100-150 Question 212
Select 3You are troubleshooting a network issue where a client cannot access a specific web server. You decide to perform a packet capture using Wireshark. Which of the following steps are required to capture and save the packet data to a file for further analysis?
- A
Select the appropriate network interface in Wireshark to capture traffic
- B
Start the capture by clicking the 'Start Capturing Packets' button
- C
Save the capture file immediately after launching Wireshark
- D
Use display filters during the capture to only capture the desired traffic
- E
Stop the capture and save the data to a file once the required packets are captured
Show answer and explanation
Correct answers: A, B, E
Explanation
Performing a packet capture with Wireshark involves selecting the correct network interface, starting the capture process, and saving the captured data to a file after stopping the capture. Display filters do not affect the packets being captured but are used to filter data for viewing after the capture.
- A. Correct.
To capture traffic, you must first select the correct network interface that corresponds to the network being analyzed.
- B. Correct.
Clicking the 'Start Capturing Packets' button begins the packet capture process, which is essential for recording network traffic.
- C. Incorrect.
Saving the capture file is not required immediately after launching Wireshark. It is done after capturing the necessary data.
- D. Incorrect.
Display filters are used to view specific packets after the capture, but they do not limit what is captured. Capture filters, not display filters, are used to control the data being captured.
- E. Correct.
Once the required packets are captured, it is important to stop the capture and save the data to a file for further analysis.