From the course: Wireshark Essential Training

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Solution: Examining a packet capture

Solution: Examining a packet capture - Wireshark Tutorial

From the course: Wireshark Essential Training

Solution: Examining a packet capture

(bright music) - [Instructor] Okay. Let's go through this challenge together. You might want to have the document handy so that you can follow along. I'm in CloudShark. And at the first packet capture it says, once in, go to Analysis Tools and GeoIP World Map. Where are the end points? Well, the end points are either side of the conversation. We'll drop down Analysis Tools and look at GeoIP World Map. Now this is a handy little feature that's built into CloudShark. We can do this in Wireshark but we'd have to load the databases. And you can see the end points. And here we see one in France and one in America. All right. Then it says to download it and open it in Wireshark. All right. We'll modify this view here. And we'll take a look at frame two. Number two, the question is, in DNS, a time to live value specifies how long a resolver is supposed to cache the DNS query before the query expires. Now, you're…

Contents