Ha, fair. tshark in a shell works fine, the only reason to wrap it is typed output and not handing the agent a raw shell.