Termshark

termshark

A wireshark-inspired terminal user interface for tshark. Analyze network traffic interactively from your terminal.

Runs as termshark|macOS, Linux, Windows|termshark.io

Open form in Otty otty.toml

Command form

ai-draft · 2 tasks · 4 fields

Open a pcap file or capture from an interface in termshark's terminal UI. Decode-as and pass-through options are left out.

Opens the form; the finished command lands at your prompt, unrun

Run in Otty

otty gui termshark

Analyze packetsExample values, fixed in this page — nothing here reaches a terminal

Basic

Pcap file*

file

Display filter

string

TasksEach one presets the form for one job

Open a pcap file

pcapdisplay_filter

Capture live

interfacecapture_filter

ParametersOnly these flags are editable in the form

Pcap file

path

-r

Capture interface

string

-i

Display filter

Wireshark display filter applied to the packets shown.
string

-Y

Capture filter

BPF filter used when capturing from an interface.
string

-f

SourcesEvery flag above is checked against these

manpage

termshark [options] [FilterOrFile] -i=interface Interface to read. -r=file Pcap file to read. -Y=displaY_filter Apply display filter. -f=capture_filter Apply capture filter.

manualtermshark 2.4.0-5

manpages.debian.org

Before it fills your prompt, Otty checks the installed termshark against its version. A form that does not match your version is not offered.