SANS560 GIAC Penetration Tester (GPEN) Practice Test

Visual inspection of captured traffic is best done with a dedicated packet analyzer such as Wireshark. Scapy can capture packets and save them to a PCAP file, which Wireshark can open to provide a rich, graphical view of each packet, protocol dissections, timelines, and follow-stream analysis. This combination lets you craft or sniff traffic with Scapy and then use Wireshark’s powerful visual tools to understand exactly what happened on the network.

Nmap, Burp Suite, and Nessus serve different purposes—Nmap for network discovery and port scanning, Burp Suite for web application security testing, and Nessus for vulnerability assessment—so they aren’t used for visually analyzing raw captured traffic.