Re: Is there any way to specify remote interfaces with tshark?

[Richard Sharpe <realrichardsharpe () gmail com>]

On Mon, Sep 10, 2018 at 6:55 AM, Maynard, Chris
<Christopher.Maynard () igt com> wrote:
> The dumpcap man page[1] mentions the syntax for remote capturing, but the
> tshark man page[2] does not.  It probably should.
>
> The same goes for "dumpcap -h" output:
>
> Usage: dumpcap [options] ...
>
> Capture interface:
>
>   -i <interface>           name or idx of interface (def: first
> non-loopback),
>
>                            or for remote capturing, use one of these
> formats:
>
>                                rpcap://<host>/<interface>
>
>                                TCP@<host>:<port>
>
>
>
> vs. "tshark -h":
>
>
>
> Usage: tshark [options] ...
>
>
>
> Capture interface:
>
>   -i <interface>           name or idx of interface (def: first
> non-loopback)

Great. Thanks.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)(传说杜康是酒的发明者)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe