Ethereal doesn't support capturing two streams simultaneously, though
you could capture each stream with two different instances of Ethereal
and then merge them together. However, like you said, predicting start
& stop times to synchronize may be difficult. I had a similar
requirement about a year and a half ago, though never found a "perfect"
solution, especially on Windows.
I believe you *could* try using tethereal, and write a tiny script that
captures a certain amount of data/packets from each stream. When one
copy of tethereal exits (presumably because you've hit the capture
limit) you could also instruct the other instance of tethereal to exit
(which may be much easier if you have cygwin or something similar
installed).
Ian
On Nov 2, 2004, at 10:21 AM, awatthey@xxxxxxx wrote:
Hi,
I am running Ethereal 0.10.7 (the latest) on my Windows XP system.
Apart
from the LAN network adapter, I have installed two DLINK cards and
connect
these to a TAP kit which sits between my gateway and my switch.
Is there any way of getting ethereal to collect data from BOTH these
cards
at the same time? Using a TAP kit gets the packets received by the
gateway
on one card and the packets sent by the gateway on the other so I need
both
to be collected at the same time.
I have run two ethereal captures (one on each card) and that does work
and
I have merged the two captures together successfully. However, I want
to
set the trace going to capture a few megabytes of data and three is no
way
I can know how much would come in on each card so that both captures
end at
the same time.
I know I can BOND interfaces together on Linux (and we do that
elsewhere)
but that is not what I'm running here.
Any ideas (or alternate ways of doing the above) would be greatly
appreciated.
Regards,
Alan.
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users