Comment by chatmasta

You can do this with any capture device if you pipe the output to a FIFO handle and open it in wireshark. It can be a bit janky and you’re usually better off using the GUI configs when they’re available. But it gives you a bunch of flexibility to do things like “capture tcpdump in a docker exec in an SSH session on a remote host” [0].

[0] https://gist.github.com/milesrichardson/fcec8c6d54a21845dd9f...