312-50V10 · Question #787
Which of the following is a command line packet analyzer similar to GUI-based Wireshark?
The correct answer is C. Tcpdump. Tcpdump is a command-line packet capture and analysis tool that provides functionality similar to the GUI-based Wireshark. It captures and displays network traffic directly in the terminal.
Question
Which of the following is a command line packet analyzer similar to GUI-based Wireshark?
Options
- ANessus
- BJack the ripper
- CTcpdump
- DEthereal
How the community answered
(40 responses)- A5% (2)
- B3% (1)
- C90% (36)
- D3% (1)
Why each option
Tcpdump is a command-line packet capture and analysis tool that provides functionality similar to the GUI-based Wireshark. It captures and displays network traffic directly in the terminal.
Nessus is a vulnerability scanner used to identify security weaknesses on hosts and networks, not a packet capture or analysis tool.
'Jack the Ripper' is not a real tool; the correct name is 'John the Ripper,' which is a password-cracking tool, not a packet analyzer.
Tcpdump is a widely-used command-line network packet analyzer that captures live packet data from a network interface and displays it in the terminal, making it the CLI equivalent of Wireshark. It uses the libpcap library, the same underlying library that Wireshark uses, and supports the same pcap file format for saving and reading captures.
Ethereal was the former name of Wireshark before it was renamed in 2006; it is a GUI-based tool and is no longer actively developed or distributed under that name.
Concept tested: Command-line packet capture tool identification
Source: https://www.tcpdump.org/manpages/tcpdump.1.html
Topics
Community Discussion
No community discussion yet for this question.