Which of the following tools can reconstruct TCP streams?
A) Tcpdump
B) Wireshark
C) Snoop
D) EnCase

Question

Quizplus · Accepted Answer

Wireshark has the capability to follow and reconstruct TCP streams, allowing users to view the entire conversation between endpoints. Tcpdump, Snoop, and EnCase are useful for capturing and analyzing network traffic, but Wireshark is specifically recognized for its TCP stream reconstruction feature.

Which of the Following Tools Can Reconstruct TCP Streams