Jump to content

User:Ema/Tshark

From Wikitech

Running `tshark` on production machines:

 PUSER=nobody
 /usr/sbin/tcpdump -Z $PUSER -npi eth0 -w - 'dst port 443' |
   su $PUSER -s /bin/sh -c "/usr/bin/tshark -n -r - -Y 'tcp.option_kind == 34'"