Which is the correct "fw monitor" syntax for creating a capture file for loading it into Wireshark?

Question

Options

• Afw monitor -e "accept <FILTER EXPRESSION*;" > Output.cap
• BThis cannot be accomplished as it is not supported with R80.10
• Cfw monitor -e "accept <FILTER EXPRESSION^" -o Output.cap
• Dfw monitor -e "accept <FILTER EXPRESSION*;" -file Output.cap

• A
  8% (2)
• B
  8% (2)
• C
  4% (1)
• D
  79% (19)

Explanation

The correct syntax for using fw monitor to create a capture file compatible with Wireshark involves specifying the filter expression and the output file with the .cap extension. Option D correctly uses the -e flag for the filter expression and the -file flag to specify the output file, ensuring the captured data can be seamlessly imported into Wireshark for analysis.

No community discussion yet for this question.