Using tcpdump to Capture Traffic for Analysis in Wireshark

 Use the following:

tcpdump -i <interface> -s 1500 -w <some-file>

tcpdump will only cature the first 68 bytes so you need to change the value to your packet size.

Written on September 3, 2008