GCIA: GIAC Certified Intrusion AnalystDemo

By GIAC · Question Mode

QuestionQ454

Network Forensics and Traffic Analysis

Which of the following tools analyzes files produced by several popular packet-capture programs, including tcpdump, WinDump, Wireshark, and EtherPeek?

  • A Fpipe
  • B tcptraceroute
  • C Sniffer
  • D tcptrace
Explanation

tcptrace analyzes TCP connections from packet-capture trace files and supports captures produced by tools such as tcpdump, WinDump, Wireshark, and EtherPeek.

Community Discussion

No comments yet. Be the first to start the discussion!