nerdexam
EC-Council

EC0-350 · Question #302

What is the correct PCAP filter to capture all TCP traffic going to or from host 192.168.0.125 on port 25?

The correct answer is D. tcp.port == 25 and ip.host == 192.168.0.125. See the full explanation below for the reasoning.

Question

What is the correct PCAP filter to capture all TCP traffic going to or from host 192.168.0.125 on port 25?

Options

  • Atcp.src == 25 and ip.host == 192.168.0.125
  • Bhost 192.168.0.125:25
  • Cport 25 and host 192.168.0.125
  • Dtcp.port == 25 and ip.host == 192.168.0.125

How the community answered

(65 responses)
  • A
    8% (5)
  • B
    3% (2)
  • C
    14% (9)
  • D
    75% (49)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice