Refer to the Exhibit.

— Exhibit —
[edit forwarding-options]
user@srx240# show

packet-capture {
file filename my-packet-capture;
maximum-capture-size 1500;
}

— Exhibit —
Referring to the exhibit, you are attempting to perform a packet capture on an SRX240 to
troubleshoot an SSH issue in your network. However, no information appears in the packet
capture file.
Which firewall filter must you apply to the necessary interface to collect data for the packet
capture?

A.
user@srx240# show
filter pkt-capture {
term pkt-capture-term {
from {
protocol tcp;
port ssh;
}
then packet-mode;
}
term allow-all {
then accept;
}
}
[edit firewall family inet]

B.
user@srx240# show
filter pkt-capture {
term pkt-capture-term {
from {
protocol tcp;
port ssh;
}
then {
count packet-capture;
}
}
term allow-all {
then accept;
}
}
[edit firewall family inet]

C.
user@srx240# show
filter pkt-capture {
term pkt-capture-term {
from {
protocol tcp;
port ssh;
}
then {
routing-instance packet-capture;
}
}
term allow-all {
then accept;
}
}
[edit firewall family inet]

D.
user@srx240# show
filter pkt-capture {
term pkt-capture-term {
from {
protocol tcp;
port ssh;
}
then {
sample;
accept;
}
}
term allow-all {
then accept;
}
}
[edit firewall family inet]

Explanation: