Fundamentals of InfoSecintermediate
Match each Wireshark feature or filter with its described use. All activities assume authorization.
Answer
`ip.addr==10.0.0.5` - Filter packets associated with the specified Internet Protocol (IP) address, Follow TCP Stream - View a Transmission Control Protocol (TCP) conversation together, Export Objects (HTTP) - Extract objects carried in captured Hypertext Transfer Protocol (HTTP) traffic, Coloring Rules - Use visual colors to help distinguish protocols or packet types
Explanation
### Why this is right
Each item describes a distinct way to focus or interpret a packet capture: address filtering selects packets, stream following groups a conversation, object export extracts HTTP content, and coloring rules make packet categories easier to distinguish.
### The concept
Wireshark provides filters and analysis views to make a capture easier to examine. A filter does not create traffic; it selects packets already captured. Following a stream provides context across packets, while exporting objects retrieves content that was transmitted and captured. Because exported material can be sensitive, handle it under the same authorization and data-protection rules as the capture.
### The pairs
| Item | Matches | Why |
|---|---|---|
| `ip.addr==10.0.0.5` | Filter packets associated with the specified Internet Protocol (IP) address | The address expression limits the displayed packets to those associated with that address. |
| Follow TCP Stream | View a Transmission Control Protocol (TCP) conversation together | The feature organizes packets from a TCP conversation into a stream view. |
| Export Objects (HTTP) | Extract objects carried in captured Hypertext Transfer Protocol (HTTP) traffic | It can save objects present in the HTTP packets in the capture. |
| Coloring Rules | Use visual colors to help distinguish protocols or packet types | Colors provide a visual cue and do not change packet contents. |
### Terms
- **IP**: Internet Protocol. Provides addressing for packets across networks.
- **TCP**: Transmission Control Protocol. Carries reliable, ordered data between endpoints.
- **HTTP**: Hypertext Transfer Protocol. Carries web requests and responses.
### Remember
Filters narrow a view, stream-following restores conversation context, and export extracts captured content.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free