Which capability is highlighted as part of Cain's sniffer?

• A. Decoding VOIP protocols such as SIP and RTP
• B. Patching software automatically
• C. Blocking outbound connections from the host
• D. Brute-forcing passwords locally

Answer: (A)

Sniffing network traffic to interpret higher‑level protocols is what Cain’s sniffer excels at. It doesn’t just grab raw bytes; it decodes the protocol messages so you can read the signaling and media details of VoIP. In VoIP, SIP handles how calls are set up, negotiated, and torn down, while RTP carries the actual voice data. Being able to decode SIP and RTP means you can see who’s talking to whom, call setup information, and, if the traffic isn’t encrypted, even the media payload. The other options describe actions outside the sniffer’s function—automatic patching, blocking outbound connections, or brute-forcing passwords locally.