300-710 · Question #167
An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see Snort…
The correct answer is D. Use the capture command and specify the trace option to get the required information. Using the capture command and specifying the trace option is the solution to this issue. The capture-traffic command only captures traffic and displays it in a packet capture file, without showing any Snort detection actions. firepower-threat-defense-f.html#anc29
Question
An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see Snort detection actions as a part of the output. After the capture-traffic command is issued, only the packets are displayed. Which action resolves this issue?
Options
- ASpecify the trace using the -T option after the capture-traffic command
- BPerform the trace within the Cisco FMC GUI instead of the Cisco FMC CLI
- CUse the verbose option as a part of the capture-traffic command
- DUse the capture command and specify the trace option to get the required information
How the community answered
(20 responses)- A5% (1)
- C15% (3)
- D80% (16)
Explanation
Using the capture command and specifying the trace option is the solution to this issue. The capture-traffic command only captures traffic and displays it in a packet capture file, without showing any Snort detection actions. firepower-threat-defense-f.html#anc29
Topics
Community Discussion
No community discussion yet for this question.