Which Windows command-line tool is the counterpart to tcpdump for packet capture?

• A. Windump
• B. Tcpdump
• C. Netstat
• D. PuTTY

Answer: (A)

tcpdump is a command-line packet capture tool used to sniff traffic and apply filters on Unix-like systems. On Windows, the closest direct counterpart is Windump, a Windows port of tcpdump that provides the same capture and filtering capabilities and uses the same syntax. It relies on WinPcap or Npcap to access network interfaces, just like tcpdump relies on libpcap.

Netstat isn’t a packet sniffer; it shows active connections and statistics. PuTTY is a terminal/remote access client, not a packet capture tool. Tcpdump itself is the Unix-oriented version, not the native Windows tool. So Windump best fits as the Windows equivalent for packet capture.