[CentOS] Using Wireshark on CentOS without UI

Thu Apr 22 12:00:34 UTC 2010
James Hogarth <james.hogarth at gmail.com>

On 22 April 2010 12:57, Jatin Davey <jashokda at cisco.com> wrote:
> Hi All
>
> Yesterday i had installed wireshark on my centos box which does not have
> the GUI , It is actually a hardened box. I installed the tool using the
> following command:
>
> yum install wireshark
>
> After installation i dont know how to proceed further in capturing the
> packets. I basically want to capture packets and copy them onto my
> windows box. On the windows box i can use the Wireshark UI to open the
> pcap file to view its contents.
>
> Can some one help me in this regard.
>
> Thanks
> Jatin
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

For a box with no GUI use tcpdump to get a packet capture to then scp
over to a box with wireshark on it to analyse the traffic... your
windows box in this case.

James