EC-Council
EC0-350 · Question #620
Which of the following display filters will you enable in Ethereal to view the three-way handshake for a connection from host 192.168.0.1?
The correct answer is C. ip.addr==192.168.0.1 and tcp.flags.syn. See the full explanation below for the reasoning.
Question
Which of the following display filters will you enable in Ethereal to view the three-way handshake for a connection from host 192.168.0.1?
Options
- Aip == 192.168.0.1 and tcp.syn
- Bip.addr = 192.168.0.1 and syn = 1
- Cip.addr==192.168.0.1 and tcp.flags.syn
- Dip.equals 192.168.0.1 and syn.equals on
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- C84% (26)
- D6% (2)
Community Discussion
No community discussion yet for this question.