Questions

Now, it's time to check your knowledge. Fill in the blanks from the multiple choices and then check your answers, which can be found in the Assessments appendix:

1. _____ is a capture engine originally developed for Unix-like OSes and is baked into Snort, TCPDUMP, and other packet analyzers to grab packets as they come off the network interface:
   1. Capinfos
   2. MATE
   3. libpcap
   4. Transum
2. Radiotap headers can be used when troubleshooting Wi-Fi, as they can provide a lot of information associated with each _____frame:
   1. 802.3
   2. 802.15
   3. 802.11
   4. 802.8
3. _____ is a program that will identify and print a packet's geolocation by using IPv4 and IPv6 addresses:
   1. dftest
   2. tshark
   3. mergecap
   4. mmdbresolve
4. _____ is the newest capture engine option for Wireshark, with many benefits and features to enhance your packet capture:
   1. AirPcap
   2. Npcap
   3. WinPcap
   4. libpcap
5. One of Wireshark's tools, _____ allows you to adjust timestamps, delete packets, and convert file formats:
   1. Editcap
   2. Capinfos
   3. dftest
   4. Reordercap
...