Use wireshark remotelly on another host and the UI locally

to use wireshark remotelly and the UI locally first you need to have wireshark installed and then create a command (bin/rwireshark) with this content:

#!/bin/bash
HOST=$1
shift
TCPDUMP_ARGS=$@
wireshark -i <(ssh "$HOST" sudo tcpdump -s 0 -U -n -w - $TCPDUMP_ARGS)

to use basically you can do the following:

rwireshark [hostname/ip] [other tcpdump parameters]