TERMSHARK(1)

πŸ’– TERMSHARK(1) πŸ’–

okay bestie, welcome to termshark β€” the manual page, but make it cute. yes it's a TERMSHARK(1) page, section 1, user commands, and yes I'm about to make packet analysis feel like a group chat. πŸ¦‹


✨ NAME ✨

termshark β€” a wireshark-inspired terminal user interface for tshark πŸ‘‘


🌸 SYNOPSIS 🌸

termshark [options] [FilterOrFile]

🫢 DESCRIPTION 🫢

So basically: termshark is a wireshark-inspired terminal user interface for tshark. That's the whole vibe. You get to analyze network traffic interactively from your terminal β€” no GUI, no drama, just you, your cursor and a whole lot of packets. πŸ’…

If you want the tea, the lore, the full story, it's all over here: https://github.com/gcla/termshark ✨


πŸ’… OPTIONS πŸ’…

  • -i=interface β€” the interface you wanna read from. pick your fave. 🌈
  • -r=file β€” a pcap file to read. yes, the file. that one. πŸ“
  • -d=layer_type==selector,decode-as protocol β€” specify dissection of layer type. lowkey giving "tell me what this actually is" energy. 🧚
  • -Y=displaY_filter β€” apply a display filter. capital Y bestie, don't forget. πŸ”
  • -f=capture_filter β€” apply a capture filter. different filter, different job, same icon behaviour. πŸŽ€
  • --pass-thru=[yes|no|auto|true|false] β€” run tshark instead. (auto => if stdout is not a tty). default: auto. so if you're piping stuff, it'll just hand the whole thing over to tshark β€” iykyk. πŸ”₯
  • --log-tty=[yes|no|true|false] β€” log to the terminal.. default: false. (yes there are two dots in the original, I'm not fixing it, it's iconic.) πŸ’€
  • -h, --help β€” show this help message. it's giving helpful. 🫢
  • -v, --version β€” show version information. 🌟

⭐ ARGUMENTS ⭐

FilterOrFile

Filter (capture for iface, display for pcap), or pcap file to read.

so like β€” if you're going through an interface, that argument is a capture filter. if you're reading a pcap, it's a display filter. or it's just a pcap file. one slot, three moods. main character energy fr fr. πŸ‘‘


🌈 SEE ALSO 🌈


real talk: everything above is exactly what the page says, I just said it with my whole chest. πŸ’–

and that's the page!! April 2019, TERMSHARK(1), that's the date and that's the section, mwah πŸ’‹ β€” go capture some packets bestie, you're gonna slay πŸŽ€βœ¨πŸ¦‹