Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCED Exam - Topic 1 Question 78 Discussion

What feature of Wireshark allows the analysis of one HTTP conversation?
B) Follow TCP Stream
A) Follow UDP Stream
C) Conversation list > IPV4
D) Setting a display filter to 'tcp'

GIAC GCED Exam - Topic 1 Question 78 Discussion

Actual exam question for GIAC's GCED exam
Question #: 78
Topic #: 1
[All GCED Questions]

What feature of Wireshark allows the analysis of one HTTP conversation?

Show Suggested Answer Hide Answer
Suggested Answer: B

Follow TCP Stream is a feature of Wireshark that allows the analysis of a single TCP conversation between two hosts over multiple packets. Filtering packets using tcp in the filter box will return all TCP packets, not grouping by a single TCP conversation. HTTP is TCP not UDP, so you cannot follow a HTTP stream over UDP.


Contribute your Thoughts:

0/2000 characters
Jennie
3 days ago
Wait, is it really B? I thought it could be D too.
upvoted 0 times
...
Howard
8 days ago
B is correct! It shows the whole conversation.
upvoted 0 times
...
Hollis
13 days ago
I thought it was A) Follow UDP Stream, but I guess not.
upvoted 0 times
...
Alexia
19 days ago
Definitely B) Follow TCP Stream. That's the one!
upvoted 0 times
...
Pamela
24 days ago
I agree, B is the way to go!
upvoted 0 times
...
Eliseo
29 days ago
Wait, is it really just B? I thought it could be more complex.
upvoted 0 times
...
Tamala
1 month ago
B is correct, but why would anyone use UDP for HTTP?
upvoted 0 times
...
Carmela
1 month ago
I thought it was A) Follow UDP Stream at first.
upvoted 0 times
...
Shannan
1 month ago
Definitely B) Follow TCP Stream. That's the one!
upvoted 0 times
...
Niesha
2 months ago
I thought it might be A) Follow UDP Stream, but that doesn't seem right for HTTP. I guess it's B) after all.
upvoted 0 times
...
Giuseppe
2 months ago
I practiced a similar question, and I feel like the answer is definitely B) Follow TCP Stream.
upvoted 0 times
...
Francesco
2 months ago
I'm not entirely sure, but I remember something about using a conversation list. Maybe it's C)?
upvoted 0 times
...
Major
4 months ago
I think it's B) Follow TCP Stream because HTTP typically runs over TCP, right?
upvoted 0 times
...

Save Cancel