Forrest logo
back to context overview

tshark

List of commands for tshark:

  • tshark:tldr:029f4 tshark: Only capture packets matching a specific capture filter.
    $ tshark -f '${udp port 53}'
    try on your machine
    explain this command
  • tshark:tldr:04469 tshark: Analyze packets from a file.
    $ tshark -r ${filename-pcap}
    try on your machine
    explain this command
  • tshark:tldr:51c4b tshark: Monitor everything on localhost.
    $ tshark
    try on your machine
    explain this command
  • tshark:tldr:606c3 tshark: Only show packets matching a specific output filter.
    $ tshark -Y '${http-request-method == "GET"}'
    try on your machine
    explain this command
  • tshark:tldr:a1a50 tshark: Select specific fields to output.
    $ tshark -T ${select} -e ${http-request-method} -e ${ip-src}
    try on your machine
    explain this command
  • tshark:tldr:b0a83 tshark: Decode a TCP port using a specific protocol (e.g. HTTP).
    $ tshark -d tcp.port==${8888},${http}
    try on your machine
    explain this command
  • tshark:tldr:ef8ef tshark: Write captured packet to a file.
    $ tshark -w ${filename}
    try on your machine
    explain this command
  • tshark:tldr:f0e77 tshark: Specify the format of captured output.
    $ tshark -T ${select}
    try on your machine
    explain this command
back to context overview