Decided to use tcpdump instead of tshark

Saves space and provides enough useful information