Free CompTIA Network+ N10-008 Practice Question

A network administrator is investigating intermittent issues on a web application server. The administrator wants to capture packets on interface eth0 that are part of established TCP sessions, not the initial TCP handshakes. Which tcpdump command will correctly filter out packets that do not have the SYN flag set, ensuring that only established connections are monitored?

  • tcpdump -i eth0 'tcp[tcpflags] & (tcp-syn) == 0'

  • tcpdump -i eth0 'tcp'

  • tcpdump -i eth0 'tcp[tcpflags] & (tcp-syn) != 0'

  • tcpdump -i eth0 'tcp[tcpflags] & (tcp-ack) == 0'

This question's topic:
CompTIA Network+ N10-008 / 
Network Troubleshooting
Your Score:

Check or uncheck an objective to set which questions you will receive.