On Mon, Sep 10, 2018 at 6:55 AM, Maynard, Chris
<Christopher.Maynard@xxxxxxx> wrote:
> The dumpcap man page[1] mentions the syntax for remote capturing, but the
> tshark man page[2] does not. It probably should.
>
> The same goes for "dumpcap -h" output:
>
> Usage: dumpcap [options] ...
>
> Capture interface:
>
> -i <interface> name or idx of interface (def: first
> non-loopback),
>
> or for remote capturing, use one of these
> formats:
>
> rpcap://<host>/<interface>
>
> TCP@<host>:<port>
>
>
>
> vs. "tshark -h":
>
>
>
> Usage: tshark [options] ...
>
>
>
> Capture interface:
>
> -i <interface> name or idx of interface (def: first
> non-loopback)
Great. Thanks.
--
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)(传说杜康是酒的发明者)
