Ze command
Description
Capture live packets on an interface (like tcpdump).
Uses AF_PACKET for zero-copy capture. Filter by protocol and port.
Limit with count or duration. Output as pcap (for Wireshark) or text.
Snap-len controls how many bytes per packet are captured.
Arguments
| Name | Type | Required |
|---|---|---|
count | uint | no |
duration | string | no |
format | enum | no |
iface | string | no |
protocol | string | no |
snap-len | uint | no |