Wireshark-dev: Re: [Wireshark-dev] Problems with capturing on multiple interfaces

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 20 May 2011 10:05:08 -0700
On May 20, 2011, at 9:49 AM, Jim Young wrote:

> When I used the command:
> 
>  ./dumpcap -I -i en1 -i fw0 -t -n -w iftest.pcapng
> 
> I got the message:
> 
>  "The capture session could not be initiated (That device doesn't support
>  monitor mode)."

Presumably the "-s" option is per-interface, as the appropriate snapshot length might differ based on the link-layer and metadata headers provided.

If so, presumably the "-I" option should be per-interface as well, as it only applies to 802.11 devices.