<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Capture on Technical Notes</title><link>http://luispa.com/en/tags/capture/</link><description>Recent content in Capture on Technical Notes</description><generator>Hugo -- 0.148.0</generator><language>en-US</language><lastBuildDate>Sun, 05 Jun 2016 00:00:00 +0000</lastBuildDate><atom:link href="http://luispa.com/en/tags/capture/index.xml" rel="self" type="application/rss+xml"/><item><title>Remote WireShark</title><link>http://luispa.com/en/posts/2016-06-05-wireshark-remoto/</link><pubDate>Sun, 05 Jun 2016 00:00:00 +0000</pubDate><guid>http://luispa.com/en/posts/2016-06-05-wireshark-remoto/</guid><description>&lt;img src="http://luispa.com/img/posts/logo-wireshark.svg" alt="Wireshark logo" width="150px" style="float:left; padding-right:25px" />
&lt;p>In this post I explain how I launch a network traffic capture (&lt;code>tcpdump&lt;/code>) on a remote Linux machine (&lt;a href="http://luispa.com/en/posts/2015-05-17-gentoo-pi2/">Pi2 with Gentoo&lt;/a>) and have it forwarded to &lt;strong>Wireshark&lt;/strong> running on my computer (Mac). We&amp;rsquo;ll get tcpdump&amp;rsquo;s output to become Wireshark&amp;rsquo;s input. It seems like magic but you&amp;rsquo;ll see it&amp;rsquo;s extremely simple. You&amp;rsquo;ll need to know &lt;code>ssh&lt;/code> and &lt;code>sudo&lt;/code>, a couple of prerequisites for making this so easy.&lt;/p>
&lt;br clear="left"/></description></item></channel></rss>