Protocol Analyzers

Question 1

What tool captures and analyzes network traffic?

Answer 1

A protocol analyzer

Question 2

What happens in promiscuous mode?

Answer 2

The network adapter captures all of the packets on the network, regardless of the MAC address of the frames carrying them.

Note: Not all network adapters support this mode. Additionally, a port on the switch must be designated for port mirroring.

Question 3

What happens in non-promiscuous mode?

Answer 3

The network adapter only captures the packets addressed to itself.

Question 4

What is port mirroring?

Answer 4

When one or more switch ports are configured to forward all their packets to another port on the switch.

Question 5

What is the name of the port that is designated to receive all of the forwarded traffic for port mirroring?

Answer 5

A SPAN port.

Note: If you can not configure a SPAN port, you must then use a network tap.

Question 6

What is a network tap?

Answer 6

A physical device that allows you to copy the traffic between two points on a network.