3 ms·
You can even let tcpdump write packets to stdout, then pipe directly to your local wireshark and get a live view: ssh your-host tcpdump -w - -U 'not port 2
by gorgonq 3y ago
You can even let tcpdump write packets to stdout, then pipe directly to your local wireshark and get a live view:
ssh your-host tcpdump -w - -U 'not port 22' | wireshark -i - -k
makes sense to exclude port 22 from the dump =)
- ElijahLynn 3y agoI've used this method with success! +1
- silentprog 3y agoThis works, but you won’t get the interface name in wireshark. If you also require the captured interface you can substitute tcpdump with tshark