Discuss Wireshark WCNA Exam Topic 4 Question 25

Which statement about packet timestamps is correct?

ASorting on packet timestamps alters the packet numbers in the trace file.

BPacket timestamps for pcap files can denote time to the nanosecond level.

CYou can alter packet timestamps of separate packets in a trace file using Editcap.

DPacket timestamps are provided by WinPcap, libpcap, or AirPcap at the time packets are captured.

Suggested Answer: D

Get Premium WCNA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

21 comments · newest first

Lenny 1 month ago

D is definitely the best choice. Timestamp accuracy is crucial.

Joesph 1 month ago

C is possible, but it feels risky to alter timestamps.

Walton 1 month ago

B is interesting, but I doubt pcap files go to nanoseconds.

Stefany 2 months ago

A seems misleading. Sorting shouldn't change packet numbers.

Terrilyn 2 months ago

I agree with D too. It makes sense for real-time capture.

Selma 2 months ago

I think D is correct. Timestamps are captured when packets are received.

Davida 2 months ago

D is definitely the best choice. Timestamp accuracy is crucial.

Eura 2 months ago

C is possible, but it feels risky to alter timestamps.

Tina 2 months ago

B is interesting, but I doubt pcap files go to nanoseconds.

Renea 3 months ago

A seems misleading. Sorting shouldn't change packet numbers.

Stefania 3 months ago

I agree with D too. It makes sense for real-time capture.

Leatha 3 months ago

I think D is correct. Timestamps are captured when packets are received.

Cecil 3 months ago

I thought timestamps were only accurate to microseconds, not nanoseconds!

Roselle 3 months ago

A is misleading, sorting doesn't change packet numbers.

Antione 4 months ago

Wait, can you really change timestamps with Editcap? Sounds sketchy.

Kami 5 months ago

Totally agree with D, timestamps are captured in real-time.

Kattie 5 months ago

B is correct, pcap files can have nanosecond precision.

Galen 6 months ago

I vaguely recall something about sorting affecting packet numbers, which makes me lean towards option A being true, but I need to double-check that.

Mireya 6 months ago

I practiced a similar question about packet timestamps last week, and I remember that altering timestamps is possible, so option C could be right.

Lashawn 6 months ago

I'm not entirely sure, but I feel like option B might be incorrect since I thought pcap files had limitations on timestamp precision.

Georgene 6 months ago

I think option D sounds familiar because I remember reading that timestamps are generated during the capture process.

Wireshark WCNA Exam - Topic 4 Question 25 Discussion