Wireshark-dev: Re: [Wireshark-dev] Multiple interfaces at wireshark

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 24 Oct 2008 00:54:43 -0700

On Oct 23, 2008, at 10:56 PM, Gaurav1 Jain wrote:
How is it possible to capture multiple interfaces simultaneously when DLT_TYPE is different for these interfaces?
Multiple instances of tcpdump/dumpcap/Wireshark/TShark/etc., writing to separate files.
Then you run separate instances of tcpdump/Wireshark/TShark/etc. to look at the separate files.
(I.e., no, it can't be done in one instance of tcpdump/dumpcap/ Wireshark/TShark.)