I use this to run Wireshark on local desktop with live traffic from remote server
e.g. excludes port 22/53
ssh root@host tcpdump -U -s0 'not port 22 and not port 53' -w - | wireshark -k -I -
e.g. excludes port 22/53
ssh root@host tcpdump -U -s0 'not port 22 and not port 53' -w - | wireshark -k -I -
You can achieve the same under Windows using putty/plink:
plink.exe -ssh -pw password root@host "tcpdump -ni eth0 -s 0 -w - not port 22" | "C:\Program Files\Wireshark\Wireshark.exe" -k -i -
Of course you need to have tcpdump as a command line executable in the host.