Eccouncil Exam ECSAv10 Topic 4 Question 90 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 90
Topic #: 4

Wireshark is a network analyzer. It reads packets from the network, decodes them, and presents them in an easy-to-understand format. Which one of the following is the command-line version of Wireshark, which can be used to capture the live packets from the wire or to read the saved capture files?

ATcpdump

BCapinfos

CTshark

DIdl2wrs

Show Suggested Answer

Suggested Answer: D

by Micheal at Mar 04, 2025, 04:53 PM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lilli

18 hours ago

I'm not sure, but I think Tcpdump can also be used to capture live packets.

upvoted 0 times

...

Madelyn

3 days ago

I agree with Mozell, Tshark is the command-line version of Wireshark.

upvoted 0 times

...

Mozell

5 days ago

I think the answer is C) Tshark.

upvoted 0 times

...