Match each Wireshark feature or component with its primary function: Features: 1. Live capture 2. Offline analysis 3. Display filter 4. TShark Functions: A. Command-line packet analyzer used to capture or inspect traffic without a graphical interface B. Real-time recording of traffic passing across an active network interface C. Rule applied to dynamically hide or show captured packets without discarding them from memory D. Inspection and troubleshooting of traffic loaded from a previously saved capture file

### The pairs | Item | Matches | Why | |---|---|---| | Live capture | Collect network traffic as it occurs | Wireshark can inspect traffic while a selected interface is being monitored. | | Offline analysis | Inspect traffic saved in a capture file | Saved data can be reviewed later. | | Display filter | Show only packets relevant to a chosen analysis | Filtering helps manage large captures. | | TShark | Terminal-based utility for browsing captured network data | It provides a text-based way to work with captured data. | ### Terms - **TShark**: Wireshark’s terminal-oriented utility for working with captured network data.