Which filter allows an engineer to filter traffic in Wireshark to further analyze the PCAP file by only showing the traffic for LAN 10.11.x.x, between workstations and servers without the Internet?
A) src=10.11.0.0/16 and dst=10.11.0.0/16
B) ip.src==10.11.0.0/16 and ip.dst==10.11.0.0/16
C) ip.src=10.11.0.0/16 and ip.dst=10.11.0.0/16
D) src==10.11.0.0/16 and dst==10.11.0.0/16

Question

Quizplus · Accepted Answer

Wireshark uses the syntax "ip.src" and "ip.dst" for filtering IP addresses. The correct format for specifying a subnet is "ip.src==10.11.0.0/16" and "ip.dst==10.11.0.0/16".

Which Filter Allows an Engineer to Filter Traffic in Wireshark