What feature of Wireshark allows the analysis of one HTTP conversation?

The correct answer is B. Follow TCP Stream. Follow TCP Stream is a feature of Wireshark that allows the analysis of a single TCP conversation between two hosts over multiple packets. Filtering packets using tcp in the filter box will return all TCP packets, not grouping by a single TCP conversation. HTTP is TCP not UDP…

Enterprise Network Security and Network Services Security

Question

Options

AFollow UDP Stream
BFollow TCP Stream
CConversation list > IPV4
DSetting a display filter to `tcp'

How the community answered

(54 responses)

A
2% (1)
B
91% (49)
C
4% (2)
D
4% (2)

Explanation

Follow TCP Stream is a feature of Wireshark that allows the analysis of a single TCP conversation between two hosts over multiple packets. Filtering packets using tcp in the filter box will return all TCP packets, not grouping by a single TCP conversation. HTTP is TCP not UDP, so you cannot follow a HTTP stream over UDP.

Topics

#Wireshark#TCP stream analysis#packet capture#HTTP traffic

Community Discussion

No community discussion yet for this question.

Full GCED Practice