Capture all packets from 10.10.10.10's port 53 to host 172.16.0.1 on interface eth0.

Question

Given below tcpdump command what statements are false?

tcpdump -i eth0 -nn -c 1000 -p '(host 10.10.10.10 and port 53) or (dst host 172.16.0.1 and not port 22)'

Accepted Answer

Only packets traveling from 10.10.10.10's port 53 to host 172.16.0.1 are captured.

Accepted Answer

Tcpdump translates ip addresses and port numbers to hostnames and human friendly names

Accepted Answer

Interface eth0 is put into promiscious mode during the time the capture takes place.

Answer

Tcpdump exits after capturing 1000 packets

Answer

All outbound traffic to host 172.16.0.1 is captured with the exception of  connections to port 22.

Answer

Outbound and inbound packets from ip address 10.10.10.10 on  port 53 are captured.

Question from the Linux test