Commit abb8298f authored by Tomáš Szaniszlo's avatar Tomáš Szaniszlo
Browse files

Added tip: Wireshark for remote machine

parent e8c7885e

CS.md

+12 −0
Original line number Diff line number Diff line
@@ -94,6 +94,18 @@ Find and print all files in cwd except those in directory `.git` and those match 


- - -



**Wireshark for remote machine**



    ssh root@$REMOTE tcpdump -U -i $IFACE $PCAPFILTER -w /dev/stdout | wireshark -k -i - -d $DISPLAYFILTER

    ssh root@$REMOTE tcpdump -U -i $IFACE $PCAPFILTER -w /dev/stdout | tshark -x -r - -O $VERBOSEPROTOS $CAPTUREFILTER



Examples:



    ssh root@ares tcpdump -U -i vlan2 host lj2b -w /dev/stdout | wireshark -k -i - -d 'icmp'

    ssh root@ares tcpdump -U -i vlan48 host aisa -w /dev/stdout | tshark -x -r - -O dns 'udp.port == 53'



- - -



**Other cheatsheets**



* Markdown: <http://packetlife.net/media/library/16/Markdown.pdf>