Which is the correct "fw monitor" syntax for creating a capture file for loading it into Wireshark?

Which is the correct "fw monitor" syntax for creating a capture file for loading it into Wireshark?
A . fw monitor -e "accept <FILTER EXPRESSION*;" > Output.cap
B . This cannot be accomplished as it is not supported with R80.10
C . fw monitor -e "accept <FILTER EXPRESSION^" -o Output.cap
D . fw monitor -e "accept <FILTER EXPRESSION*;" -file Output.cap

View Answer

Answer: D

Explanation:

The correct syntax for using fw monitor to create a capture file compatible with Wireshark involves specifying the filter expression and the output file with the .cap extension. Option D correctly uses the -e flag for the filter expression and the -file flag to specify the output file, ensuring the captured data can be seamlessly imported into Wireshark for analysis.