Which of the following Wireshark filter(s) will he use to locate the TCP OS fingerprinting attempt?

John is a network administrator and is monitoring his network traffic with the help of Wireshark. He suspects that someone from outside is making a TCP OS fingerprinting attempt on his organization’s network.

Which of the following Wireshark filter(s) will he use to locate the TCP OS fingerprinting attempt?
A . Tcp.flags==0x2b
B. Tcp.flags=0x00
C. Tcp.options.mss_val<1460
D. Tcp.options.wscale_val==20

Answer: A,B,C