Quiz 6

Clear all display filters Filter for tcp.stream eq 137 The Round-Trip Time (RTT) is the duration from when a browser sends a request to when it receives a response from a server. This metric can be used to determine page load time and network latency. What is the RTT for packet number 12364?

.000641831

Clear all display filters Filter for udp What is the protocol number for UDP in hexidecimal notation?

0x11

clear all display filters filter for tcp.stream eq 137 The POST command is used when a client wants to upload something to a server How many TCP segments were required to complete the upload?

14

Clear all display filters Filter for http CTRL F Validate the criteria - Packet List > Narrow & Wide > String Type POST into search filed A POST request was made for /tcp-lab/upload-post. What was the total amount of data in bytes transferred to the server?

153396

Clear all display filters Filter for http CTRL F Validate the criteria - Packet List > Narrow & Wide > String Type POST into search filed A POST request was made for /tcp-lab/upload-post. What is the IP address and Port Number associated with the client? Use the following format for IP address and Port Number - 123.123.123.123:80

192.168.122.115:49850

Clear all display filters Filter for http CTRL F Validate the criteria - Packet List > Narrow & Wide > String Type POST into search field A POST request was made for /tcp-lab/upload-post What is the header length associated with TCP?

20 bytes

Clear all display filters Filter for udp.stream eq 0 Which of the following is an IP address provided for www.bing.com?

204.79.197.200

Clear all display filters Filter for frame.number == 4331 What is the calculated window size?

262144

Clear all display filters Filter for http Identify the GET request for /tcp-lab/alice.txt Follow the tcp stream associated with this request Click on the SYN packet There are many details provided by Wireshark for the Transmission Control Protocol. What is the hex associated with the "Sequence number" data?

3f 74 39 4c

Clear all display filters Filter for udp Select any packet How many fields are associated with the UDP header?

4 (Source Port, Destination Port, Length, Checksum)

Clear all display filters Filter for frame.number == 4331 How many bytes are in the TCP payload?

403 bytes

Follow the following steps to answer the question: Clear all display filters Filter for http Identify the GET request for /tcp-lab/alice.txt Follow the tcp stream associated with this request Which of the following packet numbers are associate with the three-way handshake for this communication stream?

4320, 4328, 4330

Clear all display filters Filter for http Identify the GET request for /tcp-lab/alice.txt Follow the tcp stream associated with this request What is the IP address used by the server?

44.231.70.183

Clear all display filters Filter for http CTRL F Validate the criteria - Packet List > Narrow & Wide > String Type POST into search filed A POST request was made for /tcp-lab/upload-post. What is the IP address and Port Number associated with the server? Use the following format for IP address and Port Number - 123.123.123.123:80

44.231.70.183:80

Clear all display filters Filter for http Identify the GET request for /tcp-lab/alice.txt Follow the tcp stream associated with this request What is the source port used by the client?

49825

clear all display filters filter fo rudp.stream eq 107 What is the ephemeral port associated with the client?

64928

What is the largest possible source port for TCP or UDP?

65,535

Clear all display filters Filter for udp What percentage of total packets are UDP?

7.2%

clear all display filters filter for http Identify GET request for /tcp-lab/alice.txt Follow the tcp stream associated with the request

PSH ACK

Clear all display filters Filter for http A GET request was made for /tcp-lab/alice.txt What host was requested in this connection?

wireshark.cyberapolis.com