Heroes of Packet Analysis Quiz

Enter the competition and match your skills to those of the Packet Analysis Heroes! Answer all questions correctly for a chance to win a $500 Amazon Gift Card.

Navigate through the questions by clicking on the numbers below.

1   |   2   |    3   |   4   |   5   |   6   |   7   |   8   |   9   |   10   |  11   |  12   |   13   |   14

9: Looking at the packets in the tracefile, which of the following statements is true (choose one)?

Question Background:

Two servers are connected to different server switches (L2). The two server switches are connected to the same distribution switch (L2). The distribution switch is connected to the core switch that provides the routing function in this network. Some retransmissions are detected on the servers and the source of the retransmissions need to be found. RFC’s 792 (ICMP), 793 (TCP), 2001 (Fast Retransmissions), 2018 (SACK) and 2883 (DSACK) can be helpful in answering this question.

Download the pcap file › 


Click on the image to zoom in.

A. The packet with sequence number 49 (frame 4) was received out of order by host 10.0.0.1.
B. Frame 14 is a retransmission of frames 4, 5, 6, 7, 8 and 11 because these frames were not received by host 10.0.0.1.
C. Frame 4 was dropped by an intermediate network device, therefor frames 5, 6 and 7 generated 3 duplicate ACKs that triggered the fast-retransmission in frame 14.
D. The ICMP redirect in frame 16 was caused by a wrongly configured subnet-mask on host 10.0.0.2.

Who asked the question:

Sake Blok

Founder of SYN-bit

Sake has been analyzing packets for over 15 years. While working for a reseller of networking equipment, he discovered many bugs in devices from multiple vendors and presented his findings to the vendors to fix the issues. He also discovered many configuration issues that have led to functional problems or performance issues in applications running over the network. These issues were then resolved based on the reports presented to his customers. In 2009, Sake started the company SYN-bit to provide Network Analysis and troubleshooting services to enterprises with a complex IT infrastructure.

During his work Sake started developing functionality for Wireshark. Things that he missed while working with Wireshark in his day-to-day job. He also enhanced multiple protocol dissectors to suit his analysis needs. In 2007 Sake was asked by Gerald to join the Wireshark Core Development team.

Please choose your answer via the form.

Answer *:(* required fields)

Answer all questions correctly for a chance to win a $500 Amazon Gift Card.

Join the conversation

Find us on one of the following social platforms to get a sneak peek into the network monitoring world.

Be Part of the Team

We are always on the lookout for passionate people, who are open to change and innovation.
Check the Careers Page

Our Blog

Find the latest insights on network monitoring & analysis so you know which solution suits you best.
Check the Latest Insights