Remote WireShark
In this post I explain how I launch a network traffic capture (tcpdump) on a remote Linux machine (Pi2 with Gentoo) and have it forwarded to Wireshark running on my computer (Mac). We’ll get tcpdump’s output to become Wireshark’s input. It seems like magic but you’ll see it’s extremely simple. You’ll need to know ssh and sudo, a couple of prerequisites for making this so easy. …