What is the correct command to observe the Sync traffic in a VRRP environment?

What is the correct command to observe the Sync traffic in a VRRP environment?
A . fw monitor Ce “accept[12:4,b]=224.0.0.18;”
B . fw monitor Ce “accept port(6118;”
C . fw monitor Ce “accept proto=mcVRRP;”
D . fw monitor Ce “accept dst=224.0.0.18;”

View Answer

Answer: D

Explanation:

The correct command to observe the Sync traffic in a VRRP environment is fw monitor Ce “accept dst=224.0.0.18;”. This command captures the packets that have the destination IP address of 224.0.0.18, which is the multicast address used by VRRP for synchronization. The other commands are either not valid or not specific to VRRP Sync traffic.

Reference: [Check Point R81 ClusterXL Administration Guide], Check Point R81 Performance Tuning Administration Guide