Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

What does tshark -D show for interfaces? On my computer, the wireless interface is enumerated as interface 5, something like so:

5. \Device\NPF_{...} (WiFiInterfaceName)

So I could use any of these formats:

tshark -i 5 -w capture.pcap tcp port 12345
tshark -i \Device\NPF_{...} -w capture.pcap tcp port 12345
tshark -i WiFiInterfaceName -w capture.pcap tcp port 12345