A Linux administrator is attempting to capture all network traffic coming to the server from the 10.0.6.5 IP address. Which of the following commands should the administrator run on the server to…

The correct answer is C. tcpdump host 10.0.6.5. applies a Berkeley Packet Filter that matches any packets to or from tcpdump host 10.0.6.5 the IP 10.0.6.5, capturing all traffic involving that host. The qualifier is for entire subnets, isn’t a valid filter keyword by itself, and addr is not recognized in tcpdump’s filter…

Troubleshooting

Question

A Linux administrator is attempting to capture all network traffic coming to the server from the 10.0.6.5 IP address. Which of the following commands should the administrator run on the server to achieve the goal?

Options

Atcpdump ip 10.0.6.5
Btcpdump net 10.0.6.5
Ctcpdump host 10.0.6.5
Dtcpdump addr 10.0.6.5

How the community answered

(24 responses)

A
4% (1)
C
92% (22)
D
4% (1)

Explanation

applies a Berkeley Packet Filter that matches any packets to or from tcpdump host 10.0.6.5 the IP 10.0.6.5, capturing all traffic involving that host. The qualifier is for entire subnets, isn’t a valid filter keyword by itself, and addr is not recognized in tcpdump’s filter syntax.

Topics

#tcpdump#Network Monitoring#Packet Capture#Command Line Utilities

Community Discussion

No community discussion yet for this question.

Full XK0-005 Practice