3 ms·
In addition to tcpdump, I'd like to add the command 'tshark'. Tshark usually comes bundled with wireshark and allows you to use the same search capabilities as
by jazzyb 16y ago
In addition to tcpdump, I'd like to add the command 'tshark'. Tshark usually comes bundled with wireshark and allows you to use the same search capabilities as wireshark from the command line. I find it much easier to use than tcpdump especially if you already have experience with wireshark.
- pixdamix 16y agoWhen it comes to wireshark and remote servers i often do this: ssh root@someserver "/tmp/tcpdump -i any -p -s0 -w - not port 22" | \ wireshark -i - -k