Question

An engineer is troubleshooting HTTP traffic to a web server with the packet-capture tool in Cisco FMC. While reviewing the captures, the engineer observes many packets that neither originate from nor are destined for the web server being captured. How can the engineer reduce the burden on the Cisco FTD device from capturing irrelevant traffic?

Accepted Answer

B. Use the host filter in the packet capture to capture traffic to or from a specific host.

Answer

Use an access-list within the packet capture to permit only HTTP traffic to and from the web server.

Answer

Use the –c option to restrict the packet capture to only the first 100 packets.

Answer

Redirect the packet capture output to a .pcap file that can be opened with Wireshark.