| 1. What are some causes of the number of bytes on the wire exceeding the number of bytes being captured? |
| 2. What are the source and destination MAC address in Frame 546? |
| 3. What is the manufacturer specific ID for Intel Core? |
| 4. What is the MAC address used for IPv4 multicast? |
| 5. What version of IP is present in Frame 546? What is the source IP address? |
| 6. At what times did the various steps of the Google three step TCP handshake occur? |
| 7. A DNS query failure is referred to a higher level Domain Name Server under what condition? |
| 8. The descriptive text that accompanies the packet analysis is provided by Wireshark. True or False? |
