Something

# tshark -i eth0 -q -b filesize:5000 -w chico-huxley host 10.1.1.44
Running as user "root" and group "root". This could be dangerous.
Capturing on eth0
tshark: Child capture process exited: exit status 2
0 packets captured