John is an engineer within company ACME. He has been told by his boss, the security officer, that he must implement a tool that he can use to perform deep analysis on captured network traffic that has been flagged as suspicious. What type of tool should John put into place?
A.
Sniffer
B.
Protocol analyzer
C.
War dialer
D.
Firewall
Explanation:
A packet or network sniffer is a general term for programs or devices
able to examine traffic on a LAN segment. Traffic that is being transferred over a
network medium is transmitted as electrical signals, encoded in binary
representation. The sniffer has to have a protocol-analysis capability to recognize
the different protocol values to properly interpret their meaning.