how to run wireshark over ssh

edit

it's not work I get error data written to the pipe is neither in a supported pcap format nor in pcapng format I run windows 10 not linux

And both those questions discuss remoting from Windows to a linux (or alike) system running tcpdump, which seems to be what you're asking for.

Note that the answer given for the first question I linked passes in the ssh password on the command line, have you tried that?

Thanks I tried with the password and I still getting the error

data written to the pipe is neither in a supported pcap format nor in pcapng format

That error usually occurs because "something" has written to the pipe with data that's not part of a capture file. Commonly this is the sshd process on the server asking for passwords or such.

What output do you get with a command such as:

C:\tools\plink.exe -ssh -pw password [email protected] “echo whoami"

obviously replacing "password" and "[email protected]" with the correct password, user name and host for your remote system.

I get this

Bad parameter starting at 'echo whoami'