Steve is troubleshooting a connection problem with an internal application. If he knows the source IP
address is 192.168.4.125, how could he filter this traffic?
A.
Run fw monitor -e “accept dsrc=192.168.4.125;”
B.
Run fw monitor -e “accept dst=192.168.4.125;”
C.
Run fw monitor -e “accept ip=192.168.4.125;”
D.
Run fw monitor -e “accept src=192.168.4.125;”
The filter ip doesn’t exist. However, when you only capture with the src filter, you won’t see the return traffic.
For the purpose of the exam, D is correct, but I would capture with the host filter.