Knowledge Hub
Wireshark: Packet Operations
TryHackMe19 answered prompts
Wireshark: Packet Operations TryHackMe walkthrough with 19 answered prompts and lab methodology notes.
Prompts and answers
-
Investigate the resolved addresses. What is the IP address of the hostname starts with "bbc"?
199.232.24.81
-
What is the number of IPv4 conversations?
435
-
How many bytes (k) were transferred from the "Micro-St" MAC address?
7474
-
What is the number of IP addresses linked with "Kansas City"?
4
-
Which IP address is linked with "Blicnet" AS Organisation?
188.246.82.7
-
What is the most used IPv4 destination address?
10.100.1.33
-
What is the max service request-response time of the DNS packets?
0.467897
-
What is the number of HTTP Requests accomplished by "rad[.]msn[.]com?
39
-
What is the number of IP packets?
81420
-
What is the number of packets with a "TTL value less than 10"?
66
-
What is the number of packets which uses "TCP port 4444"?
632
-
What is the number of "HTTP GET" requests sent to port "80"?
527
-
What is the number of "type A DNS Queries"?
51
-
Find all Microsoft IIS servers. What is the number of packets that did not originate from "port 80"?
21
-
Find all Microsoft IIS servers. What is the number of packets that have "version 7.5"?
71
-
What is the total number of packets that use ports 3333, 4444 or 9999?
2235
-
What is the number of packets with "even TTL numbers"?
77289
-
Change the profile to "Checksum Control". What is the number of "Bad TCP Checksum" packets?
34185
-
Use the existing filtering button to filter the traffic. What is the number of displayed packets?
261