Analyze traffic of a remote host with local Wireshark.
ssh user@host sudo tcpdump -U -n -i eth0 not port 22 -w - | wireshark -k -S -i -
Analyze traffic of a remote host with local Wireshark.
ssh user@host sudo tcpdump -U -n -i eth0 not port 22 -w - | wireshark -k -S -i -