Skip to content

TShark

Capture specific packets with capture filter on any interface

tshark -f "host 192.168.1.1" -i any

Capture everything on any interface and use display filter

tshark -Y "icmp" -i any