Comprehensive and Detailed Explanation From Exact Extract:
This command uses a Wireshark display filter (-Y) to show packets that match either HTTP or UDP:
http matches HTTP protocol traffic, which is unencrypted web traffic (i.e., not HTTPS/TLS). To view encrypted web requests (HTTPS), you would need SSL/TLS decryption support and a proper setup (keys, etc.). The All-in-One guide explicitly notes Wireshark/TShark support for SSL/TLS decryption to view encrypted traffic, implying encrypted web traffic isn’t simply “http” unless decrypted and dissected accordingly.
udp matches all UDP traffic, and DNS commonly uses UDP/53, so DNS packets will be included as part of UDP traffic.
Supporting extracts from the All-in-One guide about filtering and web ports (HTTP/HTTPS) and TLS decryption capabilities:
Exact extract (All-in-One Exam Guide):
“Port filters… Example: tcp port 80 or tcp port 443”
Exact extract (All-in-One Exam Guide):
“Support for SSL/TLS decryption to view encrypted traffic”
Therefore: The filter shows unencrypted web (HTTP) traffic and UDP traffic (which includes DNS), making B the best match.
===========
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit