Skip to content

Wireshark can be used for live packet capture as well as offline analysis of saved captures.

Answer

true

Explanation

### Why this is right Wireshark supports both live capture and offline analysis. A user can inspect traffic as it is captured or open a saved capture for later examination. ### The concept Live capture can show current network behavior, while saved captures preserve traffic for detailed analysis or documentation. Captures can contain large volumes of data, so filters help focus on traffic relevant to the investigation. ### Terms - **Packet capture**: recorded network traffic that can be inspected for analysis. ### Remember Wireshark can examine traffic live or from a saved capture.

Related Questions

Want to practice more questions like this?

Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.

Start Practicing Free