Wireshark · Wireshark-users: Re: [Wireshark-users] pcap and text at the same time?

[Sake Blok <sake@xxxxxxxxxx>]

On Thu, Nov 22, 2007 at 11:37:08AM +0100, Xu Yao wrote:
> 
> I would like to know if it's possible to display the capture in text format
> in stdout and save it in a file in pcap format at the same time during a
> live capture.

Yes, that's possible

> If so, what's the command to do so in tshark?

>From "tshark -h":

  -S                       display packets even when writing to a file


So you would use something like "tshark -w <file> -S -i <int>"

Hope this helps,  Cheers,


Sake