# tshark -i eth0 -q -b filesize:5000 -w chico-huxley host 10.1.1.44 Running as user "root" and group "root". This could be dangerous. Capturing on eth0 tshark: Child capture process exited: exit status 2 0 packets captured