Comment by gorgonq

You can even let tcpdump write packets to stdout, then pipe directly to your local wireshark and get a live view:

    ssh your-host tcpdump -w - -U 'not port 22' | wireshark -i - -k

makes sense to exclude port 22 from the dump =)