I believe this is a typo in the command line help for the -i option: Usage: wireshark [options] ... [ <infile> ] Capture interface: -i <interface> name or idx of interface (def: first none loopback) Shouldn't that read "first non-loopback" ? Steve