Chapter 8. Command-line and Other Utilities

Wireshark includes a number of command-line utilities to manipulate packet trace files and offer GUI-free packet captures, and there are a few other tools that can help round out your analysis toolset.

The topics that will be covered in this chapter include:

• Capturing traffic with Dumpcap and Tshark
• Editing trace files with Editcap
• Merging trace files with Mergecap
• Other helpful tools