Redirect tcpdump from linux to Wireshark on Windows

plink.exe -ssh <user>@<linux-host> "sudo tcpdump -nnieth1 -s65535 -w -" | "c:\Program Files\Wireshark\Wireshark.exe" -k -i -

Tcpdump switch '-U' (--packet-buffered) may be useful to disable packet buffering and thus speed up data transfer to wireshark.

Useful info:

https://kaischroed.wordpress.com/2013/01/28/howto-use-wireshark-over-ssh/

http://danielflannery.ie/running-wireshark-over-ssh-windows/

https://wiki.wireshark.org/CaptureSetup/Pipes#Remote_Capture