Saturday, September 18, 2010

tshark (CLI) from wireshark (GUI) {gonna sniff your packets}

there is a wonderful CLI utility tcpdump to handle packet sniffing... but there is also one similar utility with the power of Wireshark at command line known as TSHARK (if you don't know)


so, to use it you just need to install Wireshark in plain old-skool way like
#yum install wireshark
and then to start 'tshark', you need to simply run it like
#tshark
but in some cases, on running '#tshark' if it gives error like 
tshark: error while loading shared libraries: libsmi.so.2: cannot open shared object file: No such file or directory

so, you just need to install one more library, which gets failed to install automatically still required
#yum install libsmi
and then run '#tshark' smoothly

1 comment:

balaji phaneedra kumar said...

Is there a way to run wireshark from cli and output shall be on cli not on GUI.
I am getting rawshak "is neither an interface nor a pipe" for capture packet.

Version info
Rawshark 1.4.13
wireshark-1.4.13-1
libsmi-0.4.8-6