By default it runs from \Program Files\Wireshark\tshark.exe. Tshark also works if you’ve installed Wireshark for Windows, but you’ll have to set up a path for it. After setting up the configuration file with your CloudShark API key, tshark will send completed captures to your CloudShark repository automatically, or, if you’d rather, when prompted in the command line.
The nice thing about tshark is that it works directly with our CloudShark plug-in for Wireshark. If you’re capturing from a system that can support Wireshark, tshark is a robust tool that allows you to specify a good number of options when determining what to capture, including capture filters, capture buffer size, and the ability to use a ring buffer to continuously create captures of a specific maximum size. Tshark is the command line packet capture tool that comes with Wireshark. Here’s a list of our go-to capture tools (other than Wireshark of course) and the different scenarios in which they can be used.
A common question we get other than where to find example packet captures is which packet capture tools exist that are either free, work in a command line, work directly with CloudShark, or all of the above.
0 kommentar(er)
