312-50V13 · Question #187
A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?
The correct answer is D. Winpcap. This question identifies the necessary driver and library for Wireshark to enable promiscuous mode on a Windows laptop.
Question
Options
- ALibpcap
- BAwinpcap
- CWinprom
- DWinpcap
How the community answered
(19 responses)- C5% (1)
- D95% (18)
Why each option
This question identifies the necessary driver and library for Wireshark to enable promiscuous mode on a Windows laptop.
Libpcap is the equivalent packet capture library used on Unix-like operating systems (such as Linux and macOS), not directly on Windows.
Awinpcap is not a recognized or standard packet capture library or driver used for Wireshark on Windows systems.
Winprom is not a known or standard packet capture library or driver associated with Wireshark's functionality on Windows.
WinPcap is the standard and widely used packet capture library and driver for Windows, which Wireshark relies upon to allow a network interface card (NIC) to enter promiscuous mode and capture all network traffic on a segment.
Concept tested: Wireshark packet capture on Windows
Source: https://nmap.org/npcap/
Topics
Community Discussion
No community discussion yet for this question.