RSS Amplifier

jbowen.dev · Feb 19, 2021

Forwarding remote tcpdump streams to Wireshark

0
Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

Often times one wants to analyze network traffic on a remote host with Wireshark running locally. One method is to capture the traffic with tcpdump on the remote host and then download the completed capture to your local computer and open it for analysis. This works but is awkward and time consuming. What if, instead, one was able to watch the network capture in Wireshark live? With a combination…

Often times one wants to analyze network traffic on a remote host with Wireshark running locally. One method is to capture the traffic with tcpdump on the remote host and then download the completed capture to your local computer and open it for analysis. This works but is awkward and time consuming. What if, instead, one was able to watch the network capture in Wireshark live? With a combination of ssh and tcpdump it is possible to do just that as shown below:

Read on /tips/remote-wireshark/

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.