How can you identify IPv6 extension headers in traffic?

• A. Look at the IPv6 header; Wireshark shows the presence and type of extension headers (Hop-by-Hop, Routing, Fragment, Destination).
• B. IPv6 extension headers are visible in the TCP header only.
• C. Extension headers are only used in IPv4.
• D. Wireshark cannot identify extension headers.

Answer: (B)

IPv6 extension headers are part of the IPv6 header chain and are identified by the Next Header field in the IPv6 header. Wireshark decodes the IPv6 layer and shows the extension headers in order—Hop-by-Hop Options, Routing, Fragment, Destination Options—before the upper-layer protocol (such as TCP). The TCP header sits after these IPv6 headers, so you won’t find extension headers inside TCP. This is why inspecting the IPv6 header and its Next Header field (and the subsequent extension headers shown by Wireshark) is the correct way to identify IPv6 extension headers. The other statements are incorrect because extension headers are not in TCP, they’re not IPv4, and Wireshark can identify them.