Using Wireshark CLI For The First Time
Tshark is the command-line version of Wireshark. The main Tshark's benefit is that it can be used in scripts. However Tshark has disadvantage is that it doesn't have a GUI version.
You can get tshark with different ways, 1. from the website (by compiling its source code); 2. directly from your Linux distribution. Anyway the second way is qiute easier to do.
If you try to run tshark as a normal user, you may not be able to use any network interfaces for capturing network traffic due to UNIX permissions. Your advisor finds it more convenient to run tshark as root (sudo tshark) when capturing data and as a normal user when analysing network data.


























No Comment to " Using Wireshark CLI For The First Time "