Hmm, XForwarding Wireshark is one of the only reasons I use XForwarding, I should see what this can do.