adding a sh which can do tshark