Copy TCPDUMP capture to remote location

dump_traffic.sh

#!/bin/bash

sudo pkill -9 -f tcpdump
while [ 1 ]
do
    ip=`hostname -I | cut -f 1 -d ' '`
    #exits after every 2 hrs
    sudo tcpdump -i eth0 -G 7200 "host not $ip and not arp" -w - | ssh remote_location 'cat > ~/your_pcap_dir/`date +%F-%s`.pcap'
    sleep 1
done