Exam 4: Sniffers

____________________ is an application that monitors, filters, and captures data packets transferred over a network.

Information traveling across a network is typically in human-readable format.

When a sniffer captures data from a network, it stores the data in a(n) ____________________-a dynamic area of RAM that holds specified data.

In order to identify a particular computer on a network, computers are assigned a unique identifier called a(n) ______________________________ address.

______________________________ is based on the principle that distance can be measured by computing the time required for reflected energy to be measured at the source.

Previously known as Ethereal, ____ is probably the best-known and most powerful free network protocol analyzer for UNIX/Linux and Windows.

A NIC can be set up to retrieve any data packet being transferred throughout the Ethernet network segment. This mode is known as _________________________.

Snort logs packets only into the American Standard Code for Information Interchange (ASCII) format.

What are the major differences between commercial sniffers and free sniffers?

When you transmit information in a data packet to a computer on a network, the request is sent to every computer on that network that uses the same Ethernet cable or wireless LAN.

The three types of sniffer are bundled, commercial, and free.

____, the most commonly bundled sniffer with Linux distros, is also widely used as a free network diagnostic and analytic tool for UNIX and UNIX-like operating systems.

____ is bundled with the Solaris operating systems. It captures packets from the network and displays their contents.

The ____ captures the network traffic from the Ethernet connection.

What are the network interfaces supported by TCP/IP?

____ comes bundled with Windows. Network Monitor, a component of Microsoft Systems Management Server (SMS), enables you to detect and troubleshoot problems on LANs,WANs, and serial links running the Microsoft Remote Access Server (RAS).

Sniffers look only at the traffic passing through the network interface adapter on the machine where the application is resident.

What are the main characteristics of commercial sniffers?