GCIA · Question #43
Which of the following tools is an open source protocol analyzer that can capture traffic in real time?
The correct answer is C. Wireshark. Wireshark is the industry-standard open source protocol analyzer capable of capturing and inspecting live network traffic across many protocols.
Question
Which of the following tools is an open source protocol analyzer that can capture traffic in real time?
Options
- ANetresident
- BSnort
- CWireshark
- DNetWitness
How the community answered
(27 responses)- A7% (2)
- B15% (4)
- C74% (20)
- D4% (1)
Why each option
Wireshark is the industry-standard open source protocol analyzer capable of capturing and inspecting live network traffic across many protocols.
Netresident is a commercial network forensics and content reconstruction tool, not an open source protocol analyzer.
Snort is an open source network intrusion detection and prevention system (IDS/IPS), not a general-purpose protocol analyzer for interactive traffic capture.
Wireshark is a free, open source graphical network protocol analyzer that captures traffic in real time from network interfaces and allows deep inspection of hundreds of protocols. It was formerly known as Ethereal and is widely used for network troubleshooting, analysis, and security auditing.
NetWitness is a commercial network detection and response platform, not an open source protocol analyzer.
Concept tested: Open source network protocol analyzer identification
Source: https://www.wireshark.org/docs/wsug_html_chunked/ChapterIntroduction.html
Topics
Community Discussion
No community discussion yet for this question.