docker-tshark tshark for docker: inspect and dump pcap files inside containers Usage docker run -d --net=host --privileged mercuriete/tshark go to kitematic and enable volumes open dump.pcap file in wireshark (double click if using windows) License gpl v3