ECCouncil Exam Questions

What filter will you apply?

You have captured some packets in Ethereal. You want to view only packets sent from 10.0.0.22.
What filter will you apply?

A.
ip = 10.0.0.22

B.
ip.equals 10.0.0.22

C.
ip.address = 10.0.0.22

D.
ip.src == 10.0.0.22

Explanation:
ip.src tells the filter to only show packets with 10.0.0.22 as the source.