200-201 · Question #105
Refer to the exhibit. Which packet contains a file that is extractable within Wireshark?
The correct answer is D. 2542. Packet 2542 likely contains a complete file object transferred via a protocol like HTTP, FTP, or SMB, which Wireshark's 'Export Objects' feature can extract.
Question
Refer to the exhibit. Which packet contains a file that is extractable within Wireshark?
Exhibit
Options
- A2317
- B1986
- C2318
- D2542
How the community answered
(69 responses)- A14% (10)
- B9% (6)
- C4% (3)
- D72% (50)
Why each option
Packet 2542 likely contains a complete file object transferred via a protocol like HTTP, FTP, or SMB, which Wireshark's 'Export Objects' feature can extract.
Packet 2317 is likely a control or non-final data packet that does not contain a fully formed, extractable file object.
Packet 1986 is likely a control or non-final data packet that does not contain a fully formed, extractable file object.
Packet 2318 is likely a control or non-final data packet that does not contain a fully formed, extractable file object.
In Wireshark, files or objects transferred over certain application layer protocols like HTTP, FTP, or SMB can often be extracted using the 'File > Export Objects' feature. If packet 2542 represents a complete response (e.g., HTTP 200 OK) containing a file with relevant headers (like Content-Type and Content-Length), it would be available for extraction.
Concept tested: Wireshark file extraction (Export Objects)
Source: https://www.wireshark.org/docs/wsug_html_chunked/ChIOExportObjects.html
Topics
Community Discussion
No community discussion yet for this question.