Eccouncil Exam ECSAv10 Topic 4 Question 90 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 90
Topic #: 4

Wireshark is a network analyzer. It reads packets from the network, decodes them, and presents them in an easy-to-understand format. Which one of the following is the command-line version of Wireshark, which can be used to capture the live packets from the wire or to read the saved capture files?

ATcpdump

BCapinfos

CTshark

DIdl2wrs

Show Suggested Answer

Suggested Answer: D

by Micheal at Mar 04, 2025, 04:53 PM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lilli

14 days ago

I'm not sure, but I think Tcpdump can also be used to capture live packets.

upvoted 0 times

...

Madelyn

16 days ago

I agree with Mozell, Tshark is the command-line version of Wireshark.

upvoted 0 times

...

Mozell

18 days ago

I think the answer is C) Tshark.

upvoted 0 times

...