wireshark-remote


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

#!/bin/bash

host="$1"
iface="$2"
shift 2

if (($#>0)); then
	filter="and ($*)"
fi

#wireshark -k -i <(ssh "$host" tshark -i "$iface" -w - not tcp port 22)
#wireshark -k -i <(ssh "$host" dumpcap -q -i "$iface" -w /dev/stdout 'not\ tcp\ port\ 22')
#wireshark -k -i <(ssh "$host" /home/flo/capture.sh "$iface")

#wireshark-gtk -k -i <(ssh "$host" dumpcap -q -P -i "$iface" -w - -f 'not\ port\ 22')
sed -i "s/^gui\.window_title: .*/gui.window_title: $host $iface $filter/" ~/.config/wireshark/preferences
wireshark -k -i <(stdbuf -o0 ssh "$host" stdbuf -o0 sudo stdbuf -o0 tcpdump -s 65535 -i "$iface" -w - "'not port 22 $filter'")