Common Configuration for Wireshark Lab Assessment Questions

Question Description

Lab Assessment Questions

1. What are some causes of the number of bytes on the wire exceeding the number of bytes being captured?

2. What are the source and destination MAC address in Frame 546?

3. What is the manufacturer’s specific ID for Intel Core?

4. What is the MAC address used for IPv4 multicast?

5. What version of IP is present in Frame 546? What is the source IP address?

6. At what times do the various steps of the Google three-step TCP handshake occur?

7. A DNS query failure is referred to a higher level Domain Name Server under what condition?