Uploaded April 2021 | Updated September 2026, 1 day ago
Let's continue with our Intro to Wireshark course with lesson 3 - learn how to capture traffic from the command line with Dumpcap. In high-throughput environments, or for those that like to use tools from the command line, this is a great way to bring in traffic for later analysis.
We will learn how to select an interface, save the pcap, and store traffic in a ring buffer.
Temporary path command on MacOS: PATH=/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/Applications/Wireshark.app/Contents/MacOS
Permanent addition to shell path on MacOS:
wpbeaches.com/how-to-add-to-the-shell-path-in-macos-using-terminal
Permanent path entry on Windows 10:
helpdeskgeek.com/windows-10/add-windows-path-environment-variable
More info on dumpcap options:
wireshark.org/docs/man-pages/dumpcap.html
Please smash the like button to let me know if you dig this content!
// Get Wireshark Certified //
Check out the official training course
ð GET TRAINING: packetschool.teachable.com/l/pdp/official-wireshark-certified-analyst?coupon_code=PACKETHEAD50
== Private Wireshark Training ==
Let's get in touch - packetpioneer.com/custom-training-request
Chapters in video:
0:00 Intro
0:58 Adding Command Line tools to Path
4:30 Capturing traffic with dumpcap
6:25 Writing traffic to a file
7:12 Writing traffic to a ring buffer
10:27 Why use the command line instead of Wireshark GUI?
Let's continue with our Intro to Wireshark course with lesson 3 - learn how to capture traffic from the command line with Dumpcap. In high-throughput environments, or for those that like to use tools from the command line, this is a great way to bring in traffic for later analysis.
We will learn how to select an interface, save the pcap, and store traffic in a ring buffer.
Temporary path command on MacOS: PATH=/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/Applications/Wireshark.app/Contents/MacOS
Permanent addition to shell path on MacOS:
wpbeaches.com/how-to-add-to-the-shell-path-in-macos-using-terminal
Permanent path entry on Windows 10:
helpdeskgeek.com/windows-10/add-windows-path-environment-variable
More info on dumpcap options:
wireshark.org/docs/man-pages/dumpcap.html
Please smash the like button to let me know if you dig this content!
// Get Wireshark Certified //
Check out the official training course
ð GET TRAINING: packetschool.teachable.com/l/pdp/official-wireshark-certified-analyst?coupon_code=PACKETHEAD50
== Private Wireshark Training ==
Let's get in touch - packetpioneer.com/custom-training-request
Chapters in video:
0:00 Intro
0:58 Adding Command Line tools to Path
4:30 Capturing traffic with dumpcap
6:25 Writing traffic to a file
7:12 Writing traffic to a ring buffer
10:27 Why use the command line instead of Wireshark GUI?
