Friday, April 1, 2011

Capture Packets in Linux machine and view it with wireshark

dumpcap -a duration:120 -w output.pcap

120 = means 120 seconds of captures, so you increase or decrease based on your test duration and needs.

output.pcap = is the file name you can make it .cap , so in both cases you can load it by wireshark

No comments: