You want to create a binary log file using tcpdump. Which of the following commands will you use?

The correct answer is C. tcpdump -w. The tcpdump -w <filename> flag writes captured packets in raw (binary) PCAP format to a file instead of printing them to the screen. This binary file can later be read and analyzed with tcpdump -r or tools like Wireshark. The other flags do different things: -d dumps the…

Penetration Testing Foundations & Reconnaissance

Question

Options

Atcpdump -B
Btcpdump -dd
Ctcpdump -w
Dtcpdump -d

How the community answered

(50 responses)

A
6% (3)
B
2% (1)
C
82% (41)
D
10% (5)

Explanation

The tcpdump -w <filename> flag writes captured packets in raw (binary) PCAP format to a file instead of printing them to the screen. This binary file can later be read and analyzed with tcpdump -r or tools like Wireshark. The other flags do different things: -d dumps the compiled packet-matching code in a human-readable form, -dd dumps that same code as a C program fragment, and -B sets the OS capture buffer size in KiB. Only -w produces the binary log file.

Topics

#tcpdump#packet capture#binary logging#network sniffing

Community Discussion

No community discussion yet for this question.

Full GPEN Practice