background image
Review Questions
149
9.
While looking at the capture screen of the network analyzer, you see
the following information. Explain what it means.
224 Total Frames
128 Frames Accepted
A.
The processor on the analyzer is not fast enough to keep up with
the line speed, so some packets were missed.
B.
Only 128 frames were sent to the analyzer.
C.
There is a serious problem on the network: many packets are cor-
rupted or dropped before they make it to the analyzer.
D.
A capture filter was applied, and only 128 of the 224 packets
match the capture filter's criteria.
10.
Imagine that you finish filling the capture buffer of a network analyzer
without using a capture filter. How do you display packets only from
a specific server?
A.
Configure and use a display filter.
B.
Cut and paste relevant packets into a text file.
C.
Start the capture over, but this time use a capture filter.
D.
There is no way to accomplish this task.
11.
Use the following decode information to determine what type of
packet you are looking at. (Choose all that apply.)
Flags: 0x80 802.3
Status: 0x00
Packet Length:64
Timestamp: 10:19:42.712000 12/04/1998
802.3 Header
Destination: 09:00:07:ff:ff:ff
[0-5]
Source: 00:10:7b:a4:4a:a1
[6-13]
LLC Length: 37
802.2 Logical Link Control (LLC) Header
Dest. SAP: 0xaa SNAP [14]
Source SAP: 0xaa SNAP Null LSAP [15]
Command: 0x03
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com