Tom accesses host C with IP address IPC via host B with IP address IPB from host A with IP address IPA using SSH. How to capture all the TCP response traffic of the incoming link of Host B?

Question options:

	tcpdump tcp src IPB and dst IPA and dst port 22 and 'tcp[13] & 8 !=0'
	tcpdump tcp src IPB and dst IPA and src port 22 and 'tcp[13] & 8 !=0'
	tcpdump tcp src IPB and dst IPA and src port 22 and 'tcp[13] & 16 !=0'
Question 9

Tom accesses host C with IP address IPC via host B with IP address IPB from host A with IP address IPA using SSH. How to capture all the TCP request traffic of the outgoing link of Host B?

Question options:

	tcpdump tcp src IPB or dst IPC and dst port 22 and 'tcp[13] &8!=0'
	tcpdump tcp src IPB and dst IPC and dst port 22 and 'tcp[13] &8!=0'
	tcpdump tcp src IPB and dst IPC and dst port 22 and 'tcp[13] &32!=0'
Question 14

In three way handshake of establishing a TCP connection, if a client sends a SYN packet to a server with source port, destination port, sequence number, and acknowledgement number as the following respectively.

8971, 22, 156, 305

And also the SYN is acknowledged by a packet with sequence number 588. In the last step to set up the TCP connection, the client needs to send an ACK to the server. What are the values of source port, destination port, sequence number and the acknowledgement number of the ACK respectively?

Question options:

	8971, 22, 157, 589
	8971, 22, 589, 157
	8971, 22, 157, unknown
Question 15

The command "tcpdump src host churchward and udp dst port 53" is to capture ______.

Question options:

	the tcp packet going to port 53 from host churchward
	the udp packets coming from host churchward, but tcp packets going to port 53
	the udp packets coming from host churchward, but going to port 53
Question 19

Please examine the following two packets. What is the sequence number of the packet sent from port 3224 to port 6020?

23:29:04.050167 spider.3224 > 66-28-147-032.servercentral.net.6020: . ack 36517 win 16044

23:29:04.059645 66-28-147-032.servercentral.net.6020 > spider.3224: P 36517:37969(1452) ack 1 win 5840 (DF)

Question options:

	0
	1
	37969
Question 20

The following packet captured by Tcpdump shows "win 512" which indicates ___________________.

09:32:43:910000 nmap.edu.1173 > dns.net.21 S 62697789:62697789(0) win 512

Question options:

	host "dns.net" total window buffer size is 512 bytes
	host "nmap.edu" total window buffer size is 512 bytes
	host "dns.net" available buffer size is 512 bytes