Which option creates a display filter on Wireshark on a host IP address or name?
A. ip.address == <address> or ip.network == <network>
B. [tcp|udp] ip.[src|dst] port <port>
C. ip.addr == <addr> or ip.name == <name>
D. ip.addr == <addr> or ip.host == <host>
D is correct tested in wireshark
The answer is D
from wireshark display filters
FIELD NAME DESCRIPTION TYPE VERSIONS
ip.addr Source or Destination Address IPv4 address 1.0.0 to 2.4.4
ip.host Source or Destination Host Character string 1.0.0 to 2.4.4
https://www.wireshark.org/docs/dfref/i/ip.html
Answer is D