Saving tcpdump remotely tcpdump -i eth0 -w - | ssh www.remotehost.com "cat - > /tmp/remotecapture.pcap"