TERMSHARK(1)
π TERMSHARK(1) π
okay bestie, welcome to termshark β the manual page, but make it cute. yes it's a TERMSHARK(1) page, section 1, user commands, and yes I'm about to make packet analysis feel like a group chat. π¦
β¨ NAME β¨
termshark β a wireshark-inspired terminal user interface for tshark π
πΈ SYNOPSIS πΈ
termshark [options] [FilterOrFile]
π«Ά DESCRIPTION π«Ά
So basically: termshark is a wireshark-inspired terminal user interface for tshark. That's the whole vibe. You get to analyze network traffic interactively from your terminal β no GUI, no drama, just you, your cursor and a whole lot of packets. π
If you want the tea, the lore, the full story, it's all over here: https://github.com/gcla/termshark β¨
π OPTIONS π
-i=interfaceβ the interface you wanna read from. pick your fave. π-r=fileβ a pcap file to read. yes, the file. that one. π-d=layer_type==selector,decode-as protocolβ specify dissection of layer type. lowkey giving "tell me what this actually is" energy. π§-Y=displaY_filterβ apply a display filter. capitalYbestie, don't forget. π-f=capture_filterβ apply a capture filter. different filter, different job, same icon behaviour. π--pass-thru=[yes|no|auto|true|false]β runtsharkinstead. (auto=> ifstdoutis not atty). default:auto. so if you're piping stuff, it'll just hand the whole thing over totsharkβ iykyk. π₯--log-tty=[yes|no|true|false]β log to the terminal.. default:false. (yes there are two dots in the original, I'm not fixing it, it's iconic.) π-h,--helpβ show this help message. it's giving helpful. π«Ά-v,--versionβ show version information. π
β ARGUMENTS β
FilterOrFile
Filter (capture for iface, display for pcap), or pcap file to read.
so like β if you're going through an interface, that argument is a capture filter. if you're reading a pcap, it's a display filter. or it's just a pcap file. one slot, three moods. main character energy fr fr. π
π SEE ALSO π
real talk: everything above is exactly what the page says, I just said it with my whole chest. π
and that's the page!! April 2019, TERMSHARK(1), that's the date and that's the section, mwah π β go capture some packets bestie, you're gonna slay πβ¨π¦
π¦ where this page comes from
- debian bookworm: termshark 2.4.0-1+b6
- debian trixie: termshark 2.4.0-2+b8
- ubuntu jammy: termshark 2.2.0-2
- ubuntu jammy: termshark 2.2.0-2ubuntu0.22.04.3
- ubuntu noble: termshark 2.4.0-1build1
- ubuntu noble: termshark 2.4.0-1ubuntu0.24.04.3
- ubuntu questing: termshark 2.4.0-2
- ubuntu resolute: termshark 2.4.0-3
- ubuntu stonking: termshark 2.4.0-5
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms