Which display filter shows only TCP traffic on port 80?

Study for the OSCP Linux Exam. Use our flashcards and multiple-choice questions to test your skills. Each query comes with detailed hints and explanations to enhance your preparedness. Get ready to conquer the exam!

Multiple Choice

Which display filter shows only TCP traffic on port 80?

Explanation:
The filter uses a port field tied to the TCP protocol and an equality check. Using tcp.port == 80 selects packets where either the source or destination TCP port is 80, and since the tcp.port field applies to TCP traffic, this shows only TCP traffic on that port. The other options use invalid syntax or field names: a single equals sign is not the correct operator; eq is not the standard form in this context; and tcp_port uses an incorrect field name (the correct field uses a dot, not an underscore).

The filter uses a port field tied to the TCP protocol and an equality check. Using tcp.port == 80 selects packets where either the source or destination TCP port is 80, and since the tcp.port field applies to TCP traffic, this shows only TCP traffic on that port. The other options use invalid syntax or field names: a single equals sign is not the correct operator; eq is not the standard form in this context; and tcp_port uses an incorrect field name (the correct field uses a dot, not an underscore).

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy