Running tcpdump causes a significant increase on CPU usage, what other option should you use?

Running tcpdump causes a significant increase on CPU usage, what other option should you use?
A . fw monitor
B . Wait for out of business hours to do a packet capture
C . cppcap
D . You need to use tcpdump with -e option to decrease the length of packet in captures and it will utilize the less CPU

View Answer

Answer: C

Explanation:

When tcpdump causes high CPU usage, an alternative is to use cppcap, which is optimized for capturing packets with lower CPU overhead in Check Point environments. cppcap is designed to work efficiently with Check Point’s infrastructure, reducing the performance impact compared to generic tools like tcpdump.