Rudyard has heard rumors that an employee has set up an FTP server at his house. The server issaid to be running on port 80, as ports 20 and 21 are blocked on the company's firewall. He knows that the firewall doesn't perform any sort of packet inspection to ensure that only HTTP traffic is being transmitted. Which of the following tools might he use in conjunction with port mirroring on the switch to monitor the user's traffic and search for signs of FTP traffic being sent on port 80?
A) Peach Fuzzer
B) Check Point
C) Metasploit
D) Wireshark

Question

Quizplus · Accepted Answer

Wireshark is a network protocol analyzer that can capture and display the data traveling back and forth on a network in real-time. It can be used to monitor a user's traffic for signs of FTP traffic being sent on port 80, especially when port mirroring is used to duplicate the traffic to a monitoring port.

Rudyard Has Heard Rumors That an Employee Has Set Up