Which technical characteristic do Ethereal/Wireshark, TCPDump, and Snort have in common?

Which technical characteristic do Ethereal/Wireshark, TCPDump, and Snort have in common?

Which technical characteristic do Ethereal/Wireshark, TCPDump, and Snort have in common?

A.
They are written in Java.

B.
They send alerts to security monitors.

C.
They use the same packet analysis engine.

D.
They use the same packet capture utility.



Leave a Reply 4

Your email address will not be published. Required fields are marked *


RoundHatHacker

RoundHatHacker

Thanks Miguel…without you we were unable to get the answers of all the 877 questions..!!

jay

jay

Is that packet capture utility WinPcap?

Joshua Dreifreund

Joshua Dreifreund

pcap – libpcap/winpcap. The pcap is an API, written in C/C++ (technically C is a subset of C++, so anything written in C is also written in C++). It is implemented as a library – libpcap.
Winpcap is a port of libpcap for Windows.