Heroes of Packet Analysis Quiz
9: Looking at the packets in the tracefile, which of the following statements is true (choose one)?
Two servers are connected to different server switches (L2). The two server switches are connected to the same distribution switch (L2). The distribution switch is connected to the core switch that provides the routing function in this network. Some retransmissions are detected on the servers and the source of the retransmissions need to be found. RFC’s 792 (ICMP), 793 (TCP), 2001 (Fast Retransmissions), 2018 (SACK) and 2883 (DSACK) can be helpful in answering this question.
A. The packet with sequence number 49 (frame 4) was received out of order by host 10.0.0.1.
B. Frame 14 is a retransmission of frames 4, 5, 6, 7, 8 and 11 because these frames were not received by host 10.0.0.1.
C. Frame 4 was dropped by an intermediate network device, therefor frames 5, 6 and 7 generated 3 duplicate ACKs that triggered the fast-retransmission in frame 14.
D. The ICMP redirect in frame 16 was caused by a wrongly configured subnet-mask on host 10.0.0.2.
Who asked the question:
Founder of SYN-bit
During his work Sake started developing functionality for Wireshark. Things that he missed while working with Wireshark in his day-to-day job. He also enhanced multiple protocol dissectors to suit his analysis needs. In 2007 Sake was asked by Gerald to join the Wireshark Core Development team.
Join the conversation
Find us on one of the following social platforms to get a sneak peek into the network monitoring world.
Be Part of the Team
We are always on the lookout for passionate people, who are open to change and innovation.
Check the Careers Page