Comment by jswanson

If you're on a server that doesn't have an X environment set up for wireshark, you can use tcpdump to spit to a file:

   -w     Write the raw packets to file rather than parsing and printing them out.  They can later be printed with the -r option.  Standard output is used if file is ``-''.  See pcap-savefile(5) for a description of the file format.

--

You can then open this file in wireshark on your desktop for easier analysis if you wish.