← All Kali Commands
🦈 Sniffing & Spoofing Wireshark

Filter by IP

Wireshark command for filter by ip. Copy the command below and use it in your terminal.

wireshark — terminal
┌──(kali㉿kali)-[~]
└─$ tshark -i eth0 -Y "ip.addr==192.168.1.1"
Tool
Wireshark
Category
Sniffing & Spoofing
Purpose
Filter by IP

🛡️ Usage Tips

  • Always ensure you have proper authorization before using Wireshark against any target
  • Replace target with the actual IP address or hostname you are testing
  • Run this command from a Kali Linux terminal or any system with Wireshark installed
  • Combine with other Wireshark commands for more comprehensive results
  • Pipe output to a file with > output.txt for later analysis

🔗 More Wireshark Commands

wireshark
Launch GUI
tshark -i eth0
CLI capture
tshark -i eth0 -w cap.pcap
Save to file
tshark -r cap.pcap -Y "http.request"
Filter HTTP requests
tshark -i eth0 -f "port 80"
Capture filter port 80
tshark -r cap.pcap -Y "dns"
DNS traffic
tshark -r cap.pcap -Y "tcp.flags.syn==1"
SYN packets
tshark -r cap.pcap -T fields -e http.host
Extract HTTP hosts
tshark -r cap.pcap -z conv,tcp
TCP conversations
tshark -r cap.pcap -z io,stat,1
IO statistics per second
tshark -i eth0 -a duration:60
Capture 60 seconds
tshark -i eth0 -c 1000
Capture 1000 packets

🦈 Other Sniffing & Spoofing Tools

TCPDump Ettercap Bettercap Responder Scapy mitmproxy
📚 Learn Kali Linux — Free Course