Platform plugin "xcb" in "/opt/wireshark/libs/Qt/plugins/platforms" even though it was found. This is the error message I get when I try to run wireshark qt.qpa.xcb: could not connect to display qt.qpa.plugin: Could not load the Qt (I also tried this on a AWS instance Ubuntu and got the same error) This way the ssh command gets executed and the tcpdump starts in the remote host, the wireshark never starts.I'm trying to run wireshark on ubuntu 20.4 on the WSL2 on windows(pc). With this in mind I tried to change the command to ssh sudo tcpdump -vv -i eth0 -U -w - | & 'C:\Program Files\Wireshark\Wireshark.exe' -k -i. It opens wireshark and waits for data input. If I execute the wireshark command without the ssh part I get the same error, but if I execute it like this & 'C:\Program Files\Wireshark\Wireshark.exe' -k -i. + FullyQualifiedErrorId : UnexpectedToken + CategoryInfo : ParserError: (:), ParentContainsErrorRecordException Unexpected token '-i' in expression or statement. Unexpected token '-k' in expression or statement. i eth0 -U -w - | 'C:\Program Files\Wireshark\Wireshark.exe' -k -i. If i execute the following command in windows in a powershell ssh sudo tcpdump -vv -i eth0 -U -w - | 'C:\Program Files\Wireshark\Wireshark.exe' -k -i. Given this restriction, I was trying to achieve the same result, but in windows. I was exploring the command below, and it works fine in linux ssh sudo tcpdump -vv -i eth0 -U -w - | wireshark -k -i -īut, unfortunately, my work laptop that is provided by my company has windows on it, and they don't allow me to change to another OS.
In my day-to-day operations, I frequently need to execute tcpdump's on remote servers, and it's a pain to save the output to a file and then have to move the file to my laptop to analyze it on wireshark.