You wish to capture a set of data for about 10 minutes from a host that you only have command line access to. You use TCPDump for the capture, but find it is hard to work with. You aren't so much interested in the data within the packets but statistics about how much data and of what type is being sent.
Which of the following tools can be used along with your sniffer to collect this data?
A) IDS Wakeup
B) TCP Slice
C) Win Dump
D) WinpCap

Question

Quizplus · Accepted Answer

Reviewing from the sniffer chapter, know the command line tools that work well in Linux for sniffing and analysis as this activity often goes and in hand with tuning IDS and Firewall products. IDSWakeup and NIDSBench are two tools you should know about for testing IDS as well as hand crafted packets with HPing.

You Wish to Capture a Set of Data for About