tshark -i eth0 -T fields -e http.host -e http.request.uri

Category: Networking

tshark -i eth0 -T fields -e http.host -e http.request.uri

Extract HTTP hostnames and URIs from live traffic

tshark is Wireshark's command-line version. -T fields with -e lets you extract specific protocol fields in a tabular format. Great for quickly auditing what domains a machine is contacting.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.