How to Run a Packet Capture on Remote Linux Machine with Wireshark

This is a quick video on how to run a packet capture on a remote linux machine using Wireshark. This is similar to other methods that involve using putty's plink utility, but in my opinion this is simpler.

[BoonieOetGelaen]

Thanks for your explanation. This makes life way easier than before using tcpdump and transferring the capture for local analyses.

[wonderlandtv]

Sorry. the video is explanatory enough but i did everything several times, ssh connection between my windows and linux works fine but wireshark just won't connect to that ubuntu linux vm on the other end. kept giving this error. Error by extcap pipe: tcpdump: enp0s3: You don't have permission to capture on that device
(socket: Operation not permitted) enp0s3 is the name of the interface on the linux machine . ANY SUGGESTIONS?

[TheSwayzeTrain]

Very helpful thanks. I had WireShark installed but couldnt figure out why I couldnt capture traffic between my Ubuntu VM and my host machine. I was missing SSH dump in tools.

[kitcat]

Thank you, very helpful as I was missing the SSH.... :D

[talesmaschio]

Thank you very much, this solved a big problem for me.

[francesco]

How did you get the option of the SSH remote capture? I can't seem to get it...

[МихаилЧеботарев-дю]

And a few months ago the video salvage me again!)

[blastmane]

Wireshark helped Me a lot To Detect Malware In my Router I Detected It Using Wireshark and Reset My Router