#!/bin/bash

[[ -z $1 ]] && echo what XEN box should we sniff from? && exit 1
box=$1

#ssh $box -l root which tcpdump
# netbsd wants full path
ssh $box -l root -p 2222 "/usr/sbin/tcpdump -n -e -i xenbr0 -s0 -w - -U not tcp port 2222" | wireshark -k -i -

# https://www.wireshark.org/docs/man-pages/sshdump.html
# https://ask.wireshark.org/question/2506/how-do-i-use-ssh-remote-capture-in-wireshark/