Bran is an incident handler who is assessing the network of the organization. In the process, he wants to detect ping sweep attempts on the network using Wireshark tool. Which of the following…

The correct answer is C. icmp.type==8. In Wireshark, the filter icmp.type==8 is used to detect ping sweep attempts. ICMP type 8 messages are echo requests, which are used in ping operations to check the availability of a network device. A ping sweep involves sending ICMP echo requests to multiple addresses to…

Incident Handling and Response Technologies

Question

Bran is an incident handler who is assessing the network of the organization. In the process, he wants to detect ping sweep attempts on the network using Wireshark tool. Which of the following Wireshark filter he must use to accomplish this task?

Options

Aicmp.seq
Bicmp.redir_gw
Cicmp.type==8
Dicmp.ident

How the community answered

(42 responses)

A
2% (1)
B
12% (5)
C
79% (33)
D
7% (3)

Explanation

In Wireshark, the filter icmp.type==8 is used to detect ping sweep attempts. ICMP type 8 messages are echo requests, which are used in ping operations to check the availability of a network device. A ping sweep involves sending ICMP echo requests to multiple addresses to discover active devices on a network. By filtering for ICMP type 8 messages in Wireshark, Bran can identify these echo requests, helping to pinpoint ping sweep activities on the network.

Topics

#Wireshark#ping sweep detection#ICMP filtering#network monitoring

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice