A Linux administrator is attempting to capture all network traffic coming to the server from the 10.0.6.5 IP address. Which of the following commands should the administrator run on the server to…

The correct answer is C. tcpdump host 10.0.6.5. tcpdump host 10.0.6.5 applies a Berkeley Packet Filter that matches any packets to or from the IP 10.0.6.5, capturing all traffic involving that host. The net qualifier is for entire subnets, ip isn’t a valid filter keyword by itself, and addr is not recognized in tcpdump’s…

Networking and Cloud Concepts

Question

A Linux administrator is attempting to capture all network traffic coming to the server from the 10.0.6.5 IP address. Which of the following commands should the administrator run on the server to achieve the goal?

Options

Atcpdump ip 10.0.6.5
Btcpdump net 10.0.6.5
Ctcpdump host 10.0.6.5
Dtcpdump addr 10.0.6.5

How the community answered

(48 responses)

B
2% (1)
C
94% (45)
D
4% (2)

Explanation

tcpdump host 10.0.6.5 applies a Berkeley Packet Filter that matches any packets to or from the IP 10.0.6.5, capturing all traffic involving that host. The net qualifier is for entire subnets, ip isn’t a valid filter keyword by itself, and addr is not recognized in tcpdump’s filter syntax.

Topics

#tcpdump#packet capture#host filter#network traffic

Community Discussion

No community discussion yet for this question.

Full XK0-006 Practice