Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCED Exam - Topic 1 Question 78 Discussion

What feature of Wireshark allows the analysis of one HTTP conversation?
B) Follow TCP Stream
A) Follow UDP Stream
C) Conversation list > IPV4
D) Setting a display filter to 'tcp'

GIAC GCED Exam - Topic 1 Question 78 Discussion

Actual exam question for GIAC's GCED exam
Question #: 78
Topic #: 1
[All GCED Questions]

What feature of Wireshark allows the analysis of one HTTP conversation?

Show Suggested Answer Hide Answer
Suggested Answer: B

Follow TCP Stream is a feature of Wireshark that allows the analysis of a single TCP conversation between two hosts over multiple packets. Filtering packets using tcp in the filter box will return all TCP packets, not grouping by a single TCP conversation. HTTP is TCP not UDP, so you cannot follow a HTTP stream over UDP.


Contribute your Thoughts:

0/2000 characters
Niesha
2 days ago
I thought it might be A) Follow UDP Stream, but that doesn't seem right for HTTP. I guess it's B) after all.
upvoted 0 times
...
Giuseppe
7 days ago
I practiced a similar question, and I feel like the answer is definitely B) Follow TCP Stream.
upvoted 0 times
...
Francesco
12 days ago
I'm not entirely sure, but I remember something about using a conversation list. Maybe it's C)?
upvoted 0 times
...
Major
2 months ago
I think it's B) Follow TCP Stream because HTTP typically runs over TCP, right?
upvoted 0 times
...

Save Cancel