Now it's time to check your knowledge. Select the best response, and then check your answers, which can be found in the Assessment:
- To filter only on packets that you have marked in Wireshark, use _____ in the display filter.
- marked:all
- frame =black
- frame.marked==1
- marked: on
- ____ is used to increase the maximum WS that is allowed.
- NOP
- Window scale
- Timestamp
- SACK
- When using _____, the receiver will notify the sender if there are any missing packets.
- NOP
- Window scale
- Timestamp
- SACK
- TCP ends the session by exchanging packets indicating that each side should close their respective socket. TCP uses the _____ flag to indicate that this is the end of a conversation.
- END
- SYN
- FIN
- URG
- If, in the TCP header, the sequence number is 1 and the next sequence number is 937, the packet has _____ bytes of data.
- 32
- 380
- 936
- 33,304