Remote capturing with wireshark

I always forget these parameters so better keep ’em here.

Full Console output:

tcpdump -nnXSs 0 -i eth0 port 389

Remote cap:

ssh root@HOST tcpdump -U -s0 -i eth0 -w - 'not port 22' and port 389 | wireshark -k -i -