GCIA: GIAC Certified Intrusion AnalystDemo

Question

You are using a Windows-based sniffer called ASniffer to capture network data traffic. From the sniffer log, you extracted the following IP header information for a randomly selected packet:

45 00 00 28 00 00 40 00 29 06 43 CB D2 D3 82 5A 3B 5E AA 72

Which TTL value in decimal and which protocol are carried in this packet’s IP header?

A 41, UDP
B 16, ICMP
C 41, TCP
D 16, UDP

Explanation

In an IPv4 header, the TTL field is the ninth byte and the Protocol field is the tenth byte. 29 in hexadecimal equals 41 in decimal, and protocol value 06 denotes TCP.

GCIA: GIAC Certified Intrusion AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ401

Community Discussion