Which filter allows an engineer to filter traffic in Wireshark to further analyze the PCAP file by only showing the traffic for LAN 10.11.x.x, between workstations and servers without the Internet?

The correct answer is B. ip.src==10.11.0.0/16 and ip.dst==10.11.0.0/16. Wireshark display filters use field names like ip.src and ip.dst with the double-equals operator, and they support CIDR notation to match an entire subnet, limiting results to traffic where both endpoints are inside 10.11.0.0/16.

Submitted by brentm· Mar 6, 2026Network Intrusion Analysis

Question

Options

Asrc=10.11.0.0/16 and dst=10.11.0.0/16
Bip.src==10.11.0.0/16 and ip.dst==10.11.0.0/16
Cip.src=10.11.0.0/16 and ip.dst=10.11.0.0/16
Dsrc==10.11.0.0/16 and dst==10.11.0.0/16

How the community answered

(40 responses)

A
3% (1)
B
78% (31)
C
8% (3)
D
13% (5)

Explanation

Wireshark display filters use field names like ip.src and ip.dst with the double-equals operator, and they support CIDR notation to match an entire subnet, limiting results to traffic where both endpoints are inside 10.11.0.0/16.

Topics

#Wireshark#packet analysis#network filtering#IP addressing

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice