DHCP snooping is a mitigation technique<span> to </span>prevent rogue<span> DHCP </span>servers <span>from </span>providing false IP configuration parameters to clients. DHCP snooping<span> is a security feature that acts like a firewall between untrusted hosts and trusted </span>DHCP<span> servers. It is</span><span> a series of techniques applied to improve the security of a </span>DHCP<span> infrastructure. </span>
<u>Explanation:</u>
Note, the Wireshark software application is unique in that it has the ability to perform multiple layers of individual packet analysis.
Whereas in NetWitness Investigator software application, even though it doesn't go deeper like Wireshark, it can still detect new threats or problems in a network and then organized all of such information for the administrator.
So, in a sense, by using both applications, a network administrator can find the problems (using Wireshark), while another application (NetWitness Investigator) organizes them for him.
