When configuring a long term, forensic packet capture and saving all packets to disk which of the following is not a consideration?
Total capture storage space
Individual trace file size
Real-time packet decodes
Analyzer location
Correct answer: B
Question 2
You are performing a multiple adapter channel aggregation capture to troubleshoot a VoIP roaming problem and would like to measure the roaming time from the last VoIP packet sent on the old AP’s channel to the first VoIP packet sent on the new AP’s channel. Which timing column in the packet view would measure this for you?
Delta
Absolute
Roaming
Relative
Correct answer: C
Question 3
The network administrator at ABC Engineering has taken a large packet capture from one of their APs running in monitor mode. She has very little knowledge of 802.11 protocols but would like to use the capture file to evaluate the overall health and performance of their wireless network. When she asks your advice, which tool do you recommend she opens the packet capture file with?