All labs
Simulated packet filtering
Apply display-filter style rules to a tiny authorized capture and read the conversation.
This is a labeled simulation, not Wireshark itself. Display-filter style: try dns. Applying a display filter does not delete other packets from the saved capture.
| # | Proto | Info |
|---|---|---|
| 1 | DNS | A? intranet.school.example — no reply yet |
| 2 | DNS | A? intranet.school.example (repeat) |
| 3 | TCP | SYN to :443 — never sent a name resolution |
| 4 | DHCP | Discover |
| 5 | ARP | Who has gateway? |
A site does not load. You see repeated DNS requests and no response. Next focus?