Eccouncil Exam ECSAv10 Topic 4 Question 90 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 90
Topic #: 4

Wireshark is a network analyzer. It reads packets from the network, decodes them, and presents them in an easy-to-understand format. Which one of the following is the command-line version of Wireshark, which can be used to capture the live packets from the wire or to read the saved capture files?

ATcpdump

BCapinfos

CTshark

DIdl2wrs

Show Suggested Answer

Suggested Answer: D

by Micheal at Mar 04, 2025, 04:53 PM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ettie

29 days ago

Tshark, the Chuck Norris of packet sniffers. It probably captures packets with a single roundhouse kick.

upvoted 0 times

...

Amie

1 months ago

Tshark, huh? I guess that's the nerdy cousin of Wireshark. But hey, at least it doesn't come with those fancy graphics that make my eyes hurt.

upvoted 0 times

Brandon

5 days ago

I think Tcpdump is the command-line version of Wireshark.

upvoted 0 times

...

Melodie

8 days ago

I prefer Tshark for its simplicity.

upvoted 0 times

...

Caitlin

1 months ago

Well, well, look at that! I always thought Tcpdump was the command-line tool for packet capture, but Tshark is the real deal. Time to update my network troubleshooting skills.

upvoted 0 times

...

Lisbeth

1 months ago

Ah, yes! Tshark is the command-line version of Wireshark. I use it all the time when I'm too lazy to open the GUI. It's like a ninja version of Wireshark.

upvoted 0 times

Anissa

17 days ago

I agree, Tshark is really convenient for quick packet analysis.

upvoted 0 times

...

Jolene

1 months ago

Hmm, I remember using Wireshark for network analysis, but I'm not too familiar with the command-line version. Let's see, I think the answer is C) Tshark.

upvoted 0 times