Termshark – A terminal UI for tshark, inspired by Wireshark

Re:Termshark – A terminal UI for tshark, inspired by Wireshark by iammeow on Tuesday April 23, 2019 @03:49AM (#19726433)

Came here to write the very same command. I only use -l instead of -U. In Windows using WSL I use something like this:

  ssh root@remotehost "tcpdump -i eth1 -s0 -l -w - 'udp'" | /mnt/c/Program\ Files/Wireshark/Wireshark.exe -k -i -

[ Parent | on HN ]

Re:Termshark – A terminal UI for tshark, inspired by Wireshark by kees99 on Tuesday April 23, 2019 @06:09AM (#19727067)

Option "-l" only supposed to be used with text output. When mis-applied to binary (-w) output, it will:

- On Linux, flush buffer at wrong places, breaking last (few) packet(s);

- On Windows, flush buffer after every byte (which gives acceptable result, but is very inefficient).

With "-w", always use "-U" instead.

[ Parent | on HN ]

Re:Termshark – A terminal UI for tshark, inspired by Wireshark by iammeow on Tuesday April 23, 2019 @12:34PM (#19730212)

Thank you so much, not had a clue

[ Parent | on HN ]

Re:Termshark – A terminal UI for tshark, inspired by Wireshark by unixhero on Thursday April 25, 2019 @01:54AM (#19745406)

Who would have known that :) I sense a project developer is contributing to the discussion here :).

[ Parent | on HN ]