Wireshark-dev: Re: [Wireshark-dev] Is there any way to specify remote interfaces with tshark?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Richard Sharpe <realrichardsharpe@xxxxxxxxx>
Date: Mon, 10 Sep 2018 07:36:57 -0700
On Mon, Sep 10, 2018 at 6:55 AM, Maynard, Chris
<Christopher.Maynard@xxxxxxx> wrote:
> The dumpcap man page[1] mentions the syntax for remote capturing, but the
> tshark man page[2] does not.  It probably should.
>
> The same goes for "dumpcap -h" output:
>
> Usage: dumpcap [options] ...
>
> Capture interface:
>
>   -i <interface>           name or idx of interface (def: first
> non-loopback),
>
>                            or for remote capturing, use one of these
> formats:
>
>                                rpcap://<host>/<interface>
>
>                                TCP@<host>:<port>
>
>
>
> vs. "tshark -h":
>
>
>
> Usage: tshark [options] ...
>
>
>
> Capture interface:
>
>   -i <interface>           name or idx of interface (def: first
> non-loopback)

Great. Thanks.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)(传说杜康是酒的发明者)