HPE7-A02 · Question #4

You have set up a mirroring session between an AOS-CX switch and a management station, running Wireshark. You want to capture just the traffic sent in the mirroring session, not the management…

The correct answer is D. Apply this capture filter: udp port 5555. To capture only the traffic sent in the mirroring session between an AOS-CX switch and a management station running Wireshark, you should apply a capture filter that isolates the specific traffic of interest. In this case, using the filter udp port 5555 will capture the traffic…

Troubleshooting and Monitoring Network Security

Question

You have set up a mirroring session between an AOS-CX switch and a management station, running Wireshark. You want to capture just the traffic sent in the mirroring session, not the management station's other traffic. What should you do?

Options

AApply this capture filter: ip proto 47
BEdit protocol preferences and enable ARUBA_ERM.
CEdit protocol preferences and enable HPE_ERM.
DApply this capture filter: udp port 5555

How the community answered

(22 responses)

A
14% (3)
B
9% (2)
C
5% (1)
D
73% (16)

Explanation

To capture only the traffic sent in the mirroring session between an AOS-CX switch and a management station running Wireshark, you should apply a capture filter that isolates the specific traffic of interest. In this case, using the filter udp port 5555 will capture the traffic associated with the mirroring session. This is because AOS-CX switches typically use UDP port 5555 for mirrored traffic, ensuring that only the relevant mirrored packets are captured and excluding other traffic generated by the management station.

Topics

#traffic mirroring#Wireshark capture filter#AOS-CX#GRE encapsulation

Community Discussion

No community discussion yet for this question.

Full HPE7-A02 Practice