To analyze live traffic on a per-interface basis, which tool should you use?

• A. Traceroute
• B. Torch
• C. Bandwidth Test
• D. Packet Sniffer

Answer: (B)

Analyzing live traffic as it flows through a specific interface requires a tool that can observe packets in real time and break them down by source, destination, protocol, and port on that interface. Torch is built for this purpose. It lets you run a live view on a chosen interface and see per-host and per-flow activity with real-time rates, which makes it ideal for understanding what’s actually traversing that link.

Traceroute, by contrast, is about the path to a destination and not about ongoing traffic load on an interface. Bandwidth tests measure throughput between two points, not the real-time mix of traffic on a single interface. A packet sniffer can capture traffic broadly, but Torch provides a focused, real-time, per-interface view with immediately actionable detail, which is why it’s the best fit here.