nerdexam
Fortinet

NSE4_FGT-7.0 · Question #170

Refer to the exhibit. An administrator is running a sniffer command as shown in the exhibit. Which three pieces of information are included in the sniffer output? (Choose three.)

The correct answer is A. Interface name C. IP header E. Packet payload. A FortiGate sniffer command output includes the interface name, the IP header, and the packet payload, among other details, for captured network traffic.

Troubleshooting and Monitoring

Question

Refer to the exhibit. An administrator is running a sniffer command as shown in the exhibit. Which three pieces of information are included in the sniffer output? (Choose three.)

Exhibit

NSE4_FGT-7.0 question #170 exhibit

Options

  • AInterface name
  • BEthernet header
  • CIP header
  • DApplication header
  • EPacket payload

How the community answered

(42 responses)
  • A
    90% (38)
  • B
    2% (1)
  • D
    7% (3)

Why each option

A FortiGate sniffer command output includes the interface name, the IP header, and the packet payload, among other details, for captured network traffic.

AInterface nameCorrect

The `diagnose sniffer packet` command output always indicates the interface on which the packet was captured, prefixed by 'interface' in the output line.

BEthernet header

While the packet contains an Ethernet header, the standard sniffer output in FortiGate typically starts displaying from the IP header level for general troubleshooting, not the full Ethernet header.

CIP headerCorrect

The sniffer output includes the IP header information, such as source and destination IP addresses, protocol, and other IP layer details, which is crucial for network troubleshooting.

DApplication header

'Application header' is not a standard term in this context; the sniffer shows the application data within the payload, but not a distinct 'application header' as a separate field in the same way it shows an IP header.

EPacket payloadCorrect

The packet payload, representing the actual data being transmitted, is shown in the sniffer output, typically in hexadecimal and ASCII formats, allowing for inspection of the packet's content.

Concept tested: FortiGate sniffer command output analysis

Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-cli-reference/634710/diagnose-sniffer-packet

Topics

#packet sniffer#troubleshooting tools#packet analysis#FortiGate diagnostics

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice