ECCouncil Exam Questions

Which of the following display filters will you enable in Ethereal to view the three-way handshake f

Which of the following display filters will you enable in Ethereal to view the three-way handshake for a connection from host 192.168.0.1?

A.
ip == 192.168.0.1 and tcp.syn

B.
ip.addr = 192.168.0.1 and syn = 1

C.
ip.addr==192.168.0.1 and tcp.flags.syn

D.
ip.equals 192.168.0.1 and syn.equals on