Answer is given below
Step-by-step explanation:
- Wireshark differ from NetWitness Investigator because
- Windshark shows a detailed view of individual packets.
- WireShark captures live traffic and displays the results at the packet level.
- Netwitness shows a high-level view and can be compared to the new packet capture
- NetWitiness Investigator provides a comprehensive overview of previously tracked traffic that can be used to view anomalies, compliance and attacks.