Which statistic window would help analyze traffic composition by protocol?

Which statistic window would help analyze traffic composition by protocol?

• A. Flow Graphs
• B. IO Graphs
• C. Protocol Hierarchy Statistics
• D. Summary of Captured Packets

Answer: (C)

The main point is to understand how traffic is distributed across different protocols, so you can see the mix of protocol usage in the capture. Protocol Hierarchy Statistics shows a breakdown of all observed protocols, listing each one’s share of packets (and often bytes) and revealing subprotocols as well. This window lets you quantify the composition of traffic—how much HTTP, DNS, TLS, etc., is present and how dominant each protocol is. That direct view of protocol distribution makes it the best tool for analyzing traffic composition by protocol. Flow graphs, on the other hand, illustrate how conversations between endpoints relate to each other, not how the traffic is composed by protocol. IO graphs track data throughput over time, showing when traffic spikes occur but not the protocol mix. A summary of captured packets provides a count and basic metadata, but it doesn’t break down traffic by protocol.

The main point is to understand how traffic is distributed across different protocols, so you can see the mix of protocol usage in the capture. Protocol Hierarchy Statistics shows a breakdown of all observed protocols, listing each one’s share of packets (and often bytes) and revealing subprotocols as well. This window lets you quantify the composition of traffic—how much HTTP, DNS, TLS, etc., is present and how dominant each protocol is. That direct view of protocol distribution makes it the best tool for analyzing traffic composition by protocol.

Flow graphs, on the other hand, illustrate how conversations between endpoints relate to each other, not how the traffic is composed by protocol. IO graphs track data throughput over time, showing when traffic spikes occur but not the protocol mix. A summary of captured packets provides a count and basic metadata, but it doesn’t break down traffic by protocol.