Tcpdump: capture paket dalam format pcap utk wireshark

tcpdump -ni eth0 -s0 -w /var/tmp/capture.pcap
tcpdump -i eth0 -s 0 -w ./dump.pcap

is sufficient.

Referensi

• https://ask.wireshark.org/questions/19054/tcpdump-text-output-to-pcap