PrepAway - Latest Free Exam Questions & Answers

What is the most likely reason?

You are troubleshooting a HTTP connection problem. You’ve started fw monitor -o http.pcap.
When you open http.pcap with Wireshark there is only one line. What is the most likely reason?

PrepAway - Latest Free Exam Questions & Answers

A.
fw monitor was restricted to the wrong interface.

B.
Like SmartView Tracker only the first packet of a connection will be captured by fw monitor.

C.
By default only SYN pakets are captured.

D.
Acceleration was turned on and therefore fw monitor sees only SYN.

3 Comments on “What is the most likely reason?


Leave a Reply