Discover the answers you need at Westonci.ca, a dynamic Q&A platform where knowledge is shared freely by a community of experts. Explore thousands of questions and answers from knowledgeable experts in various fields on our Q&A platform. Explore comprehensive solutions to your questions from knowledgeable professionals across various fields on our platform.

Both Wireshark and NetWitness Investigator can be used for packet captures and analysis. Which tool is preferred for each task, and why

Sagot :

Answer:

  • packet capture best suited for Wireshark
  • packet analysis best suited for Netwiness

Explanation:

Although both software packages can carry out each task, however, expert network administrators have noted that in terms of effectiveness, the Wireshark software application is best suited for packet capture since unlike Netwitness has no limitation on the size of files it can capture.

Whereas, because Netwitness has a capacity of up to seven-layer protocol analysis, it can perform a more detailed analysis of packets.