PrepAway - Latest Free Exam Questions & Answers

Which tool/utility can help you extract the application layer data from each TCP connection from a log file in

Which tool/utility can help you extract the application layer data from each TCP connection from a log file into separate files?

PrepAway - Latest Free Exam Questions & Answers

A.
argus

B.
Tcpdump

C.
TCPflow

D.
Snort

Explanation:
Tcpflow is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis or debugging. A program like ‘tcpdump’ shows a summary of packets seen on the wire, but usually doesn’t store the data that’s actually being transmitted. In contrast, tcpflow reconstructs the actual data streams and stores each flow in a separate file for later analysis.


Leave a Reply