SHARKD(1) SHARKD(1) (NAME) sharkd - JSON-RPC (SYNOPSIS) sharkd [ -a|--api ] [ --foreground ] [ -C|--config-profile ] sharkd - sharkd -h|--help sharkd -v|--version (DESCRIPTION) Sharkd (daemon) Wireshark API JSON . (dissection) Wireshark TShark . Sharkd : (console mode) (daemon mode). sharkd JSON-RPC . - sharkd -a . sharkd Unix domain socket TCP socket (session process) (fork) . -a . JSON . JSON-RPC METHODS . JSON-RPC API : . Sharkd . sharkd . -a , --api . sharkd (daemon) (session) (fork) . : unix:path (Unix domain socket) path. unix:/tmp/sharkd.sock. (abstract sockets) @ unix:@sharkd UID . Windows Server 2019 . tcp:address:port TCP address port. tcp:127.0.0.1:4446. IPv6 tcp:[[::1]:5678. TCP (loopback) IPv4 127.0.0.0/8 IPv6 ::1. -a sharkd - sharkd ( ) . --foreground . -a sharkd . -C , --config-profile (configuration profile) . -h, --help . -v, --version . (DIAGNOSTIC OPTIONS) --log-level (log level). "noisy" "debug" "info" "message" "warning" "critical" "error". "warning" "warning" "critical" "error" "noisy" . . --log-fatal . "warning" "warning" "critical" "error" . --log-fatal-count (fatal) . --log-domains "GUI,Epan,sshdump". (,) . "!" ( ). --log-debug "debug". (,) . "!" ( ). --log-noisy "noisy". (,) . "!" ( ). --log-fatal-domains . (,) . --log-file stderr . Sharkd JSON-RPC . jsonrpc "2.0" method id . : analyse . bye . check (display filter). complete . download (reassembled). dumpconf (preferences). field . fields . follow (TCP UDP HTTP ). frame . frames () . info dissector tap . intervals . iograph I/O . load . setcomment . setconf Wireshark. status . tap tap . sharkd : sharkd - sharkd Unix domain socket : sharkd -a unix:/tmp/sharkd.sock sharkd (profile) : sharkd -a unix:/tmp/sharkd.sock -C myprofile : sharkd -a unix:/tmp/sharkd.sock --foreground : $ echo '{"jsonrpc":"2.0","id":1,"method":"load","params":{"file":"/path/to/capture.pcapng"}}' | sharkd - $ echo '{"jsonrpc":"2.0","id":2,"method":"status"}' | sharkd - (ENVIRONMENT VARIABLES) WIRESHARK_CONFIG_DIR . UNIX Linux macOS \*BSD Solaris AIX $XDG_CONFIG_HOME/wireshark ( $HOME/.wireshark $HOME/.wireshark) $HOME/.config/wireshark . Windows %APPDATA%\Wireshark ( %APPDATA% %USERPROFILE%\Application Data\Wireshark). Wireshark 3.0 . WIRESHARK_DEBUG_WMEM_OVERRIDE wmem (allocator backend) . . README.wmem . WIRESHARK_RUN_FROM_BUILD_DIRECTORY ( ) . UNIX Linux macOS \*BSD Solaris AIX root ( setuid) . WIRESHARK_DATA_DIR . UNIX root ( setuid) . WIRESHARK_EXTCAP_DIR extcap . UNIX root ( setuid) . WIRESHARK_PLUGIN_DIR . UNIX root ( setuid) . ERF_RECORDS_TO_CHECK ERF ERF . (20) (false positive) . IPFIX_RECORDS_TO_CHECK IPFIX IPFIX . (20) (false positive) . WIRESHARK_ABORT_ON_DISSECTOR_BUG TShark dissector abort(3) . abort(3) TShark (debugger) ( ) core dump . dissector . WIRESHARK_ABORT_ON_TOO_MANY_ITEMS dissector (tree) ( dissector ) TShark abort(3) . abort(3) TShark (debugger) ( ) core dump . dissector . WIRESHARK_LOG_LEVEL (verbosity) . : critical warning message info debug noisy. . critical error . WIRESHARK_LOG_FATAL (fatal) . (abort) . Error critical warning . Error . WIRESHARK_LOG_DOMAINS (log domains) . . . . '!' . WIRESHARK_LOG_DEBUG debug. . '!' debug . WIRESHARK_LOG_NOISY noisy. (SEE ALSO) wireshark-filter(4), wireshark(1), editcap(1), pcap(3), dumpcap(1), text2pcap(1), mergecap(1), pcap-filter(7) tcpdump(8) (NOTES) Sharkd 4.7.3 . Sharkd Wireshark . Wireshark : . HTML Wireshark : . (AUTHORS) Sharkd Jakub Zawadzki . Sharkd Wireshark Wireshark Wireshark . 2026-09-03 SHARKD(1)