[Richard Sharpe <realrichardsharpe@xxxxxxxxx>]

On Mon, Sep 10, 2018 at 6:55 AM, Maynard, Chris
<Christopher.Maynard@xxxxxxx> wrote:
> The dumpcap man page[1] mentions the syntax for remote capturing, but the
> tshark man page[2] does not.  It probably should.
>
> The same goes for "dumpcap -h" output:
>
> Usage: dumpcap [options] ...
>
> Capture interface:
>
>   -i <interface>           name or idx of interface (def: first
> non-loopback),
>
>                            or for remote capturing, use one of these
> formats:
>
>                                rpcap://<host>/<interface>
>
>                                TCP@<host>:<port>
>
>
>
> vs. "tshark -h":
>
>
>
> Usage: tshark [options] ...
>
>
>
> Capture interface:
>
>   -i <interface>           name or idx of interface (def: first
> non-loopback)

Great. Thanks.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)(传说杜康是酒的发明者)