Ethereal-dev: Re: [Ethereal-dev] Capturing from multiple interfaces at once ...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Sharpe <rsharpe@xxxxxxxxxx>
Date: Fri, 12 Apr 2002 02:42:37 +0930 (CST)
On Thu, 11 Apr 2002, Andrew C. Feren wrote:

> Richard Sharpe <rsharpe@xxxxxxxxxx> writes:
> 
> > Hi,
> > 
> > Sorry to be asking again, as I recall seeing something about this before, 
> > but I need to capture from multiple interfaces at once.
> > 
> > [How] does Ethereal support this?
> 
> Would it be sufficient to run [t]ethereal once on each interface and
> merge the captures with mergecap after the fact?  

Hmmm, no, I want to preserve, as much as possible, the timing 
relationship between packets on the two interfaces without guess work.

Also, I guess I should come clean. I want this for FreeBSD. I could 
probably hack tcpdump to capture from both interfaces at ones ... 


Regards
-----
Richard Sharpe, rsharpe@xxxxxxxxxx, rsharpe@xxxxxxxxx, 
sharpe@xxxxxxxxxxxx