Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Use tcpdump to capture for Wireshark?

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 24 Oct 2006 10:25:56 -0700
John Oliver wrote:
I redirected the output of tcpdump to an ASCII text file, but Wireshark
doesn't like that.  How can I capture traffic with tcpdump in a format
that Wireshark will understand?

By using the "-w" flag. (That's also how you capture traffic with tcpdump in a format that tcpdump will understand, and that some other free and commercial tools will understand. It's libpcap format, the same format that Wireshark/TShark uses.)