14 Questions
What are the top three protocols used in the traffic captured in the provided file, based on the number of packets?
Identify the source and destination IP addresses that are most active in the packet capture.
Find and describe the details of the first DNS query in the capture.
What is the total number of bytes transmitted in the session from the source IP address identified as most active?
How many TCP and UDP packets are in the capture? Provide the numbers and percentages of the total packets.
List all the HTTP request methods observed in the capture and the number of times each method was used.
Are there any signs of unusual or suspicious activity, such as port scanning or repeated failed connection attempts? Explain your findings.
How many packets are part of a TLS or SSL session, and what percentage of the total traffic does this represent?
Describe the protocol hierarchy observed in the capture, highlighting the main layers and their respective data volumes.
dentify a session (TCP or UDP) with the most packets exchanged and provide a summary of its timeline and key characteristics.
How can you filter the traffic in Wireshark to show only packets sent from one IP address ?
Which network layer protocols are present in the capture?
What are the top five ports used in the capture based on total number of packets?
What is the size of the largest packet in the capture, and which protocol does it belong to?
Test your knowledge on identifying the top three protocols based on the number of packets in captured traffic. Determine the most prominent protocols observed in network communications.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
