Question: As a network administrator, you suspect that an internal system, with the IP address 1 9 2 . 1 6 8 . 1 . 1

As a network administrator, you suspect that an internal system, with the IP address 192.168.1.105, is making unauthorized connections to an external server on port 80. You decide to use tcpdump to monitor the network traffic from this system.
Which of the following tepdump commands should you use to filter the traffic accordingly?
tcpdump-i etho "dst host 192.168.1.105 and sre port 80"
tcpdump-w output.pcap "dst host 192.168.1.105 or sre port 80"
tcpdump-vv-i etho "host 192.168.1.105"
tcpdump -1 etho "srchost 192.168.1.105 and dst port 80"
As a network administrator, you suspect that an

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Finance Questions!