Intro to Wireshark Tutorial // Lesson 3 // Capturing Packets with Dumpcap

Let's continue with our Intro to Wireshark course with lesson 3 - learn how to capture traffic from the command line with Dumpcap. In high-throughput environments, or for those that like to use tools from the command line, this is a great way to bring in traffic for later analysis.
We will learn how to select an interface, save the pcap, and store traffic in a ring buffer.
Temporary path command on MacOS: PATH/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:/Applications/Wireshark.app/Contents/MacOS
Permanent addition to shell path on MacOS:
https://wpbeaches.com/how-to-add-to-the-shell-path-in-macos-using-terminal/
Permanent path entry on Windows 10:
https://helpdeskgeek.com/windows-10/add-windows-path-environment-variable/
More info on dumpcap options:
https://www.wireshark.org/docs/man-pages/dumpcap.html
Please smash the like button to let me know if you dig this content!
More On-Demand Training from Chris
Getting Started with Wireshark - https://bit.ly/udemywireshark
Getting Started with Nmap - https://bit.ly/udemynmap
Live Wireshark Training
TCP/IP Deep Dive Analysis with Wireshark - https://bit.ly/virtualwireshark
Private Wireshark Training
Let's get in touch - https://packetpioneer.com/product/private-virtual-classroom/
Chapters in video:
0:00 Intro
0:58 Adding Command Line tools to Path
4:30 Capturing traffic with dumpcap
6:25 Writing traffic to a file
7:12 Writing traffic to a ring buffer
10:27 Why use the command line instead of Wireshark GUI?