[<grisha@xxxxxxxxx>]

Hello

Sorry if this is a naive question, I'm just getting acquainted with
ethereal.

A while back I asked (I think it was on this list) if ethereal supports
capture from multiple interfaces, and someone replied that it does, but I
don't seem to be able to figure out how.

I did some searching through the list and some long time ago someone was
questioning the need for such a feature in someone's "feature wish list".

In an application where you use a tap to sniff data, it is pretty much a
requirement. The typical set up would be a tap (usually an optical
splitter, but there are taps for 100Mb ethernet as well) on both transmit
and receive. Then the tapped output from each TX and RX is sent to
receives on two different network cards.

                  +-----------------------+
                  |   analyzer machine    |
                  |                       |
          +----->RX of interface 1        |
          |       |                       |
          |   +->RX of interface 2        |
          |   |   |                       |
          |   |   +-----------------------+
          |   |
TX ----> tap --------> RX
              |           
RX <-------- tap <---- TX


It would be nice if ethereal allowed combining data from two of these
cards into one capture to be able to make better sense of the data.

Any advice/comments would be appreciated.

Thank you,

Grisha