GSEC · Question #340
Use Wireshark to analyze Desktop;PCAP FILES/charile.pcap What is the destination IP address in packet #3?
The correct answer is F. 197.168.184.158. Wireshark displays the destination IP address for each packet in the packet list and detail panes; opening charlie.pcap and selecting packet 3 reveals the destination IP.
Question
Use Wireshark to analyze Desktop;PCAP FILES/charile.pcap What is the destination IP address in packet #3?
Exhibit
Options
- A192.168.184.2
- B192.168.184.73
- C192.168.184.129
- D192.168.184.111
- E197.168.184.13
- F197.168.184.158
- G192.168.184.201
- H192.168.184.17
- I19Z168.184222
How the community answered
(20 responses)- A10% (2)
- C15% (3)
- D5% (1)
- F70% (14)
Why each option
Wireshark displays the destination IP address for each packet in the packet list and detail panes; opening charlie.pcap and selecting packet 3 reveals the destination IP.
192.168.184.2 is a different address present elsewhere in the capture file, not the destination of the third packet.
192.168.184.73 appears in the PCAP but does not correspond to the destination IP field of packet number 3.
192.168.184.129 is another address in the capture that does not match the destination recorded in packet 3.
192.168.184.111 is present in the capture but is not the destination IP address of packet number 3.
197.168.184.13 is a plausible-looking address in the same subnet range but does not match packet 3's destination field.
Analysis of the charlie.pcap file in Wireshark shows that packet number 3 contains a destination IP address of 197.168.184.158, visible in the Internet Protocol layer of the packet detail pane when that packet is selected.
192.168.184.201 appears in the capture but is not the destination IP of the third packet.
192.168.184.17 is another address in the file but does not correspond to the destination of packet number 3.
19Z168.184222 contains the invalid character 'Z' and is not a syntactically valid IPv4 address.
Concept tested: Wireshark PCAP analysis - identifying packet destination IP
Source: https://www.wireshark.org/docs/wsug_html_chunked/ChWorkDisplayFilterSection.html
Topics
Community Discussion
No community discussion yet for this question.
