> Does the version in /usr/ports/net/wireshark require X11 to run, or can it be > run from the command line with straight text output? > > (I dont have/want X on the servers). > > -Grant You can use tcpdump and bring the dump file to your local machine where you can use wireshark.