Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?

Which command should be used on the Cisco FTD CLI to capture all the packets that hit an interface?
A . configure coredump packet-engine enable
B. capture-traffic
C. capture
D. capture WORD

View Answer

Answer: C

Explanation:

Reason: the command "capture-traffic" is used for SNORT Engine Captures. To capture a LINA Engine Capture, you use the "capture" command. Since the Lina Engine represents the actual physical interface of the device, "capture" is the only reasonable choice

Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with-firepower-threat-defense-f.html#anc10

The command is

firepower# capture DMZ interface dmz trace detail match ip host 192.168.76.14 host 192.168.76.100

firepower# capture INSIDE interface inside trace detail match ip host 192.168.76.14 host 192.168.75.14