Question

Please answer below:

In tcpdump, we can write to a .pcap extension file. This allows us to write raw data packets that we have as an output to a standard .pcap extension file. Where the read option (-r) helps us to read that file.

The following command will not work correctly: tcpdump -i eth0 icmp -c 10 > file.pcap

Write the correct statement to write the packet capture above to the file.pcap file, so that it can be read with this command: tcpdump -r file.pcap

Answer 1

Q:-
In tcpdump, we can write to a .pcap extension file. This allows us to write raw data packets that we have as an output to a standard .pcap extension file. Where the read option (-r) helps us to read that file.
Answer:-----
To write this .pcap file we follow:
tcpdump -i eth0 icmp -c 10 -w file.pcap

To read this .pcap file we follow:
tcpdump -r file.pcap