Which tool displays TCP/IP packets and other network packets being transmitted for troubleshooting, acting as a protocol analyzer?

Which tool displays TCP/IP packets and other network packets being transmitted for troubleshooting, acting as a protocol analyzer?

• A. tcpdump
• B. wireshark
• C. nc
• D. ssh

Answer: (A)

Capturing and displaying network traffic in real time is what a protocol analyzer does to help troubleshoot issues. A practical tool for this role is tcpdump because it runs on the command line, is lightweight, and immediately shows the packets that traverse an interface. It prints concise, real-time summaries of each packet, including the protocol, source and destination addresses and ports, and packet length, which helps you spot misconfigurations, dropped packets, or unexpected traffic right away. You can adjust the level of detail with verbose options and even save the capture to a file (pcap) for later analysis with a GUI tool like Wireshark if deeper inspection is needed. While Wireshark also analyzes packets, its graphical interface makes it more suited to thorough, post-capture analysis rather than quick, on-the-fly diagnostics in a command-line environment. Netcat isn’t built for packet inspection, and SSH is for secure remote access rather than traffic analysis.

Capturing and displaying network traffic in real time is what a protocol analyzer does to help troubleshoot issues. A practical tool for this role is tcpdump because it runs on the command line, is lightweight, and immediately shows the packets that traverse an interface. It prints concise, real-time summaries of each packet, including the protocol, source and destination addresses and ports, and packet length, which helps you spot misconfigurations, dropped packets, or unexpected traffic right away. You can adjust the level of detail with verbose options and even save the capture to a file (pcap) for later analysis with a GUI tool like Wireshark if deeper inspection is needed. While Wireshark also analyzes packets, its graphical interface makes it more suited to thorough, post-capture analysis rather than quick, on-the-fly diagnostics in a command-line environment. Netcat isn’t built for packet inspection, and SSH is for secure remote access rather than traffic analysis.