The tcpdump and fw monitor commands can both be used to capture packets on the security gateway. While troubleshooting an issue one may choose to use fw monitor but not tcpdump?

Question

Options

• Athe traffic needs to be captured to a pcap file for later analysis in wireshark
• Bit is required to verify if a packet is dropped or changed after inspection by a certain kernel
• Cthe capture process needs to be automated using shell script
• Dtraffic needs to be filtered based on source port

• A
  15% (10)
• B
  74% (48)
• C
  8% (5)
• D
  3% (2)

No community discussion yet for this question.