Wireshark WCNA Exam - Topic 4 Question 25 Discussion

Actual exam question for Wireshark's WCNA exam

Question #: 25
Topic #: 4

[All WCNA Questions]

Which statement about packet timestamps is correct?

ASorting on packet timestamps alters the packet numbers in the trace file.

BPacket timestamps for pcap files can denote time to the nanosecond level.

CYou can alter packet timestamps of separate packets in a trace file using Editcap.

DPacket timestamps are provided by WinPcap, libpcap, or AirPcap at the time packets are captured.

Show Suggested Answer

Suggested Answer: D

by Nieves at Apr 07, 2026, 09:28 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

5 days ago

I think option D sounds familiar because I remember reading that timestamps are generated during the capture process.

upvoted 0 times

...