Tshark Interface Selection - Tip 8 (Laura Chappell) (iv)

Tshark is the command-line capture tool that comes with Wireshark (look in the Wireshark program directory and consider adding this directory to your path so you can run Tshark from your trace file directory). Type tshark -D (must be a capital "D") to view the interface list. If you

want to capture traffic on the third interface listed, you would use tshark -i 3 (the "i" parameter indicates the interface number you want to capture on).