There are a few things that may make the line above not work in your case. The output is sent over SSH to the local host’s “stdout” where Wireshark is waiting on “stdin” for input. This will run tcpdump on host “remote-host” and capture full packages (-s0) on port 8080. Linux ssh remote-host 'tcpdump -s0 -w - 'port 8080'' | wireshark -k -i. Run Wireshark on your desktop (Linux or Windows) and capture on the remote server. Just run following command.You want to use tcpdump in combination with Wireshark but on the server there is no X environment or no Wireshark installed? You can use a bash script in ubuntu called airmon-ng to put your wireless card in monitor mode. For this, a switch has a memory associated with it which can map ports to receiver's MAC addressesĮnable Monitor Mode in BroadCom wireless card It does not simple flood packets to all ports in the switch. This mode is not enables by default in switches since it fowards packets to the port which the intended receiver has connected to.

For this case, you need to connect to the network that you need to sniff. Promiscuous mode is a special mode for hubs (not switches) in which you can capture all packets travel through the hub. This can be done only with Wireless Devices since you cannot receive other's packets with wired connected switches. In Wireless Monitor mode, you don't need to connect to any network, you can freely sniff packets through Wireshark. For that you need to connect to the access point/ad-hoc network that you need to sniff packets. If you have used wireshark previously, you may have sniffed packets coming to one of your interfaces. Make sure it is listed as a wireless interface before you go into following steps. If it is listed as an ethernet interface (such as eth1), the problem is you are still using the BroadCom STA driver. Check whether your real wireless interface has been listed there as a wireless interface (such as wlan0).

One additional thing, it you type sudo iwconfig in the terminal and run, you can view all wireless interfaces in your computer.

Remote wireshark ubuntu windows