Before I get into the tshark command syntax and other details, I want to chat about why you want to use tshark or any command lint tool. Simply put, working from the command line allows a tremendous amount of consistency and flexibility.
Consistency
When you try to have someone perform your capture using the Wireshark GUI, there are many opportunities for errors as well as just being very time consuming. When you have the command line syntax figured out you can put it in an email, batch file or document ensuring the client is doing exactly what you wanted. The added bonus is that working from, the command line is usually more responsive that remotely controlling a GUI over possibly slow links.
Flexibility
As I mentioned earlier, using the command line allows you to put the command in a batch file or document. This is incredibly useful if you wanted to schedule a capture, or if you wanted to configure a computer to automatically start capturing when it’s turned on. Other examples would be setting a desktop shortcut for the client to start
Watch video dumpcap capture examples online, duration hours minute second in high quality that is uploaded to the channel The Technology Firm 06 January 2020. Share the link to the video on social media so that your subscribers and friends will also watch this video. This video clip has been viewed 2,931 times and liked it 22 visitors.