Which technical characteristic do Ethereal/Wireshark, TCPDump, and Snort have in common?
A.
They are written in Java.
B.
They send alerts to security monitors.
C.
They use the same packet analysis engine.
D.
They use the same packet capture utility.
D
Thanks Miguel…without you we were unable to get the answers of all the 877 questions..!!
Is that packet capture utility WinPcap?
pcap – libpcap/winpcap. The pcap is an API, written in C/C++ (technically C is a subset of C++, so anything written in C is also written in C++). It is implemented as a library – libpcap.
Winpcap is a port of libpcap for Windows.