Ethereal-dev: RE: [Ethereal-dev] Capturing from multiple interfaces [skin the cat another way]

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "John Bourke" <John.Bourke@xxxxxxxxxxxxxxxxxx>
Date: Tue, 1 Oct 2002 22:12:28 +0100
Folks,
 
From Intel.
 
"Adaptive Load Balancing (ALB)
Offers increased network bandwidth by allowing transmission over 2-8 ports to multiple destination addresses, and also incorporates Adapter Fault Tolerance. Only the primary receives incoming traffic. Only the primary transmits broadcasts/multicasts and non routed protocols. The ANS software load balances transmissions, based on Destination Address, and can be used with any switch. Simultaneous transmission only occurs at multiple addresses Implemented in Microsoft Windows 2000, XP, and Windows NT 4; NetWare 4.11 and above; UnixWare 7.x with ddi8; and Linux. This mode can be connected to any switch.
  • Receive Load Balancing (RLB)
    Offers increased network bandwidth by allowing reception over 2-8 ports from multiple addresses. Can only be used in conjunction with ALB. Only the adapters connected at the fastest speed will be used to load balance incoming TCP/IP traffic. The primary, regardless of speed, will receive all other RX traffic. Can be used with any switch. Any failover will increase network latency until ARPs are re-sent. Simultaneous reception only occurs from multiple clients. Available for Microsoft Windows 2000, XP, and Windows NT 4.
 
See
 
http://support.intel.com/support/network/adapter/ans/teaming.htm
 
Not for Linux though.
 
john
 
-----Original Message-----
From: John Bourke [mailto:John.Bourke@xxxxxxxxxxxxxxxxxx]
Sent: 01 October 2002 21:41
To: ethereal-dev@xxxxxxxxxxxx
Subject: [Ethereal-dev] Capturing from multiple interfaces [skin the cat another way]

Folks,
 
I have eight LANs which I monitor at once.  Each LAN uses a Cisco Catalyst switch, and has a monitoring port to allow me to see all of the traffic on the switch.  The monitoring ports on the switches are up linked to another switch which acts as an aggregator.  This allows me to monitor all traffic on all LANs.
 
Now I have a similar smaller problem, which is to monitor two LANs at the same time.
 
Does anyone know of an Ethernet card which has two interfaces, but which presents itself as one interface (It would be nice of each port still had it's own MAC address).  This way I can still select the interface(s).
 
I'm running Linux, but I do not want to capture on "Any" interface, as described in previous postings.
 
Incidentally, how do I use this "Any" feature ?
 
 
Many thanks
 
john