Exam CS0-002 topic 1 question 236 discussion

the key phrase "analyzed at a later time", -w flag for tcpdump will allow you to save the result into a file for "later" analysis. Ya'll are clowns lol.

The answer is A

The -w flag allows tcpdump to save the captured packets in a file. The file will be in a binary format that can be processed by other tools, but not easily readable by humans. The other options are incorrect because: -a is not a valid flag for tcpdump. -n is a flag that tells tcpdump to not convert IP addresses and port numbers to names, but it does not affect the output format of the packets. nmap is a tool used for network discovery and security auditing, but it is not the best choice for capturing packets. The -v and -oA flags are also not relevant for packet capture.

-w file Write the raw packets to file rather than parsing and printing them out. They can later be printed with the -r option. Standard output is used if file is ``-''. https://www.tcpdump.org/manpages/tcpdump.1.html

https://www.tcpdump.org/manpages/tcpdump.1.html

B - tcpdump -a prints in ASCII

B - prints in ASCII format