Question

How does Wireshark differ from NetWitness Investigator?

Answer 1

Answer is given below

Explanation:

• Wireshark differ from NetWitness Investigator because
• Windshark shows a detailed view of individual packets.
• WireShark captures live traffic and displays the results at the packet level.
• Netwitness shows a high-level view and can be compared to the new packet capture
• NetWitiness Investigator provides a comprehensive overview of previously tracked traffic that can be used to view anomalies, compliance and attacks.