Hi Fellow Listerrs,

I am beginning a program in March that will heavily use Wireshark; however, my intention is to use its terminal window, ‘tshark’. I would greatly appreciate any tips and tricks that you have utilized.

Thx,

I would suggest ensuring that you understand the TShark filter language so that you can capture, and monitor, exactly the packets of interest. Otherwise, the output may be overwhelming.

The syntax is documented in the TShark manual page.