nerdexam
Check_Point

156-915.77 · Question #118

(Topic 11) You are troubleshooting a HTTP connection problem. You've started fw monitor -o http.pcap. When you open http.pcap with Wireshark there is only one line. What is the most likely reason?

The correct answer is D. Acceleration was turned on and therefore fw monitor sees only SYN. See the full explanation below for the reasoning.

Question

  • (Topic 11)

You are troubleshooting a HTTP connection problem. You've started fw monitor -o http.pcap. When you open http.pcap with Wireshark there is only one line. What is the most likely reason?

Options

  • Afw monitor was restricted to the wrong interface.
  • BLike SmartView Tracker only the first packet of a connection will be captured by fw
  • CBy default only SYN pakets are captured.
  • DAcceleration was turned on and therefore fw monitor sees only SYN.

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    15% (6)
  • C
    8% (3)
  • D
    75% (30)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-915.77 Practice