show capture interface

Ze command

Registry path

show capture interface

Usage

show capture interface [iface <iface>] [count <count>] [duration <duration>] [snap-len <snap-len>] [format <pcap|text>] [protocol <protocol>]

Mode

Read-only

Wire method

ze-show:capture-interface

Backends

any backend

Task support

optional: the MCP call is synchronous, which is the default

Subcommands

none: this command takes no subcommand

Pipes, always

json, ndjson, table, text, yaml, raw, no-more, save

Pipes, when the answer has rows

match, count, first, last, display, fill

Pipes, while streaming

log

Pipes, local process only

save

Description

Uses AF_PACKET for zero-copy capture. Filter by protocol and port. Limit with
count or duration. Output as pcap (for Wireshark) or text. Snap-len controls
how many bytes per packet are captured.

Arguments