Skip to content

Two ways to make tcpdump work together with Wireshark

Capture and open with wireshark

tcpdump -w a.pcap

Using ssh and pipe

ssh some.remote.host tcpdump -pni any -w - -s0 -U port 8888 | wireshark -k -i