A terminal UI for tshark, inspired by Wireshark
Termshark is a terminal user-interface for tshark that copies Wireshark’s layout – it tries to be Wireshark for the terminal. For me, its main use is when you’re ssh-ed in to a remote machine and want to look at a pcap (or live traffic) quickly without copying anything back to your desktop. Termshark v2 is snappier than v1 and features dark mode, piped input, stream reassembly and more. You can see the ChangeLog via the website, https://termshark.io, and there are binaries on github at https://github.com/gcla/termshark.

Was this post helpful?