---
name: "termshark"
section: "1"
platform: "linux"
package: "termshark"
version: "2.4.0-2+b8"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/termshark"
---

# termshark(1)

A wireshark-inspired terminal user interface for tshark

## NAME

**termshark** - A wireshark-inspired terminal user interface for tshark

## SYNOPSIS

**termshark** \[options\] \[FilterOrFile\]

## DESCRIPTION

A wireshark-inspired terminal user interface for tshark. Analyze network traffic interactively from your terminal. See https://github.com/gcla/termshark for more information.

## OPTIONS

- **-i**=*interface*

  Interface to read.

- **-r**=*file*

  Pcap file to read.

- **-d**=*layer\_type*==*selector*,*decode-as protocol*

  Specify dissection of layer type.

- **-Y**=*displaY\_filter*

  Apply display filter.

- **-f**=*capture\_filter*

  Apply capture filter.

- **--pass-thru**=\[yes\|no\|auto\|true\|false\]

  Run tshark instead (auto =\> if stdout is not a tty). (default: auto)

- **--log-tty**=\[yes\|no\|true\|false\]

  Log to the terminal.. (default: false)

- **-h**, **--help**

  Show this help message.

- **-v**, **--version**

  Show version information.

## ARGUMENTS

**FilterOrFile**

-

  ```
  Filter (capture for iface, display for pcap), or pcap file to read.
  ```

-

  ## SEE ALSO

[tshark(1)](/tshark/1.md)