An engineer must perform a packet capture on a Cisco Secure Firewall Threat Defense device to confirm the MAC address of the host using IP address 192.168.100.100 while troubleshooting an ARP issue. W

The correct answer is D. -ne src 192.168.100.100. To capture packets on a Cisco Secure Firewall Threat Defense (formerly Firepower Threat Defense) device and ensure that the MAC address appears in the tcpdump output, you need the - Use the -n option to prevent name resolution (makes output clearer). - Use the -e option to includ

Management and Troubleshooting

Question

An engineer must perform a packet capture on a Cisco Secure Firewall Threat Defense device to confirm the MAC address of the host using IP address 192.168.100.100 while troubleshooting an ARP issue. What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?

Options

A-w capture.pcap -s 1518 host 192.168.100.100 mac
B-nm src 192.168.100.100
C-w capture.pcap -s 1518 host 192.168.100.100 ether
D-ne src 192.168.100.100

How the community answered

(37 responses)

A
11% (4)
B
3% (1)
C
8% (3)
D
78% (29)

Explanation

To capture packets on a Cisco Secure Firewall Threat Defense (formerly Firepower Threat Defense) device and ensure that the MAC address appears in the tcpdump output, you need the - Use the -n option to prevent name resolution (makes output clearer). - Use the -e option to include the link-layer header in the output, which shows MAC addresses. - Filter by the source IP address (or host IP). So, the correct tcpdump command should include -ne and a filter for the IP address.

Topics

#Packet Capture#tcpdump#Troubleshooting#MAC Addresses

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice