Flatpak Wireshark Live Capture

General
1

Here’s a useful trick to use flatpak wireshark with live packet captures. This is possible because bluefin ships with tcpdump by default.

sudo tcpdump -U -i $INTERFACE -w - | flatpak run org.wireshark.Wireshark -k -i -

What this command is doing:

  • sudo tcpdump: runs packet captures
    • -U : basically enables live output of captures packets
    • -w - : writes raw packets to stdout
  • flatpak run org.wireshark.Wireshark
    • -k start capture session
    • -i - stdin pipe

TCPDUMP Manual
Wireshark Manual

4 Likes