100-150 Question 210
Select 4You have been tasked with troubleshooting intermittent connectivity issues on a client’s network. Using Wireshark, you need to capture traffic on the network and save the capture for further analysis. Which of the following steps should you take to perform this task successfully?
- A
Select the appropriate network interface in Wireshark before starting the capture.
- B
Click the 'Start Capturing Packets' button (shaped like a shark fin) to begin capturing traffic.
- C
Apply a display filter before starting the capture to reduce captured data.
- D
Stop the capture when sufficient data is collected by clicking the 'Stop Capture' button.
- E
Save the captured data to a file by selecting 'File > Export Specified Packets'.
- F
Save the captured data to a file by selecting 'File > Save As'.
Show answer and explanation
Correct answers: A, B, D, F
Explanation
To perform a packet capture with Wireshark and save it to a file, you must select the correct network interface, start the capture, stop it after collecting sufficient data, and save the capture using the 'Save As' option. Display filters are irrelevant before starting the capture, and 'Export Specified Packets' is used for exporting portions of the capture, not saving the entire file.
- A. Correct.
You must select the correct network interface to capture relevant traffic. Otherwise, Wireshark will not capture data from the correct source.
- B. Correct.
The 'Start Capturing Packets' button is used to initiate the packet capture process in Wireshark.
- C. Incorrect.
Display filters are used to filter the view of captured packets after the capture process, not before. This option is incorrect in the context of capturing traffic.
- D. Correct.
The capture must be stopped after collecting sufficient data to save the file and analyze the results.
- E. Incorrect.
The 'Export Specified Packets' option is used to export a subset of packets, not the entire capture. This is not suitable for saving the complete capture.
- F. Correct.
The 'Save As' option under the 'File' menu is the correct method to save the captured data to a file for later analysis.