Use Wireshark Directly with XG Firewall via SSH?

Question

I routinely use Wireshark to analyze traffic from a mirrored port on the switch. The only downside to this is I'm limited to capturing on a single port. 
 I've read about methods of piping tcpdump output directly to Wireshark via SSH, such as outlined here: https://osqa-ask.wireshark.org/questions/23609/remote-capture-via-ssh-and-pipe 
 
 This doesn't seem to work on the XG due to it requiring you to make menu selections (5 and 3) to obtain an SSH prompt. 
 Has anyone been successful in getting something like this to work?

LuCar Toni · Accepted Answer

Hi, 
 You can use this KBA: https://community.sophos.com/kb/en-us/127647 
 Or you could use the Advanced Shell with: tcpdump -b -w /tmp/test.pcap 
 (you need -b and -w).