Q: 6
HOTSPOT An app on a user's computer is having problems downloading dat a. The app uses the following URL to download data: https://www.companypro.net:7100/api You need to use Wireshark to capture packets sent to and received from that URL. Which Wireshark filter options would you use to filter the results? Complete the command by selecting the correct option from each drop-down list. Note: You will receive partial credit for each correct selection. 
Your Answer
Discussion
I don't think you'd want "https" as the protocol here, since Wireshark works at the TCP level for ports like 7100. The trap is assuming protocol = https, but it's actually just tcp with port 7100. Anyone disagree?
Nah, not protocol https here, it should be tcp port 7100. Common trap is picking https since it's in the URL.
Just to confirm, are we talking about the display filter in Wireshark or the capture filter here?
tcp and port 7100. Wireshark doesn't filter by https, just tcp for encrypted traffic like this.
tcp port 7100
tcp port 7100
Yeah, Wireshark uses tcp for this since https is actually just encrypted http over tcp and it doesn’t recognize https as its own protocol filter. tcp port 7100
Hmm, I've seen similar questions in practice exams and usually go for protocol https with port 7100.
Had something like this in a mock, I picked protocol https with port 7100 at first. Thought since the URL was https it made sense, but Wireshark doesn't filter by 'https' protocol, only tcp. I think using protocol https here is a common mistake. Someone else can confirm?
protocol https, port 7100
Be respectful. No spam.
