Which action displays the conversation in a human readable format for UDP traffic?

• A. Analyze ->Follow -> TLS Stream
• B. Right click -> Follow UDP Stream
• C. Right click -> Follow TCP Stream
• D. Analyze ->Expert Info

Answer: (B)

When you want to see what's exchanged over a UDP conversation in a readable way, you use the Follow UDP Stream feature. UDP is a datagram protocol and doesn’t establish a persistent connection or guarantee order, but Wireshark can group packets that belong to the same exchange (same source and destination IPs and ports) and display the payloads as a continuous stream. That view reassembles the data from the UDP datagrams in the order they were captured and presents it in a single, readable window, making it easy to see the actual application data being exchanged.

You access this view by right-clicking a UDP packet and choosing Follow UDP Stream. (You can also reach it via Analyze -> Follow -> UDP Stream.) The other options shown are for different transport protocols or analysis tools: TLS Stream and TCP Stream are for TCP/TLS conversations, and Expert Info provides general analysis rather than a readable data stream for a UDP conversation.