Skip to content

Instantly share code, notes, and snippets.

@gitrc

gitrc/remoteshark.sh

Last active December 28, 2015 17:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save gitrc/7534987 to your computer and use it in GitHub Desktop.
Save gitrc/7534987 to your computer and use it in GitHub Desktop.
Download ZIP
Don't bother with copying PCAP files, just pipe tcpdump over SSH into wireshark! Great for embedded system work.
Raw
remoteshark.sh
#!/bin/sh
#
# from your workstation run below where <expression> is your tcpdump expression
# works great on OSX
#
ssh root@destination.host "/path/to/tcpdump -s 0 -U -w - -i ethX <expression>" |wireshark -i - -k
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment