Don't even need wireshark (tshark) for that - just use native tcpdump Check the man page for it. -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"