Wireshark-users: Re: [Wireshark-users] is it possible to use tcpdump to display capturign informa
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 29 Oct 2012 10:42:57 -0700
On Oct 29, 2012, at 5:48 AM, esolve esolve <esolvepolito@xxxxxxxxx> wrote:

> if I use tcpdump without "-w example.pcap"
> the capturing information can be displayed on the linux shell window
> but if I want to write the captured packets into a pcap file
> the capturing information won't be displayed
> 
> is there a way to  display capturign information on the linux shell window  while writing to pcap files?

With tcpdump, no.

With TShark, yes:

    TShark prior to 1.8:

	tshark ... -S -w example.pcap

    TShark 1.8.0 and later:

	tshark ... -P -w example.pcap