelligence Scrollbar

• Packet List

How can you view the raw data as bits in Wireshark?

• By clicking on the intelligence scrollbar

• By using the display filter

• By right-clicking in the packet details section

• By selecting the packet list