nerdexam
Check_Point

156-315.77 · Question #582

You are troubleshooting a HTTP connection problem. You've started fw monitor -o http.pcap. When you openhttp. capwithWire sharkthere is only one line. What is the most likely reason?

The correct answer is D. Acceleration was turned on and therefore fw monitor sees only SYN. See the full explanation below for the reasoning.

Question

You are troubleshooting a HTTP connection problem. You've started fw monitor -o http.pcap. When you openhttp. capwithWire sharkthere is only one line. What is the most likely reason?

Options

  • Afw monitor was restricted to the wrong interface.
  • BLike SmartView Tracker only the first packet of a connection will be captured by fw monitor.
  • CBy default only SYN pakets are captured.
  • DAcceleration was turned on and therefore fw monitor sees only SYN.

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    16% (6)
  • C
    8% (3)
  • D
    73% (27)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-315.77 Practice