tldr/pages/common/dumpcap.md

dumpcap

A network traffic dump tool. More information: https://www.wireshark.org/docs/man-pages/dumpcap.html.

• Display available interfaces:

dumpcap --list-interfaces

• Capture packets on a specific interface:

dumpcap --interface {{1}}

• Capture packets to a specific location:

dumpcap --interface {{1}} -w {{path/to/output_file.pcapng}}

• Write to a ring buffer with a specific max file limit of a specific size:

dumpcap --interface {{1}} -w {{path/to/output_file.pcapng}} --ring-buffer filesize:{{500000}} --ring-buffer files:{{10}}