Prepare for your Ethical Hacking Essentials Test. Study with flashcards and multiple choice questions with detailed hints and explanations. Enhance your cybersecurity skills and get ready for your exam!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which GUI tool is commonly used to sniff live network traffic and provides customizable filters?

  1. bettercap

  2. hping3

  3. LOIC

  4. Wireshark

The correct answer is: Wireshark

Wireshark is a powerful and widely used GUI tool for network protocol analysis and packet sniffing. It allows users to capture and interactively browse the traffic running on a computer network. The key feature that distinguishes Wireshark is its ability to apply customizable filters, enabling users to narrow down their focus to specific types of traffic or protocols. This flexibility makes it an invaluable tool for ethical hackers, network administrators, and security professionals who need to analyze network traffic in detail. Other tools listed, such as bettercap, hping3, and LOIC, serve different purposes in the realm of network security and testing. Bettercap is more focused on man-in-the-middle attacks and network attacks rather than packet sniffing with an intuitive interface. Hping3 is a command-line tool used mainly for crafting and sending customized TCP/IP packets and does not provide a GUI for traffic analysis. LOIC (Low Orbit Ion Cannon) is primarily used as a network stress testing tool that performs Distributed Denial of Service (DDoS) attacks, rather than sniffing network traffic. Therefore, Wireshark stands out as the best option for capturing live network traffic with the ability to customize filters.