Wireshark is a well-known tool used to monitor and analyze network traffic. It helps you capture packets, check network activity, and understand how data moves over the internet. Tshark is the command-line version of Wireshark, which allows you to do all these tasks directly from the terminal in a simple way.
Installation Commands
Update and upgrade all Termux packages:
pkg update && pkg upgrade
Install required repository:
pkg install root-repo
Install Tshark in Termux:
pkg install tshark
Check if Tshark is installed successfully:
tshark -v
Usage Commands
Show available network interfaces:
tshark -D
Start capturing packets:
tshark
Capture packets from a specific interface:
tshark -i 1
Capture only a limited number of packets:
tshark -c 10
Save captured packets to a file:
tshark -w capture.pcap
Read packets from a saved file:
tshark -r capture.pcap








