Which of the following display filters will you enable in Ethereal to view the three-way handshake for a connection from host 192.168.0.1?

Which of the following display filters will you enable in Ethereal to view the three-way handshake
for a connection from host 192.168.0.1?

Which of the following display filters will you enable in Ethereal to view the three-way handshake
for a connection from host 192.168.0.1?

A.
ip == 192.168.0.1 and tcp.syn

B.
ip.addr = 192.168.0.1 and syn = 1

C.
ip.addr==192.168.0.1 and tcp.flags.syn

D.
ip.equals 192.168.0.1 and syn.equals on

Show Hint

Leave a Reply 1

Your email address will not be published. Required fields are marked *

max

max

none will show the full TCP handshake (SYN, SYN/ACK, ACK), since only the two first packets have the SYN flag on.
But the only valid filter is C.

Reply