Bran is an incident handler who is assessing the network of the organization. He wants to detect ping sweep attempts on the network using Wireshark. Which of the following Wireshark filters would…

The correct answer is B. icmp.lype==8. In the context of using Wireshark, a popular network protocol analyzer, to detect ping sweep attempts on a network, the filter icmp.type==8 is used. ICMP (Internet Control Message Protocol) is utilized for sending error messages and operational information indicating, for…

Incident Handling and Response Technologies

Question

Bran is an incident handler who is assessing the network of the organization. He wants to detect ping sweep attempts on the network using Wireshark. Which of the following Wireshark filters would Bran use to accomplish this task?

Options

Aicmp.scq
Bicmp.lype==8
Cicmp.ident
Dicmp.redir_gw

How the community answered

(34 responses)

A
6% (2)
B
74% (25)
C
3% (1)
D
18% (6)

Explanation

In the context of using Wireshark, a popular network protocol analyzer, to detect ping sweep attempts on a network, the filter icmp.type==8 is used. ICMP (Internet Control Message Protocol) is utilized for sending error messages and operational information indicating, for example, that a requested service is not available or that a host or router could not be reached. ICMP type 8 messages are echo requests, which are used by the ping command to test the reachability of a host on an IP network. A ping sweep consists of ICMP echo requests sent to multiple hosts to find which ones are alive. By applying the icmp.type==8 filter in Wireshark, Bran can isolate and examine the echo request messages, helping to identify ping sweep attempts, which are characterized by a high volume of ICMP echo requests over a broad range of IP addresses in a

Topics

#ping sweep#Wireshark filters#ICMP#network detection

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice