Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Wireshark WCNA Exam - Topic 4 Question 25 Discussion

Which statement about packet timestamps is correct?
D) Packet timestamps are provided by WinPcap, libpcap, or AirPcap at the time packets are captured.
A) Sorting on packet timestamps alters the packet numbers in the trace file.
B) Packet timestamps for pcap files can denote time to the nanosecond level.
C) You can alter packet timestamps of separate packets in a trace file using Editcap.

Wireshark WCNA Exam - Topic 4 Question 25 Discussion

Actual exam question for Wireshark's WCNA exam
Question #: 25
Topic #: 4
[All WCNA Questions]

Which statement about packet timestamps is correct?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Nieves at Apr 07, 2026, 09:28 AM

Limited Time Offer

25%

Off

Get Premium WCNA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Leatha
2 hours ago
I think D is correct. Timestamps are captured when packets are received.
upvoted 0 times
...
Cecil
5 days ago
I thought timestamps were only accurate to microseconds, not nanoseconds!
upvoted 0 times
...
Roselle
10 days ago
A is misleading, sorting doesn't change packet numbers.
upvoted 0 times
...
Antione
16 days ago
Wait, can you really change timestamps with Editcap? Sounds sketchy.
upvoted 0 times
...
Kami
2 months ago
Totally agree with D, timestamps are captured in real-time.
upvoted 0 times
...
Kattie
2 months ago
B is correct, pcap files can have nanosecond precision.
upvoted 0 times
...
Galen
3 months ago
I vaguely recall something about sorting affecting packet numbers, which makes me lean towards option A being true, but I need to double-check that.
upvoted 0 times
...
Mireya
3 months ago
I practiced a similar question about packet timestamps last week, and I remember that altering timestamps is possible, so option C could be right.
upvoted 0 times
...
Lashawn
3 months ago
I'm not entirely sure, but I feel like option B might be incorrect since I thought pcap files had limitations on timestamp precision.
upvoted 0 times
...
Georgene
3 months ago
I think option D sounds familiar because I remember reading that timestamps are generated during the capture process.
upvoted 0 times
...

Save Cancel