Answered

Both Wireshark and NetWitness Investigator can be used for packet captures and analysis. Which tool is preferred for each task, and why

Answer :

Answer:

  • packet capture best suited for Wireshark
  • packet analysis best suited for Netwiness

Explanation:

Although both software packages can carry out each task, however, expert network administrators have noted that in terms of effectiveness, the Wireshark software application is best suited for packet capture since unlike Netwitness has no limitation on the size of files it can capture.

Whereas, because Netwitness has a capacity of up to seven-layer protocol analysis, it can perform a more detailed analysis of packets.

Go Question: Other Questions