Glossary: Logs and Data Sources for Investigations

tshark

The command-line version of Wireshark. -Y applies a display filter, -e picks fields, and -z follow,tcp rebuilds a TCP connection as text.