This tool will be there for almost all Un*xen you will find, TShark might not. For example, you might want to do a remote capture and either dont have GUI. If you do a lot of network capturing it is well worth the effort to learn all the command line switches to TcpDump for the same reason learning VI is useful. Its often more useful to capture packets using tcpdump rather than wireshark. TcpDump lives at TcpDump is also the place where LibPcap lives LibPcap is the standard API and CaptureFile format used by Wireshark and TShark as well as many many other tools. TcpDump is standard and distributed with many many Un*x-like operating systems (except the one coming with the tool you will find by googling for 'The Interface From Hell') Now that tcpdump has been installed on your system, let's explore the different options and functionalities it offers.A different tool similar to TShark. This should install the tcpdump utility and solve the 'command not found' error. Note that if you're asked to install libcap, type in Yes or Y as it is a core dependency, without which tcpdump will refuse to start up. The packet capture utility used by tcpdump is provided by libpcab, which is a C/C++ library of procedures.

To install the tcpdump utility on Fedora, CentOS, and RHEL, issue the following command: sudo dnf install tcpdump On Arch-based systems, run: sudo pacman -S tcpdump

On Debian/Ubuntu derivatives, run: sudo apt- get install tcpdump To install tcpdump, fire up the terminal and run the command corresponding to the Linux distro that you're currently using: In case you are unable to run the tcpdump command and are stuck at the ' tcpdump: command not found' error, let's learn how to install tcpdump on your Linux machine. So you should be able to use it right away by typing in tcpdump with a sudo prefix. Tcpdump usually comes pre-installed with all mainstream Linux distributions and security-based alternatives.

Tcpdump wireshark