Question 11
You can use the display filter ss1. record.content_type = =22 to view just the SSL/TLS handshakepackets.
Question 12

Which statement about this TCPstream is correct?
Question 13
Port resolution can use the TCP/IP stack services file to determine the correct destination port to use in the TCP or UDP header.
Question 14
How do you quickly spot large gapsin time between packets in a trace file containing 6,000 packets?
Question 15
Which transport is used for multicast and broadcast traffic?