Wireshark Remote Linux: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| Zeile 16: | Zeile 16: | ||
==In one Command== | ==In one Command== | ||
| + | ;sicher | ||
*ssh -X root@worf wireshark | *ssh -X root@worf wireshark | ||
| + | ;schnell | ||
| + | *ssh -Y root@worf wireshark | ||
| + | |||
==With tcpdump and a pipe== | ==With tcpdump and a pipe== | ||
*ssh root@worf tcpdump -s 0 -U -n -w - -i ppp0 'icmp' | wireshark -k -i - | *ssh root@worf tcpdump -s 0 -U -n -w - -i ppp0 'icmp' | wireshark -k -i - | ||
Aktuelle Version vom 14. August 2024, 09:55 Uhr
Linux
tcpdump and wireshark offline
- ssh root@worf
- tcpdump -s 0 -n -w file-icmp.cap -i ppp0 'icmp'
- CTRL+C
- exit
- scp root@worf:file-icmp.cap .
- wireshark file-icmp.cap
Enables X11 forwarding
- sicher
- ssh -X root@worf
- root@worf:~# wireshark
- schnell
- ssh -X root@worf
- root@worf:~# wireshark
In one Command
- sicher
- ssh -X root@worf wireshark
- schnell
- ssh -Y root@worf wireshark
With tcpdump and a pipe
- ssh root@worf tcpdump -s 0 -U -n -w - -i ppp0 'icmp' | wireshark -k -i -
With tcpdump and a namedpipe
- mkfifo /tmp/fifo.cap
- ssh root@worf "tcpdump -s 0 -U -n -w - -i ppp0 'icmp'" > /tmp/fifo.cap &
- wireshark -k -i /tmp/fifo.cap