Wireshark Commands Cheatsheet

Wireshark Commands Cheatsheet

Wireshark Commands Cheatsheet - HackersOnlineClub

Wireshark Commands Cheatsheet - HackersOnlineClub

Capture interface:

-i  <interface> name or idx of interface (def: first non-loopback)
-f  <capture filter> packet filter in libpcap filter syntax
-s  <snaplen> packet snapshot length (def: 65535)
-p  don’t capture in promiscuous mode
-k  start capturing immediately (def: do nothing)
-Q  quit Wireshark after capturing
-S  update packet display when new packets are captured
-l  turn on automatic scrolling while -S is in use
-B  <buffer size> size of kernel buffer (def: 1MB)
-y  <link type> link layer type (def: first appropriate)
-D  print list of interfaces and exit
-L  print list of link-layer types of iface and exit