nerdexam
EC-Council

312-50V11 · Question #787

Which of the following is a command line packet analyzer similar to GUI-based Wireshark?

The correct answer is C. Tcpdump. Tcpdump is the standard command-line packet capture and analysis tool, functioning as the CLI equivalent of GUI-based Wireshark.

Sniffing

Question

Which of the following is a command line packet analyzer similar to GUI-based Wireshark?

Options

  • ANessus
  • BJack the ripper
  • CTcpdump
  • DEthereal

How the community answered

(25 responses)
  • A
    4% (1)
  • C
    92% (23)
  • D
    4% (1)

Why each option

Tcpdump is the standard command-line packet capture and analysis tool, functioning as the CLI equivalent of GUI-based Wireshark.

ANessus

Nessus is a vulnerability scanner used to identify security weaknesses across systems and services, not a tool for capturing or analyzing network packets.

BJack the ripper

John the Ripper (not 'Jack the Ripper') is a password cracking tool designed to perform dictionary and brute-force attacks against password hashes, not a packet analyzer.

CTcpdumpCorrect

Tcpdump is a command-line utility that uses libpcap to capture and inspect raw network traffic in real time, making it functionally equivalent to Wireshark but operable entirely from a terminal without a graphical interface. It supports Berkeley Packet Filter syntax and can write capture files in .pcap format that Wireshark can also read.

DEthereal

Ethereal was the former name of Wireshark before it was rebranded in 2006 - it is a GUI-based application, which makes it the same category as Wireshark rather than a command-line alternative.

Concept tested: Command-line network packet capture tool identification

Source: https://www.tcpdump.org/manpages/tcpdump.1.html

Topics

#packet analyzer#tcpdump#network capture#CLI tools

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice